./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-commit-tester/m0_false-unreach-call_drivers-hwmon-s3c-hwmon-ko--130_7a--af3071a-1.c --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version aa418289 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_1ec337dd-a4d7-459f-9600-e176c29f02ec/bin-2019/ukojak/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_1ec337dd-a4d7-459f-9600-e176c29f02ec/bin-2019/ukojak/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_1ec337dd-a4d7-459f-9600-e176c29f02ec/bin-2019/ukojak/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_1ec337dd-a4d7-459f-9600-e176c29f02ec/bin-2019/ukojak/config/KojakReach.xml -i ../../sv-benchmarks/c/ldv-commit-tester/m0_false-unreach-call_drivers-hwmon-s3c-hwmon-ko--130_7a--af3071a-1.c -s /tmp/vcloud-vcloud-master/worker/working_dir_1ec337dd-a4d7-459f-9600-e176c29f02ec/bin-2019/ukojak/config/svcomp-Reach-64bit-Kojak_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_1ec337dd-a4d7-459f-9600-e176c29f02ec/bin-2019/ukojak --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Kojak --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash ad0c37fc2c8e1e9b1468a2381d63a3c4c80429a5 ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................. Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_1ec337dd-a4d7-459f-9600-e176c29f02ec/bin-2019/ukojak/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_1ec337dd-a4d7-459f-9600-e176c29f02ec/bin-2019/ukojak/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_1ec337dd-a4d7-459f-9600-e176c29f02ec/bin-2019/ukojak/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_1ec337dd-a4d7-459f-9600-e176c29f02ec/bin-2019/ukojak/config/KojakReach.xml -i ../../sv-benchmarks/c/ldv-commit-tester/m0_false-unreach-call_drivers-hwmon-s3c-hwmon-ko--130_7a--af3071a-1.c -s /tmp/vcloud-vcloud-master/worker/working_dir_1ec337dd-a4d7-459f-9600-e176c29f02ec/bin-2019/ukojak/config/svcomp-Reach-64bit-Kojak_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_1ec337dd-a4d7-459f-9600-e176c29f02ec/bin-2019/ukojak --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Kojak --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash ad0c37fc2c8e1e9b1468a2381d63a3c4c80429a5 .................................................................................................................................................................................................................................................. Execution finished normally Writing output log to file Ultimate.log Result: ERROR: ExceptionOrErrorResult: IllegalArgumentException: Indexed Sort BitVec undefined --- Real Ultimate output --- This is Ultimate 0.1.23-aa41828 [2018-11-23 16:02:14,927 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 16:02:14,929 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 16:02:14,940 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 16:02:14,940 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 16:02:14,941 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 16:02:14,942 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 16:02:14,944 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 16:02:14,945 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 16:02:14,946 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 16:02:14,947 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 16:02:14,947 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 16:02:14,949 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 16:02:14,950 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 16:02:14,951 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 16:02:14,952 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 16:02:14,953 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 16:02:14,955 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 16:02:14,957 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 16:02:14,959 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 16:02:14,960 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 16:02:14,961 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 16:02:14,963 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 16:02:14,964 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 16:02:14,964 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 16:02:14,965 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 16:02:14,966 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 16:02:14,967 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 16:02:14,968 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 16:02:14,969 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 16:02:14,969 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 16:02:14,970 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 16:02:14,970 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 16:02:14,970 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 16:02:14,971 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 16:02:14,972 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 16:02:14,972 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_1ec337dd-a4d7-459f-9600-e176c29f02ec/bin-2019/ukojak/config/svcomp-Reach-64bit-Kojak_Default.epf [2018-11-23 16:02:14,986 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 16:02:14,986 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 16:02:14,987 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 16:02:14,988 INFO L133 SettingsManager]: * ... to procedures called more than once=ALWAYS [2018-11-23 16:02:14,988 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-23 16:02:14,989 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-23 16:02:14,989 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 16:02:14,989 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-23 16:02:14,989 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 16:02:14,989 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 16:02:14,990 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 16:02:14,990 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 16:02:14,990 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 16:02:14,990 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 16:02:14,990 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 16:02:14,991 INFO L131 SettingsManager]: Preferences of CodeCheck differ from their defaults: [2018-11-23 16:02:14,991 INFO L133 SettingsManager]: * Timeout in seconds=1000000 [2018-11-23 16:02:14,991 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 16:02:14,991 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 16:02:14,991 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 [2018-11-23 16:02:14,992 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 16:02:14,992 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 16:02:14,992 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 16:02:14,995 INFO L133 SettingsManager]: * Trace refinement strategy=PENGUIN [2018-11-23 16:02:14,995 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 16:02:14,995 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2018-11-23 16:02:14,995 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-23 16:02:14,995 INFO L133 SettingsManager]: * To the following directory=dump/ Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_1ec337dd-a4d7-459f-9600-e176c29f02ec/bin-2019/ukojak Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Kojak Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ad0c37fc2c8e1e9b1468a2381d63a3c4c80429a5 [2018-11-23 16:02:15,025 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 16:02:15,037 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 16:02:15,041 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 16:02:15,042 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 16:02:15,043 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 16:02:15,043 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_1ec337dd-a4d7-459f-9600-e176c29f02ec/bin-2019/ukojak/../../sv-benchmarks/c/ldv-commit-tester/m0_false-unreach-call_drivers-hwmon-s3c-hwmon-ko--130_7a--af3071a-1.c [2018-11-23 16:02:15,101 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_1ec337dd-a4d7-459f-9600-e176c29f02ec/bin-2019/ukojak/data/7cce5cd55/c7fd819bf2b64cf08a36dfe54797fec1/FLAG83b8eb9e0 [2018-11-23 16:02:15,547 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 16:02:15,548 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_1ec337dd-a4d7-459f-9600-e176c29f02ec/sv-benchmarks/c/ldv-commit-tester/m0_false-unreach-call_drivers-hwmon-s3c-hwmon-ko--130_7a--af3071a-1.c [2018-11-23 16:02:15,562 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_1ec337dd-a4d7-459f-9600-e176c29f02ec/bin-2019/ukojak/data/7cce5cd55/c7fd819bf2b64cf08a36dfe54797fec1/FLAG83b8eb9e0 [2018-11-23 16:02:16,069 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_1ec337dd-a4d7-459f-9600-e176c29f02ec/bin-2019/ukojak/data/7cce5cd55/c7fd819bf2b64cf08a36dfe54797fec1 [2018-11-23 16:02:16,072 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 16:02:16,074 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 16:02:16,075 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 16:02:16,075 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 16:02:16,079 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 16:02:16,080 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 04:02:16" (1/1) ... [2018-11-23 16:02:16,083 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@37a6dbb6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:02:16, skipping insertion in model container [2018-11-23 16:02:16,083 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 04:02:16" (1/1) ... [2018-11-23 16:02:16,092 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 16:02:16,139 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 16:02:16,534 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 16:02:16,547 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 16:02:16,635 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 16:02:16,669 INFO L195 MainTranslator]: Completed translation [2018-11-23 16:02:16,670 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:02:16 WrapperNode [2018-11-23 16:02:16,670 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 16:02:16,671 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 16:02:16,671 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 16:02:16,671 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 16:02:16,681 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:02:16" (1/1) ... [2018-11-23 16:02:16,701 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:02:16" (1/1) ... [2018-11-23 16:02:16,735 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 16:02:16,735 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 16:02:16,735 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 16:02:16,735 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 16:02:16,743 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:02:16" (1/1) ... [2018-11-23 16:02:16,743 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:02:16" (1/1) ... [2018-11-23 16:02:16,749 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:02:16" (1/1) ... [2018-11-23 16:02:16,749 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:02:16" (1/1) ... [2018-11-23 16:02:16,767 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:02:16" (1/1) ... [2018-11-23 16:02:16,770 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:02:16" (1/1) ... [2018-11-23 16:02:16,774 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:02:16" (1/1) ... [2018-11-23 16:02:16,780 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 16:02:16,781 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 16:02:16,781 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 16:02:16,781 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 16:02:16,782 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:02:16" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_1ec337dd-a4d7-459f-9600-e176c29f02ec/bin-2019/ukojak/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 [2018-11-23 16:02:16,834 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_hwmon_remove_raw [2018-11-23 16:02:16,835 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_hwmon_remove_raw [2018-11-23 16:02:16,835 INFO L130 BoogieDeclarations]: Found specification of procedure dev_get_drvdata [2018-11-23 16:02:16,835 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-23 16:02:16,835 INFO L130 BoogieDeclarations]: Found specification of procedure platform_driver_unregister [2018-11-23 16:02:16,836 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 16:02:16,836 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2018-11-23 16:02:16,836 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_return_value_probe [2018-11-23 16:02:16,836 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-23 16:02:16,836 INFO L130 BoogieDeclarations]: Found specification of procedure hwmon_device_register [2018-11-23 16:02:16,836 INFO L130 BoogieDeclarations]: Found specification of procedure platform_driver_register [2018-11-23 16:02:16,836 INFO L130 BoogieDeclarations]: Found specification of procedure PTR_ERR [2018-11-23 16:02:16,837 INFO L138 BoogieDeclarations]: Found implementation of procedure PTR_ERR [2018-11-23 16:02:16,837 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err [2018-11-23 16:02:16,837 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err [2018-11-23 16:02:16,837 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_adc_register [2018-11-23 16:02:16,837 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_hwmon_remove_attr [2018-11-23 16:02:16,837 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_hwmon_remove_attr [2018-11-23 16:02:16,838 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2018-11-23 16:02:16,838 INFO L130 BoogieDeclarations]: Found specification of procedure dev_set_drvdata [2018-11-23 16:02:16,838 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 16:02:16,838 INFO L130 BoogieDeclarations]: Found specification of procedure platform_get_drvdata [2018-11-23 16:02:16,838 INFO L138 BoogieDeclarations]: Found implementation of procedure platform_get_drvdata [2018-11-23 16:02:16,838 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2018-11-23 16:02:16,838 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_device_create_file_dev_attr_of_sensor_device_attribute [2018-11-23 16:02:16,838 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_device_create_file_dev_attr_of_sensor_device_attribute [2018-11-23 16:02:16,838 INFO L130 BoogieDeclarations]: Found specification of procedure hwmon_device_unregister [2018-11-23 16:02:16,839 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2018-11-23 16:02:16,839 INFO L130 BoogieDeclarations]: Found specification of procedure __mutex_init [2018-11-23 16:02:16,839 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_adc_release [2018-11-23 16:02:16,839 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_return_value [2018-11-23 16:02:16,839 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-11-23 16:02:16,839 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_handler_precall [2018-11-23 16:02:16,839 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_final_state [2018-11-23 16:02:16,839 INFO L130 BoogieDeclarations]: Found specification of procedure device_remove_file [2018-11-23 16:02:16,839 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 16:02:16,840 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 16:02:16,840 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2018-11-23 16:02:16,840 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2018-11-23 16:02:17,656 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 16:02:17,656 INFO L280 CfgBuilder]: Removed 36 assue(true) statements. [2018-11-23 16:02:17,657 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 04:02:17 BoogieIcfgContainer [2018-11-23 16:02:17,657 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 16:02:17,657 INFO L113 PluginConnector]: ------------------------CodeCheck---------------------------- [2018-11-23 16:02:17,657 INFO L271 PluginConnector]: Initializing CodeCheck... [2018-11-23 16:02:17,665 INFO L276 PluginConnector]: CodeCheck initialized [2018-11-23 16:02:17,665 INFO L185 PluginConnector]: Executing the observer CodeCheckObserver from plugin CodeCheck for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 04:02:17" (1/1) ... [2018-11-23 16:02:17,675 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 16:02:17,699 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 16:02:17,708 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 105 states to 77 states and 105 transitions. [2018-11-23 16:02:17,709 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 105 transitions. [2018-11-23 16:02:17,716 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2018-11-23 16:02:17,716 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 16:02:17,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-23 16:02:18,087 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2018-11-23 16:02:18,162 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 16:02:18,164 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 107 states to 79 states and 107 transitions. [2018-11-23 16:02:18,164 INFO L276 IsEmpty]: Start isEmpty. Operand 79 states and 107 transitions. [2018-11-23 16:02:18,165 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2018-11-23 16:02:18,166 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 16:02:18,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 16:02:18,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 16:02:18,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 16:02:18,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-23 16:02:18,834 WARN L493 CodeCheckObserver]: This program is UNSAFE, Check terminated with 2 iterations. ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder.RCFGBacktranslator [?] #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string44.base, #t~string44.offset := #Ultimate.alloc(4);call write~init~int(60, #t~string44.base, #t~string44.offset, 1);call write~init~int(55, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(62, #t~string44.base, 2 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 3 + #t~string44.offset, 1);call #t~string45.base, #t~string45.offset := #Ultimate.alloc(20);call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);call write~init~int(37, #t~string57.base, #t~string57.offset, 1);call write~init~int(100, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(10, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.alloc(4);call write~init~int(37, #t~string62.base, #t~string62.offset, 1);call write~init~int(115, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(10, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 3 + #t~string62.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(11);call #t~string68.base, #t~string68.offset := #Ultimate.alloc(34);call #t~string71.base, #t~string71.offset := #Ultimate.alloc(11);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(34);call #t~string77.base, #t~string77.offset := #Ultimate.alloc(27);call #t~string80.base, #t~string80.offset := #Ultimate.alloc(11);call #t~string81.base, #t~string81.offset := #Ultimate.alloc(13);call #t~string86.base, #t~string86.offset := #Ultimate.alloc(21);call #t~string94.base, #t~string94.offset := #Ultimate.alloc(30);call #t~string100.base, #t~string100.offset := #Ultimate.alloc(33);call #t~string103.base, #t~string103.offset := #Ultimate.alloc(25);call #t~string107.base, #t~string107.offset := #Ultimate.alloc(27);call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10);~LDV_IN_INTERRUPT~0 := 0;~ldv_count_1~0 := 0;~ldv_count_2~0 := 0;~ldv_call_dev_attr_of_sensor_device_attribute~0 := 0;call ~#s3c_hwmon_driver~0.base, ~#s3c_hwmon_driver~0.offset := #Ultimate.alloc(153);call write~init~$Pointer$(#funAddr~s3c_hwmon_probe.base, #funAddr~s3c_hwmon_probe.offset, ~#s3c_hwmon_driver~0.base, ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(#funAddr~s3c_hwmon_remove.base, #funAddr~s3c_hwmon_remove.offset, ~#s3c_hwmon_driver~0.base, 8 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 16 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 24 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 32 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(#t~string113.base, #t~string113.offset, ~#s3c_hwmon_driver~0.base, 40 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 48 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#s3c_hwmon_driver~0.base, 56 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 64 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~int(0, ~#s3c_hwmon_driver~0.base, 72 + ~#s3c_hwmon_driver~0.offset, 1);call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 73 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 81 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 89 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 97 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 105 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 113 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 121 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 129 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 137 + ~#s3c_hwmon_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 145 + ~#s3c_hwmon_driver~0.offset, 8);havoc main_#res;havoc main_#t~ret117, main_#t~nondet118, main_#t~switch119, main_#t~ret120, main_#t~ret121, main_#t~nondet122, main_~var_group1~0.base, main_~var_group1~0.offset, main_~res_s3c_hwmon_probe_10~0, main_~ldv_s_s3c_hwmon_driver_platform_driver~0, main_~tmp~7, main_~tmp___0~2, main_~tmp___1~1;havoc main_~var_group1~0.base, main_~var_group1~0.offset;havoc main_~res_s3c_hwmon_probe_10~0;havoc main_~ldv_s_s3c_hwmon_driver_platform_driver~0;havoc main_~tmp~7;havoc main_~tmp___0~2;havoc main_~tmp___1~1;main_~ldv_s_s3c_hwmon_driver_platform_driver~0 := 0;~LDV_IN_INTERRUPT~0 := 1;call ldv_handler_precall();havoc s3c_hwmon_init_#res;havoc s3c_hwmon_init_#t~ret114, s3c_hwmon_init_~tmp~6;havoc s3c_hwmon_init_~tmp~6;call s3c_hwmon_init_#t~ret114 := platform_driver_register(~#s3c_hwmon_driver~0.base, ~#s3c_hwmon_driver~0.offset);assume -2147483648 <= s3c_hwmon_init_#t~ret114 && s3c_hwmon_init_#t~ret114 <= 2147483647;s3c_hwmon_init_~tmp~6 := s3c_hwmon_init_#t~ret114;havoc s3c_hwmon_init_#t~ret114;s3c_hwmon_init_#res := s3c_hwmon_init_~tmp~6;main_#t~ret117 := s3c_hwmon_init_#res;assume -2147483648 <= main_#t~ret117 && main_#t~ret117 <= 2147483647;main_~tmp~7 := main_#t~ret117;havoc main_#t~ret117; VAL [ULTIMATE.start_main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, ULTIMATE.start_main_~tmp~7=0, ULTIMATE.start_s3c_hwmon_init_~tmp~6=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |ULTIMATE.start_s3c_hwmon_init_#res|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] assume !(0 != main_~tmp~7); VAL [ULTIMATE.start_main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, ULTIMATE.start_main_~tmp~7=0, ULTIMATE.start_s3c_hwmon_init_~tmp~6=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |ULTIMATE.start_s3c_hwmon_init_#res|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] assume -2147483648 <= main_#t~nondet122 && main_#t~nondet122 <= 2147483647;main_~tmp___1~1 := main_#t~nondet122;havoc main_#t~nondet122; VAL [ULTIMATE.start_main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, ULTIMATE.start_main_~tmp___1~1=1, ULTIMATE.start_main_~tmp~7=0, ULTIMATE.start_s3c_hwmon_init_~tmp~6=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |ULTIMATE.start_s3c_hwmon_init_#res|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] assume 0 != main_~tmp___1~1 || 0 != main_~ldv_s_s3c_hwmon_driver_platform_driver~0;assume -2147483648 <= main_#t~nondet118 && main_#t~nondet118 <= 2147483647;main_~tmp___0~2 := main_#t~nondet118;havoc main_#t~nondet118;main_#t~switch119 := 0 == main_~tmp___0~2; VAL [ULTIMATE.start_main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, ULTIMATE.start_main_~tmp___0~2=0, ULTIMATE.start_main_~tmp___1~1=1, ULTIMATE.start_main_~tmp~7=0, ULTIMATE.start_s3c_hwmon_init_~tmp~6=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |ULTIMATE.start_main_#t~switch119|=true, |ULTIMATE.start_s3c_hwmon_init_#res|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] assume main_#t~switch119; VAL [ULTIMATE.start_main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, ULTIMATE.start_main_~tmp___0~2=0, ULTIMATE.start_main_~tmp___1~1=1, ULTIMATE.start_main_~tmp~7=0, ULTIMATE.start_s3c_hwmon_init_~tmp~6=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |ULTIMATE.start_main_#t~switch119|=true, |ULTIMATE.start_s3c_hwmon_init_#res|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] assume 0 == main_~ldv_s_s3c_hwmon_driver_platform_driver~0;s3c_hwmon_probe_#in~dev.base, s3c_hwmon_probe_#in~dev.offset := main_~var_group1~0.base, main_~var_group1~0.offset;havoc s3c_hwmon_probe_#res;havoc s3c_hwmon_probe_#t~mem75.base, s3c_hwmon_probe_#t~mem75.offset, s3c_hwmon_probe_#t~nondet76, s3c_hwmon_probe_#t~ret78.base, s3c_hwmon_probe_#t~ret78.offset, s3c_hwmon_probe_#t~nondet79, s3c_hwmon_probe_#t~ret82.base, s3c_hwmon_probe_#t~ret82.offset, s3c_hwmon_probe_#t~mem83.base, s3c_hwmon_probe_#t~mem83.offset, s3c_hwmon_probe_#t~ret84, s3c_hwmon_probe_#t~nondet85, s3c_hwmon_probe_#t~mem87.base, s3c_hwmon_probe_#t~mem87.offset, s3c_hwmon_probe_#t~ret88, s3c_hwmon_probe_#t~ret89, s3c_hwmon_probe_#t~ret90.base, s3c_hwmon_probe_#t~ret90.offset, s3c_hwmon_probe_#t~mem91.base, s3c_hwmon_probe_#t~mem91.offset, s3c_hwmon_probe_#t~ret92, s3c_hwmon_probe_#t~nondet93, s3c_hwmon_probe_#t~mem95.base, s3c_hwmon_probe_#t~mem95.offset, s3c_hwmon_probe_#t~ret96, s3c_hwmon_probe_#t~mem97.base, s3c_hwmon_probe_#t~mem97.offset, s3c_hwmon_probe_#t~mem98, s3c_hwmon_probe_#t~nondet99, s3c_hwmon_probe_#t~mem101, s3c_hwmon_probe_#t~nondet102, s3c_hwmon_probe_#t~mem104.base, s3c_hwmon_probe_#t~mem104.offset, s3c_hwmon_probe_#t~ret105, s3c_hwmon_probe_#t~nondet106, s3c_hwmon_probe_#t~mem108.base, s3c_hwmon_probe_#t~mem108.offset, s3c_hwmon_probe_#t~mem109.base, s3c_hwmon_probe_#t~mem109.offset, s3c_hwmon_probe_~dev.base, s3c_hwmon_probe_~dev.offset, s3c_hwmon_probe_~pdata~2.base, s3c_hwmon_probe_~pdata~2.offset, s3c_hwmon_probe_~hwmon~1.base, s3c_hwmon_probe_~hwmon~1.offset, s3c_hwmon_probe_~ret~3, s3c_hwmon_probe_~i~0, s3c_hwmon_probe_~tmp~4.base, s3c_hwmon_probe_~tmp~4.offset, s3c_hwmon_probe_~#__key~0.base, s3c_hwmon_probe_~#__key~0.offset, s3c_hwmon_probe_~tmp___0~1, s3c_hwmon_probe_~tmp___1~0, s3c_hwmon_probe_~tmp___2~1, s3c_hwmon_probe_~tmp___3~0, s3c_hwmon_probe_~cfg~2.base, s3c_hwmon_probe_~cfg~2.offset;s3c_hwmon_probe_~dev.base, s3c_hwmon_probe_~dev.offset := s3c_hwmon_probe_#in~dev.base, s3c_hwmon_probe_#in~dev.offset;havoc s3c_hwmon_probe_~pdata~2.base, s3c_hwmon_probe_~pdata~2.offset;havoc s3c_hwmon_probe_~hwmon~1.base, s3c_hwmon_probe_~hwmon~1.offset;havoc s3c_hwmon_probe_~ret~3;havoc s3c_hwmon_probe_~i~0;havoc s3c_hwmon_probe_~tmp~4.base, s3c_hwmon_probe_~tmp~4.offset;call s3c_hwmon_probe_~#__key~0.base, s3c_hwmon_probe_~#__key~0.offset := #Ultimate.alloc(8);havoc s3c_hwmon_probe_~tmp___0~1;havoc s3c_hwmon_probe_~tmp___1~0;havoc s3c_hwmon_probe_~tmp___2~1;havoc s3c_hwmon_probe_~tmp___3~0;havoc s3c_hwmon_probe_~cfg~2.base, s3c_hwmon_probe_~cfg~2.offset;call s3c_hwmon_probe_#t~mem75.base, s3c_hwmon_probe_#t~mem75.offset := read~$Pointer$(s3c_hwmon_probe_~dev.base, 277 + s3c_hwmon_probe_~dev.offset, 8);s3c_hwmon_probe_~pdata~2.base, s3c_hwmon_probe_~pdata~2.offset := s3c_hwmon_probe_#t~mem75.base, s3c_hwmon_probe_#t~mem75.offset;havoc s3c_hwmon_probe_#t~mem75.base, s3c_hwmon_probe_#t~mem75.offset;s3c_hwmon_probe_~ret~3 := 0; VAL [ULTIMATE.start_main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, ULTIMATE.start_main_~tmp___0~2=0, ULTIMATE.start_main_~tmp___1~1=1, ULTIMATE.start_main_~tmp~7=0, ULTIMATE.start_main_~var_group1~0.base=50, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_s3c_hwmon_init_~tmp~6=0, ULTIMATE.start_s3c_hwmon_probe_~dev.base=50, ULTIMATE.start_s3c_hwmon_probe_~dev.offset=0, ULTIMATE.start_s3c_hwmon_probe_~pdata~2.base=(- 18446744073709551616), ULTIMATE.start_s3c_hwmon_probe_~pdata~2.offset=(- 18446744073709551615), ULTIMATE.start_s3c_hwmon_probe_~ret~3=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |ULTIMATE.start_main_#t~switch119|=true, |ULTIMATE.start_s3c_hwmon_init_#res|=0, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.base|=50, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.offset|=0, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.base|=47, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] assume !(0 == (s3c_hwmon_probe_~pdata~2.base + s3c_hwmon_probe_~pdata~2.offset) % 18446744073709551616);kzalloc_#in~size, kzalloc_#in~flags := 800, 208;havoc kzalloc_#res.base, kzalloc_#res.offset;havoc kzalloc_#t~ret29.base, kzalloc_#t~ret29.offset, kzalloc_~size, kzalloc_~flags, kzalloc_~tmp~0.base, kzalloc_~tmp~0.offset;kzalloc_~size := kzalloc_#in~size;kzalloc_~flags := kzalloc_#in~flags;havoc kzalloc_~tmp~0.base, kzalloc_~tmp~0.offset;kmalloc_#in~size, kmalloc_#in~flags := kzalloc_~size, ~bitwiseOr(kzalloc_~flags, 32768);havoc kmalloc_#res.base, kmalloc_#res.offset;havoc kmalloc_#t~ret28.base, kmalloc_#t~ret28.offset, kmalloc_~size, kmalloc_~flags, kmalloc_~tmp___2~0.base, kmalloc_~tmp___2~0.offset;kmalloc_~size := kmalloc_#in~size;kmalloc_~flags := kmalloc_#in~flags;havoc kmalloc_~tmp___2~0.base, kmalloc_~tmp___2~0.offset;__kmalloc_#in~size, __kmalloc_#in~t := kmalloc_~size, kmalloc_~flags;havoc __kmalloc_#res.base, __kmalloc_#res.offset;havoc __kmalloc_#t~ret27.base, __kmalloc_#t~ret27.offset, __kmalloc_~size, __kmalloc_~t;__kmalloc_~size := __kmalloc_#in~size;__kmalloc_~t := __kmalloc_#in~t;ldv_malloc_#in~size := __kmalloc_~size;havoc ldv_malloc_#res.base, ldv_malloc_#res.offset;havoc ldv_malloc_#t~nondet24, ldv_malloc_#t~malloc25.base, ldv_malloc_#t~malloc25.offset, ldv_malloc_#t~ret26, ldv_malloc_~res~0.base, ldv_malloc_~res~0.offset, ldv_malloc_~size;ldv_malloc_~size := ldv_malloc_#in~size;assume -2147483648 <= ldv_malloc_#t~nondet24 && ldv_malloc_#t~nondet24 <= 2147483647; VAL [ULTIMATE.start___kmalloc_~size=800, ULTIMATE.start___kmalloc_~t=52, ULTIMATE.start_kmalloc_~flags=52, ULTIMATE.start_kmalloc_~size=800, ULTIMATE.start_kzalloc_~flags=208, ULTIMATE.start_kzalloc_~size=800, ULTIMATE.start_ldv_malloc_~size=800, ULTIMATE.start_main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, ULTIMATE.start_main_~tmp___0~2=0, ULTIMATE.start_main_~tmp___1~1=1, ULTIMATE.start_main_~tmp~7=0, ULTIMATE.start_main_~var_group1~0.base=50, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_s3c_hwmon_init_~tmp~6=0, ULTIMATE.start_s3c_hwmon_probe_~dev.base=50, ULTIMATE.start_s3c_hwmon_probe_~dev.offset=0, ULTIMATE.start_s3c_hwmon_probe_~pdata~2.base=(- 18446744073709551616), ULTIMATE.start_s3c_hwmon_probe_~pdata~2.offset=(- 18446744073709551615), ULTIMATE.start_s3c_hwmon_probe_~ret~3=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |ULTIMATE.start___kmalloc_#in~size|=800, |ULTIMATE.start___kmalloc_#in~t|=52, |ULTIMATE.start_kmalloc_#in~flags|=52, |ULTIMATE.start_kmalloc_#in~size|=800, |ULTIMATE.start_kzalloc_#in~flags|=208, |ULTIMATE.start_kzalloc_#in~size|=800, |ULTIMATE.start_ldv_malloc_#in~size|=800, |ULTIMATE.start_ldv_malloc_#t~nondet24|=(- 1), |ULTIMATE.start_main_#t~switch119|=true, |ULTIMATE.start_s3c_hwmon_init_#res|=0, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.base|=50, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.offset|=0, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.base|=47, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] assume 0 != ldv_malloc_#t~nondet24;havoc ldv_malloc_#t~nondet24;call ldv_malloc_#t~malloc25.base, ldv_malloc_#t~malloc25.offset := #Ultimate.alloc(ldv_malloc_~size);ldv_malloc_~res~0.base, ldv_malloc_~res~0.offset := ldv_malloc_#t~malloc25.base, ldv_malloc_#t~malloc25.offset; VAL [ULTIMATE.start___kmalloc_~size=800, ULTIMATE.start___kmalloc_~t=52, ULTIMATE.start_kmalloc_~flags=52, ULTIMATE.start_kmalloc_~size=800, ULTIMATE.start_kzalloc_~flags=208, ULTIMATE.start_kzalloc_~size=800, ULTIMATE.start_ldv_malloc_~res~0.base=(- 36893488147419101220), ULTIMATE.start_ldv_malloc_~res~0.offset=0, ULTIMATE.start_ldv_malloc_~size=800, ULTIMATE.start_main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, ULTIMATE.start_main_~tmp___0~2=0, ULTIMATE.start_main_~tmp___1~1=1, ULTIMATE.start_main_~tmp~7=0, ULTIMATE.start_main_~var_group1~0.base=50, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_s3c_hwmon_init_~tmp~6=0, ULTIMATE.start_s3c_hwmon_probe_~dev.base=50, ULTIMATE.start_s3c_hwmon_probe_~dev.offset=0, ULTIMATE.start_s3c_hwmon_probe_~pdata~2.base=(- 18446744073709551616), ULTIMATE.start_s3c_hwmon_probe_~pdata~2.offset=(- 18446744073709551615), ULTIMATE.start_s3c_hwmon_probe_~ret~3=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |ULTIMATE.start___kmalloc_#in~size|=800, |ULTIMATE.start___kmalloc_#in~t|=52, |ULTIMATE.start_kmalloc_#in~flags|=52, |ULTIMATE.start_kmalloc_#in~size|=800, |ULTIMATE.start_kzalloc_#in~flags|=208, |ULTIMATE.start_kzalloc_#in~size|=800, |ULTIMATE.start_ldv_malloc_#in~size|=800, |ULTIMATE.start_ldv_malloc_#t~malloc25.base|=(- 36893488147419101220), |ULTIMATE.start_ldv_malloc_#t~malloc25.offset|=0, |ULTIMATE.start_main_#t~switch119|=true, |ULTIMATE.start_s3c_hwmon_init_#res|=0, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.base|=50, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.offset|=0, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.base|=47, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] CALL call ldv_malloc_#t~ret26 := ldv_is_err(ldv_malloc_~res~0.base, ldv_malloc_~res~0.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |ldv_is_err_#in~ptr.base|=(- 36893488147419101220), |ldv_is_err_#in~ptr.offset|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset;#res := (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0);assume true; VAL [ldv_is_err_~ptr.base=(- 36893488147419101220), ldv_is_err_~ptr.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |ldv_is_err_#in~ptr.base|=(- 36893488147419101220), |ldv_is_err_#in~ptr.offset|=0, |ldv_is_err_#res|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] RET #245#return; VAL [ULTIMATE.start___kmalloc_~size=800, ULTIMATE.start___kmalloc_~t=52, ULTIMATE.start_kmalloc_~flags=52, ULTIMATE.start_kmalloc_~size=800, ULTIMATE.start_kzalloc_~flags=208, ULTIMATE.start_kzalloc_~size=800, ULTIMATE.start_ldv_malloc_~res~0.base=(- 36893488147419101220), ULTIMATE.start_ldv_malloc_~res~0.offset=0, ULTIMATE.start_ldv_malloc_~size=800, ULTIMATE.start_main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, ULTIMATE.start_main_~tmp___0~2=0, ULTIMATE.start_main_~tmp___1~1=1, ULTIMATE.start_main_~tmp~7=0, ULTIMATE.start_main_~var_group1~0.base=50, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_s3c_hwmon_init_~tmp~6=0, ULTIMATE.start_s3c_hwmon_probe_~dev.base=50, ULTIMATE.start_s3c_hwmon_probe_~dev.offset=0, ULTIMATE.start_s3c_hwmon_probe_~pdata~2.base=(- 18446744073709551616), ULTIMATE.start_s3c_hwmon_probe_~pdata~2.offset=(- 18446744073709551615), ULTIMATE.start_s3c_hwmon_probe_~ret~3=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |ULTIMATE.start___kmalloc_#in~size|=800, |ULTIMATE.start___kmalloc_#in~t|=52, |ULTIMATE.start_kmalloc_#in~flags|=52, |ULTIMATE.start_kmalloc_#in~size|=800, |ULTIMATE.start_kzalloc_#in~flags|=208, |ULTIMATE.start_kzalloc_#in~size|=800, |ULTIMATE.start_ldv_malloc_#in~size|=800, |ULTIMATE.start_ldv_malloc_#t~malloc25.base|=(- 36893488147419101220), |ULTIMATE.start_ldv_malloc_#t~malloc25.offset|=0, |ULTIMATE.start_ldv_malloc_#t~ret26|=0, |ULTIMATE.start_main_#t~switch119|=true, |ULTIMATE.start_s3c_hwmon_init_#res|=0, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.base|=50, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.offset|=0, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.base|=47, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] assume -9223372036854775808 <= ldv_malloc_#t~ret26 && ldv_malloc_#t~ret26 <= 9223372036854775807;assume 0 != (if 0 == ldv_malloc_#t~ret26 then 1 else 0);havoc ldv_malloc_#t~ret26;ldv_malloc_#res.base, ldv_malloc_#res.offset := ldv_malloc_~res~0.base, ldv_malloc_~res~0.offset; VAL [ULTIMATE.start___kmalloc_~size=800, ULTIMATE.start___kmalloc_~t=52, ULTIMATE.start_kmalloc_~flags=52, ULTIMATE.start_kmalloc_~size=800, ULTIMATE.start_kzalloc_~flags=208, ULTIMATE.start_kzalloc_~size=800, ULTIMATE.start_ldv_malloc_~res~0.base=(- 36893488147419101220), ULTIMATE.start_ldv_malloc_~res~0.offset=0, ULTIMATE.start_ldv_malloc_~size=800, ULTIMATE.start_main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, ULTIMATE.start_main_~tmp___0~2=0, ULTIMATE.start_main_~tmp___1~1=1, ULTIMATE.start_main_~tmp~7=0, ULTIMATE.start_main_~var_group1~0.base=50, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_s3c_hwmon_init_~tmp~6=0, ULTIMATE.start_s3c_hwmon_probe_~dev.base=50, ULTIMATE.start_s3c_hwmon_probe_~dev.offset=0, ULTIMATE.start_s3c_hwmon_probe_~pdata~2.base=(- 18446744073709551616), ULTIMATE.start_s3c_hwmon_probe_~pdata~2.offset=(- 18446744073709551615), ULTIMATE.start_s3c_hwmon_probe_~ret~3=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |ULTIMATE.start___kmalloc_#in~size|=800, |ULTIMATE.start___kmalloc_#in~t|=52, |ULTIMATE.start_kmalloc_#in~flags|=52, |ULTIMATE.start_kmalloc_#in~size|=800, |ULTIMATE.start_kzalloc_#in~flags|=208, |ULTIMATE.start_kzalloc_#in~size|=800, |ULTIMATE.start_ldv_malloc_#in~size|=800, |ULTIMATE.start_ldv_malloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_ldv_malloc_#res.offset|=0, |ULTIMATE.start_ldv_malloc_#t~malloc25.base|=(- 36893488147419101220), |ULTIMATE.start_ldv_malloc_#t~malloc25.offset|=0, |ULTIMATE.start_main_#t~switch119|=true, |ULTIMATE.start_s3c_hwmon_init_#res|=0, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.base|=50, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.offset|=0, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.base|=47, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] __kmalloc_#t~ret27.base, __kmalloc_#t~ret27.offset := ldv_malloc_#res.base, ldv_malloc_#res.offset;__kmalloc_#res.base, __kmalloc_#res.offset := __kmalloc_#t~ret27.base, __kmalloc_#t~ret27.offset;havoc __kmalloc_#t~ret27.base, __kmalloc_#t~ret27.offset;kmalloc_#t~ret28.base, kmalloc_#t~ret28.offset := __kmalloc_#res.base, __kmalloc_#res.offset;kmalloc_~tmp___2~0.base, kmalloc_~tmp___2~0.offset := kmalloc_#t~ret28.base, kmalloc_#t~ret28.offset;havoc kmalloc_#t~ret28.base, kmalloc_#t~ret28.offset;kmalloc_#res.base, kmalloc_#res.offset := kmalloc_~tmp___2~0.base, kmalloc_~tmp___2~0.offset;kzalloc_#t~ret29.base, kzalloc_#t~ret29.offset := kmalloc_#res.base, kmalloc_#res.offset;kzalloc_~tmp~0.base, kzalloc_~tmp~0.offset := kzalloc_#t~ret29.base, kzalloc_#t~ret29.offset;havoc kzalloc_#t~ret29.base, kzalloc_#t~ret29.offset;kzalloc_#res.base, kzalloc_#res.offset := kzalloc_~tmp~0.base, kzalloc_~tmp~0.offset;s3c_hwmon_probe_#t~ret78.base, s3c_hwmon_probe_#t~ret78.offset := kzalloc_#res.base, kzalloc_#res.offset;s3c_hwmon_probe_~tmp~4.base, s3c_hwmon_probe_~tmp~4.offset := s3c_hwmon_probe_#t~ret78.base, s3c_hwmon_probe_#t~ret78.offset;havoc s3c_hwmon_probe_#t~ret78.base, s3c_hwmon_probe_#t~ret78.offset;s3c_hwmon_probe_~hwmon~1.base, s3c_hwmon_probe_~hwmon~1.offset := s3c_hwmon_probe_~tmp~4.base, s3c_hwmon_probe_~tmp~4.offset; VAL [ULTIMATE.start___kmalloc_~size=800, ULTIMATE.start___kmalloc_~t=52, ULTIMATE.start_kmalloc_~flags=52, ULTIMATE.start_kmalloc_~size=800, ULTIMATE.start_kmalloc_~tmp___2~0.base=(- 36893488147419101220), ULTIMATE.start_kmalloc_~tmp___2~0.offset=0, ULTIMATE.start_kzalloc_~flags=208, ULTIMATE.start_kzalloc_~size=800, ULTIMATE.start_kzalloc_~tmp~0.base=(- 36893488147419101220), ULTIMATE.start_kzalloc_~tmp~0.offset=0, ULTIMATE.start_ldv_malloc_~res~0.base=(- 36893488147419101220), ULTIMATE.start_ldv_malloc_~res~0.offset=0, ULTIMATE.start_ldv_malloc_~size=800, ULTIMATE.start_main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, ULTIMATE.start_main_~tmp___0~2=0, ULTIMATE.start_main_~tmp___1~1=1, ULTIMATE.start_main_~tmp~7=0, ULTIMATE.start_main_~var_group1~0.base=50, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_s3c_hwmon_init_~tmp~6=0, ULTIMATE.start_s3c_hwmon_probe_~dev.base=50, ULTIMATE.start_s3c_hwmon_probe_~dev.offset=0, ULTIMATE.start_s3c_hwmon_probe_~hwmon~1.base=(- 36893488147419101220), ULTIMATE.start_s3c_hwmon_probe_~hwmon~1.offset=0, ULTIMATE.start_s3c_hwmon_probe_~pdata~2.base=(- 18446744073709551616), ULTIMATE.start_s3c_hwmon_probe_~pdata~2.offset=(- 18446744073709551615), ULTIMATE.start_s3c_hwmon_probe_~ret~3=0, ULTIMATE.start_s3c_hwmon_probe_~tmp~4.base=(- 36893488147419101220), ULTIMATE.start_s3c_hwmon_probe_~tmp~4.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |ULTIMATE.start___kmalloc_#in~size|=800, |ULTIMATE.start___kmalloc_#in~t|=52, |ULTIMATE.start___kmalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start___kmalloc_#res.offset|=0, |ULTIMATE.start_kmalloc_#in~flags|=52, |ULTIMATE.start_kmalloc_#in~size|=800, |ULTIMATE.start_kmalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_kmalloc_#res.offset|=0, |ULTIMATE.start_kzalloc_#in~flags|=208, |ULTIMATE.start_kzalloc_#in~size|=800, |ULTIMATE.start_kzalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_kzalloc_#res.offset|=0, |ULTIMATE.start_ldv_malloc_#in~size|=800, |ULTIMATE.start_ldv_malloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_ldv_malloc_#res.offset|=0, |ULTIMATE.start_ldv_malloc_#t~malloc25.base|=(- 36893488147419101220), |ULTIMATE.start_ldv_malloc_#t~malloc25.offset|=0, |ULTIMATE.start_main_#t~switch119|=true, |ULTIMATE.start_s3c_hwmon_init_#res|=0, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.base|=50, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.offset|=0, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.base|=47, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] assume !(0 == (s3c_hwmon_probe_~hwmon~1.base + s3c_hwmon_probe_~hwmon~1.offset) % 18446744073709551616);platform_set_drvdata_#in~pdev.base, platform_set_drvdata_#in~pdev.offset, platform_set_drvdata_#in~data.base, platform_set_drvdata_#in~data.offset := s3c_hwmon_probe_~dev.base, s3c_hwmon_probe_~dev.offset, s3c_hwmon_probe_~hwmon~1.base, s3c_hwmon_probe_~hwmon~1.offset;havoc platform_set_drvdata_~pdev.base, platform_set_drvdata_~pdev.offset, platform_set_drvdata_~data.base, platform_set_drvdata_~data.offset;platform_set_drvdata_~pdev.base, platform_set_drvdata_~pdev.offset := platform_set_drvdata_#in~pdev.base, platform_set_drvdata_#in~pdev.offset;platform_set_drvdata_~data.base, platform_set_drvdata_~data.offset := platform_set_drvdata_#in~data.base, platform_set_drvdata_#in~data.offset;call dev_set_drvdata(platform_set_drvdata_~pdev.base, 12 + platform_set_drvdata_~pdev.offset, platform_set_drvdata_~data.base, platform_set_drvdata_~data.offset);call __mutex_init(s3c_hwmon_probe_~hwmon~1.base, s3c_hwmon_probe_~hwmon~1.offset, #t~string81.base, #t~string81.offset, s3c_hwmon_probe_~#__key~0.base, s3c_hwmon_probe_~#__key~0.offset);call s3c_hwmon_probe_#t~ret82.base, s3c_hwmon_probe_#t~ret82.offset := s3c_adc_register(s3c_hwmon_probe_~dev.base, s3c_hwmon_probe_~dev.offset, 0, 0, 0, 0, 0);call write~$Pointer$(s3c_hwmon_probe_#t~ret82.base, s3c_hwmon_probe_#t~ret82.offset, s3c_hwmon_probe_~hwmon~1.base, 152 + s3c_hwmon_probe_~hwmon~1.offset, 8);havoc s3c_hwmon_probe_#t~ret82.base, s3c_hwmon_probe_#t~ret82.offset;call s3c_hwmon_probe_#t~mem83.base, s3c_hwmon_probe_#t~mem83.offset := read~$Pointer$(s3c_hwmon_probe_~hwmon~1.base, 152 + s3c_hwmon_probe_~hwmon~1.offset, 8); VAL [ULTIMATE.start___kmalloc_~size=800, ULTIMATE.start___kmalloc_~t=52, ULTIMATE.start_kmalloc_~flags=52, ULTIMATE.start_kmalloc_~size=800, ULTIMATE.start_kmalloc_~tmp___2~0.base=(- 36893488147419101220), ULTIMATE.start_kmalloc_~tmp___2~0.offset=0, ULTIMATE.start_kzalloc_~flags=208, ULTIMATE.start_kzalloc_~size=800, ULTIMATE.start_kzalloc_~tmp~0.base=(- 36893488147419101220), ULTIMATE.start_kzalloc_~tmp~0.offset=0, ULTIMATE.start_ldv_malloc_~res~0.base=(- 36893488147419101220), ULTIMATE.start_ldv_malloc_~res~0.offset=0, ULTIMATE.start_ldv_malloc_~size=800, ULTIMATE.start_main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, ULTIMATE.start_main_~tmp___0~2=0, ULTIMATE.start_main_~tmp___1~1=1, ULTIMATE.start_main_~tmp~7=0, ULTIMATE.start_main_~var_group1~0.base=50, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_platform_set_drvdata_~data.base=(- 36893488147419101220), ULTIMATE.start_platform_set_drvdata_~data.offset=0, ULTIMATE.start_platform_set_drvdata_~pdev.base=50, ULTIMATE.start_platform_set_drvdata_~pdev.offset=0, ULTIMATE.start_s3c_hwmon_init_~tmp~6=0, ULTIMATE.start_s3c_hwmon_probe_~dev.base=50, ULTIMATE.start_s3c_hwmon_probe_~dev.offset=0, ULTIMATE.start_s3c_hwmon_probe_~hwmon~1.base=(- 36893488147419101220), ULTIMATE.start_s3c_hwmon_probe_~hwmon~1.offset=0, ULTIMATE.start_s3c_hwmon_probe_~pdata~2.base=(- 18446744073709551616), ULTIMATE.start_s3c_hwmon_probe_~pdata~2.offset=(- 18446744073709551615), ULTIMATE.start_s3c_hwmon_probe_~ret~3=0, ULTIMATE.start_s3c_hwmon_probe_~tmp~4.base=(- 36893488147419101220), ULTIMATE.start_s3c_hwmon_probe_~tmp~4.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |ULTIMATE.start___kmalloc_#in~size|=800, |ULTIMATE.start___kmalloc_#in~t|=52, |ULTIMATE.start___kmalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start___kmalloc_#res.offset|=0, |ULTIMATE.start_kmalloc_#in~flags|=52, |ULTIMATE.start_kmalloc_#in~size|=800, |ULTIMATE.start_kmalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_kmalloc_#res.offset|=0, |ULTIMATE.start_kzalloc_#in~flags|=208, |ULTIMATE.start_kzalloc_#in~size|=800, |ULTIMATE.start_kzalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_kzalloc_#res.offset|=0, |ULTIMATE.start_ldv_malloc_#in~size|=800, |ULTIMATE.start_ldv_malloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_ldv_malloc_#res.offset|=0, |ULTIMATE.start_ldv_malloc_#t~malloc25.base|=(- 36893488147419101220), |ULTIMATE.start_ldv_malloc_#t~malloc25.offset|=0, |ULTIMATE.start_main_#t~switch119|=true, |ULTIMATE.start_platform_set_drvdata_#in~data.base|=(- 36893488147419101220), |ULTIMATE.start_platform_set_drvdata_#in~data.offset|=0, |ULTIMATE.start_platform_set_drvdata_#in~pdev.base|=50, |ULTIMATE.start_platform_set_drvdata_#in~pdev.offset|=0, |ULTIMATE.start_s3c_hwmon_init_#res|=0, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.base|=50, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.offset|=0, |ULTIMATE.start_s3c_hwmon_probe_#t~mem83.base|=0, |ULTIMATE.start_s3c_hwmon_probe_#t~mem83.offset|=18446744073709551616, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.base|=47, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] CALL call s3c_hwmon_probe_#t~ret84 := IS_ERR(s3c_hwmon_probe_#t~mem83.base, s3c_hwmon_probe_#t~mem83.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |IS_ERR_#in~ptr.base|=0, |IS_ERR_#in~ptr.offset|=18446744073709551616, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset;havoc ~tmp~9; VAL [IS_ERR_~ptr.base=0, IS_ERR_~ptr.offset=18446744073709551616, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |IS_ERR_#in~ptr.base|=0, |IS_ERR_#in~ptr.offset|=18446744073709551616, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] CALL call #t~ret124 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |ldv_is_err_#in~ptr.base|=0, |ldv_is_err_#in~ptr.offset|=18446744073709551616, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset;#res := (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0);assume true; VAL [ldv_is_err_~ptr.base=0, ldv_is_err_~ptr.offset=18446744073709551616, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |ldv_is_err_#in~ptr.base|=0, |ldv_is_err_#in~ptr.offset|=18446744073709551616, |ldv_is_err_#res|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] RET #269#return; VAL [IS_ERR_~ptr.base=0, IS_ERR_~ptr.offset=18446744073709551616, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |IS_ERR_#in~ptr.base|=0, |IS_ERR_#in~ptr.offset|=18446744073709551616, |IS_ERR_#t~ret124|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] assume -9223372036854775808 <= #t~ret124 && #t~ret124 <= 9223372036854775807;~tmp~9 := #t~ret124;havoc #t~ret124;#res := ~tmp~9;assume true; VAL [IS_ERR_~ptr.base=0, IS_ERR_~ptr.offset=18446744073709551616, IS_ERR_~tmp~9=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |IS_ERR_#in~ptr.base|=0, |IS_ERR_#in~ptr.offset|=18446744073709551616, |IS_ERR_#res|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] RET #247#return; VAL [ULTIMATE.start___kmalloc_~size=800, ULTIMATE.start___kmalloc_~t=52, ULTIMATE.start_kmalloc_~flags=52, ULTIMATE.start_kmalloc_~size=800, ULTIMATE.start_kmalloc_~tmp___2~0.base=(- 36893488147419101220), ULTIMATE.start_kmalloc_~tmp___2~0.offset=0, ULTIMATE.start_kzalloc_~flags=208, ULTIMATE.start_kzalloc_~size=800, ULTIMATE.start_kzalloc_~tmp~0.base=(- 36893488147419101220), ULTIMATE.start_kzalloc_~tmp~0.offset=0, ULTIMATE.start_ldv_malloc_~res~0.base=(- 36893488147419101220), ULTIMATE.start_ldv_malloc_~res~0.offset=0, ULTIMATE.start_ldv_malloc_~size=800, ULTIMATE.start_main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, ULTIMATE.start_main_~tmp___0~2=0, ULTIMATE.start_main_~tmp___1~1=1, ULTIMATE.start_main_~tmp~7=0, ULTIMATE.start_main_~var_group1~0.base=50, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_platform_set_drvdata_~data.base=(- 36893488147419101220), ULTIMATE.start_platform_set_drvdata_~data.offset=0, ULTIMATE.start_platform_set_drvdata_~pdev.base=50, ULTIMATE.start_platform_set_drvdata_~pdev.offset=0, ULTIMATE.start_s3c_hwmon_init_~tmp~6=0, ULTIMATE.start_s3c_hwmon_probe_~dev.base=50, ULTIMATE.start_s3c_hwmon_probe_~dev.offset=0, ULTIMATE.start_s3c_hwmon_probe_~hwmon~1.base=(- 36893488147419101220), ULTIMATE.start_s3c_hwmon_probe_~hwmon~1.offset=0, ULTIMATE.start_s3c_hwmon_probe_~pdata~2.base=(- 18446744073709551616), ULTIMATE.start_s3c_hwmon_probe_~pdata~2.offset=(- 18446744073709551615), ULTIMATE.start_s3c_hwmon_probe_~ret~3=0, ULTIMATE.start_s3c_hwmon_probe_~tmp~4.base=(- 36893488147419101220), ULTIMATE.start_s3c_hwmon_probe_~tmp~4.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |ULTIMATE.start___kmalloc_#in~size|=800, |ULTIMATE.start___kmalloc_#in~t|=52, |ULTIMATE.start___kmalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start___kmalloc_#res.offset|=0, |ULTIMATE.start_kmalloc_#in~flags|=52, |ULTIMATE.start_kmalloc_#in~size|=800, |ULTIMATE.start_kmalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_kmalloc_#res.offset|=0, |ULTIMATE.start_kzalloc_#in~flags|=208, |ULTIMATE.start_kzalloc_#in~size|=800, |ULTIMATE.start_kzalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_kzalloc_#res.offset|=0, |ULTIMATE.start_ldv_malloc_#in~size|=800, |ULTIMATE.start_ldv_malloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_ldv_malloc_#res.offset|=0, |ULTIMATE.start_ldv_malloc_#t~malloc25.base|=(- 36893488147419101220), |ULTIMATE.start_ldv_malloc_#t~malloc25.offset|=0, |ULTIMATE.start_main_#t~switch119|=true, |ULTIMATE.start_platform_set_drvdata_#in~data.base|=(- 36893488147419101220), |ULTIMATE.start_platform_set_drvdata_#in~data.offset|=0, |ULTIMATE.start_platform_set_drvdata_#in~pdev.base|=50, |ULTIMATE.start_platform_set_drvdata_#in~pdev.offset|=0, |ULTIMATE.start_s3c_hwmon_init_#res|=0, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.base|=50, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.offset|=0, |ULTIMATE.start_s3c_hwmon_probe_#t~mem83.base|=0, |ULTIMATE.start_s3c_hwmon_probe_#t~mem83.offset|=18446744073709551616, |ULTIMATE.start_s3c_hwmon_probe_#t~ret84|=0, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.base|=47, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] assume -9223372036854775808 <= s3c_hwmon_probe_#t~ret84 && s3c_hwmon_probe_#t~ret84 <= 9223372036854775807;s3c_hwmon_probe_~tmp___1~0 := s3c_hwmon_probe_#t~ret84;havoc s3c_hwmon_probe_#t~mem83.base, s3c_hwmon_probe_#t~mem83.offset;havoc s3c_hwmon_probe_#t~ret84; VAL [ULTIMATE.start___kmalloc_~size=800, ULTIMATE.start___kmalloc_~t=52, ULTIMATE.start_kmalloc_~flags=52, ULTIMATE.start_kmalloc_~size=800, ULTIMATE.start_kmalloc_~tmp___2~0.base=(- 36893488147419101220), ULTIMATE.start_kmalloc_~tmp___2~0.offset=0, ULTIMATE.start_kzalloc_~flags=208, ULTIMATE.start_kzalloc_~size=800, ULTIMATE.start_kzalloc_~tmp~0.base=(- 36893488147419101220), ULTIMATE.start_kzalloc_~tmp~0.offset=0, ULTIMATE.start_ldv_malloc_~res~0.base=(- 36893488147419101220), ULTIMATE.start_ldv_malloc_~res~0.offset=0, ULTIMATE.start_ldv_malloc_~size=800, ULTIMATE.start_main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, ULTIMATE.start_main_~tmp___0~2=0, ULTIMATE.start_main_~tmp___1~1=1, ULTIMATE.start_main_~tmp~7=0, ULTIMATE.start_main_~var_group1~0.base=50, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_platform_set_drvdata_~data.base=(- 36893488147419101220), ULTIMATE.start_platform_set_drvdata_~data.offset=0, ULTIMATE.start_platform_set_drvdata_~pdev.base=50, ULTIMATE.start_platform_set_drvdata_~pdev.offset=0, ULTIMATE.start_s3c_hwmon_init_~tmp~6=0, ULTIMATE.start_s3c_hwmon_probe_~dev.base=50, ULTIMATE.start_s3c_hwmon_probe_~dev.offset=0, ULTIMATE.start_s3c_hwmon_probe_~hwmon~1.base=(- 36893488147419101220), ULTIMATE.start_s3c_hwmon_probe_~hwmon~1.offset=0, ULTIMATE.start_s3c_hwmon_probe_~pdata~2.base=(- 18446744073709551616), ULTIMATE.start_s3c_hwmon_probe_~pdata~2.offset=(- 18446744073709551615), ULTIMATE.start_s3c_hwmon_probe_~ret~3=0, ULTIMATE.start_s3c_hwmon_probe_~tmp___1~0=0, ULTIMATE.start_s3c_hwmon_probe_~tmp~4.base=(- 36893488147419101220), ULTIMATE.start_s3c_hwmon_probe_~tmp~4.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |ULTIMATE.start___kmalloc_#in~size|=800, |ULTIMATE.start___kmalloc_#in~t|=52, |ULTIMATE.start___kmalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start___kmalloc_#res.offset|=0, |ULTIMATE.start_kmalloc_#in~flags|=52, |ULTIMATE.start_kmalloc_#in~size|=800, |ULTIMATE.start_kmalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_kmalloc_#res.offset|=0, |ULTIMATE.start_kzalloc_#in~flags|=208, |ULTIMATE.start_kzalloc_#in~size|=800, |ULTIMATE.start_kzalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_kzalloc_#res.offset|=0, |ULTIMATE.start_ldv_malloc_#in~size|=800, |ULTIMATE.start_ldv_malloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_ldv_malloc_#res.offset|=0, |ULTIMATE.start_ldv_malloc_#t~malloc25.base|=(- 36893488147419101220), |ULTIMATE.start_ldv_malloc_#t~malloc25.offset|=0, |ULTIMATE.start_main_#t~switch119|=true, |ULTIMATE.start_platform_set_drvdata_#in~data.base|=(- 36893488147419101220), |ULTIMATE.start_platform_set_drvdata_#in~data.offset|=0, |ULTIMATE.start_platform_set_drvdata_#in~pdev.base|=50, |ULTIMATE.start_platform_set_drvdata_#in~pdev.offset|=0, |ULTIMATE.start_s3c_hwmon_init_#res|=0, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.base|=50, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.offset|=0, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.base|=47, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] assume !(0 != s3c_hwmon_probe_~tmp___1~0);s3c_hwmon_add_raw_#in~dev.base, s3c_hwmon_add_raw_#in~dev.offset := s3c_hwmon_probe_~dev.base, 12 + s3c_hwmon_probe_~dev.offset;havoc s3c_hwmon_add_raw_#res;havoc s3c_hwmon_add_raw_~dev.base, s3c_hwmon_add_raw_~dev.offset;s3c_hwmon_add_raw_~dev.base, s3c_hwmon_add_raw_~dev.offset := s3c_hwmon_add_raw_#in~dev.base, s3c_hwmon_add_raw_#in~dev.offset;s3c_hwmon_add_raw_#res := 0;s3c_hwmon_probe_#t~ret89 := s3c_hwmon_add_raw_#res;assume -2147483648 <= s3c_hwmon_probe_#t~ret89 && s3c_hwmon_probe_#t~ret89 <= 2147483647;s3c_hwmon_probe_~ret~3 := s3c_hwmon_probe_#t~ret89;havoc s3c_hwmon_probe_#t~ret89; VAL [ULTIMATE.start___kmalloc_~size=800, ULTIMATE.start___kmalloc_~t=52, ULTIMATE.start_kmalloc_~flags=52, ULTIMATE.start_kmalloc_~size=800, ULTIMATE.start_kmalloc_~tmp___2~0.base=(- 36893488147419101220), ULTIMATE.start_kmalloc_~tmp___2~0.offset=0, ULTIMATE.start_kzalloc_~flags=208, ULTIMATE.start_kzalloc_~size=800, ULTIMATE.start_kzalloc_~tmp~0.base=(- 36893488147419101220), ULTIMATE.start_kzalloc_~tmp~0.offset=0, ULTIMATE.start_ldv_malloc_~res~0.base=(- 36893488147419101220), ULTIMATE.start_ldv_malloc_~res~0.offset=0, ULTIMATE.start_ldv_malloc_~size=800, ULTIMATE.start_main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, ULTIMATE.start_main_~tmp___0~2=0, ULTIMATE.start_main_~tmp___1~1=1, ULTIMATE.start_main_~tmp~7=0, ULTIMATE.start_main_~var_group1~0.base=50, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_platform_set_drvdata_~data.base=(- 36893488147419101220), ULTIMATE.start_platform_set_drvdata_~data.offset=0, ULTIMATE.start_platform_set_drvdata_~pdev.base=50, ULTIMATE.start_platform_set_drvdata_~pdev.offset=0, ULTIMATE.start_s3c_hwmon_add_raw_~dev.base=50, ULTIMATE.start_s3c_hwmon_add_raw_~dev.offset=12, ULTIMATE.start_s3c_hwmon_init_~tmp~6=0, ULTIMATE.start_s3c_hwmon_probe_~dev.base=50, ULTIMATE.start_s3c_hwmon_probe_~dev.offset=0, ULTIMATE.start_s3c_hwmon_probe_~hwmon~1.base=(- 36893488147419101220), ULTIMATE.start_s3c_hwmon_probe_~hwmon~1.offset=0, ULTIMATE.start_s3c_hwmon_probe_~pdata~2.base=(- 18446744073709551616), ULTIMATE.start_s3c_hwmon_probe_~pdata~2.offset=(- 18446744073709551615), ULTIMATE.start_s3c_hwmon_probe_~ret~3=0, ULTIMATE.start_s3c_hwmon_probe_~tmp___1~0=0, ULTIMATE.start_s3c_hwmon_probe_~tmp~4.base=(- 36893488147419101220), ULTIMATE.start_s3c_hwmon_probe_~tmp~4.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |ULTIMATE.start___kmalloc_#in~size|=800, |ULTIMATE.start___kmalloc_#in~t|=52, |ULTIMATE.start___kmalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start___kmalloc_#res.offset|=0, |ULTIMATE.start_kmalloc_#in~flags|=52, |ULTIMATE.start_kmalloc_#in~size|=800, |ULTIMATE.start_kmalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_kmalloc_#res.offset|=0, |ULTIMATE.start_kzalloc_#in~flags|=208, |ULTIMATE.start_kzalloc_#in~size|=800, |ULTIMATE.start_kzalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_kzalloc_#res.offset|=0, |ULTIMATE.start_ldv_malloc_#in~size|=800, |ULTIMATE.start_ldv_malloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_ldv_malloc_#res.offset|=0, |ULTIMATE.start_ldv_malloc_#t~malloc25.base|=(- 36893488147419101220), |ULTIMATE.start_ldv_malloc_#t~malloc25.offset|=0, |ULTIMATE.start_main_#t~switch119|=true, |ULTIMATE.start_platform_set_drvdata_#in~data.base|=(- 36893488147419101220), |ULTIMATE.start_platform_set_drvdata_#in~data.offset|=0, |ULTIMATE.start_platform_set_drvdata_#in~pdev.base|=50, |ULTIMATE.start_platform_set_drvdata_#in~pdev.offset|=0, |ULTIMATE.start_s3c_hwmon_add_raw_#in~dev.base|=50, |ULTIMATE.start_s3c_hwmon_add_raw_#in~dev.offset|=12, |ULTIMATE.start_s3c_hwmon_add_raw_#res|=0, |ULTIMATE.start_s3c_hwmon_init_#res|=0, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.base|=50, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.offset|=0, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.base|=47, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] assume !(0 != s3c_hwmon_probe_~ret~3);call s3c_hwmon_probe_#t~ret90.base, s3c_hwmon_probe_#t~ret90.offset := hwmon_device_register(s3c_hwmon_probe_~dev.base, 12 + s3c_hwmon_probe_~dev.offset);call write~$Pointer$(s3c_hwmon_probe_#t~ret90.base, s3c_hwmon_probe_#t~ret90.offset, s3c_hwmon_probe_~hwmon~1.base, 160 + s3c_hwmon_probe_~hwmon~1.offset, 8);havoc s3c_hwmon_probe_#t~ret90.base, s3c_hwmon_probe_#t~ret90.offset;call s3c_hwmon_probe_#t~mem91.base, s3c_hwmon_probe_#t~mem91.offset := read~$Pointer$(s3c_hwmon_probe_~hwmon~1.base, 160 + s3c_hwmon_probe_~hwmon~1.offset, 8); VAL [ULTIMATE.start___kmalloc_~size=800, ULTIMATE.start___kmalloc_~t=52, ULTIMATE.start_kmalloc_~flags=52, ULTIMATE.start_kmalloc_~size=800, ULTIMATE.start_kmalloc_~tmp___2~0.base=(- 36893488147419101220), ULTIMATE.start_kmalloc_~tmp___2~0.offset=0, ULTIMATE.start_kzalloc_~flags=208, ULTIMATE.start_kzalloc_~size=800, ULTIMATE.start_kzalloc_~tmp~0.base=(- 36893488147419101220), ULTIMATE.start_kzalloc_~tmp~0.offset=0, ULTIMATE.start_ldv_malloc_~res~0.base=(- 36893488147419101220), ULTIMATE.start_ldv_malloc_~res~0.offset=0, ULTIMATE.start_ldv_malloc_~size=800, ULTIMATE.start_main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, ULTIMATE.start_main_~tmp___0~2=0, ULTIMATE.start_main_~tmp___1~1=1, ULTIMATE.start_main_~tmp~7=0, ULTIMATE.start_main_~var_group1~0.base=50, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_platform_set_drvdata_~data.base=(- 36893488147419101220), ULTIMATE.start_platform_set_drvdata_~data.offset=0, ULTIMATE.start_platform_set_drvdata_~pdev.base=50, ULTIMATE.start_platform_set_drvdata_~pdev.offset=0, ULTIMATE.start_s3c_hwmon_add_raw_~dev.base=50, ULTIMATE.start_s3c_hwmon_add_raw_~dev.offset=12, ULTIMATE.start_s3c_hwmon_init_~tmp~6=0, ULTIMATE.start_s3c_hwmon_probe_~dev.base=50, ULTIMATE.start_s3c_hwmon_probe_~dev.offset=0, ULTIMATE.start_s3c_hwmon_probe_~hwmon~1.base=(- 36893488147419101220), ULTIMATE.start_s3c_hwmon_probe_~hwmon~1.offset=0, ULTIMATE.start_s3c_hwmon_probe_~pdata~2.base=(- 18446744073709551616), ULTIMATE.start_s3c_hwmon_probe_~pdata~2.offset=(- 18446744073709551615), ULTIMATE.start_s3c_hwmon_probe_~ret~3=0, ULTIMATE.start_s3c_hwmon_probe_~tmp___1~0=0, ULTIMATE.start_s3c_hwmon_probe_~tmp~4.base=(- 36893488147419101220), ULTIMATE.start_s3c_hwmon_probe_~tmp~4.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |ULTIMATE.start___kmalloc_#in~size|=800, |ULTIMATE.start___kmalloc_#in~t|=52, |ULTIMATE.start___kmalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start___kmalloc_#res.offset|=0, |ULTIMATE.start_kmalloc_#in~flags|=52, |ULTIMATE.start_kmalloc_#in~size|=800, |ULTIMATE.start_kmalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_kmalloc_#res.offset|=0, |ULTIMATE.start_kzalloc_#in~flags|=208, |ULTIMATE.start_kzalloc_#in~size|=800, |ULTIMATE.start_kzalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_kzalloc_#res.offset|=0, |ULTIMATE.start_ldv_malloc_#in~size|=800, |ULTIMATE.start_ldv_malloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_ldv_malloc_#res.offset|=0, |ULTIMATE.start_ldv_malloc_#t~malloc25.base|=(- 36893488147419101220), |ULTIMATE.start_ldv_malloc_#t~malloc25.offset|=0, |ULTIMATE.start_main_#t~switch119|=true, |ULTIMATE.start_platform_set_drvdata_#in~data.base|=(- 36893488147419101220), |ULTIMATE.start_platform_set_drvdata_#in~data.offset|=0, |ULTIMATE.start_platform_set_drvdata_#in~pdev.base|=50, |ULTIMATE.start_platform_set_drvdata_#in~pdev.offset|=0, |ULTIMATE.start_s3c_hwmon_add_raw_#in~dev.base|=50, |ULTIMATE.start_s3c_hwmon_add_raw_#in~dev.offset|=12, |ULTIMATE.start_s3c_hwmon_add_raw_#res|=0, |ULTIMATE.start_s3c_hwmon_init_#res|=0, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.base|=50, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.offset|=0, |ULTIMATE.start_s3c_hwmon_probe_#t~mem91.base|=0, |ULTIMATE.start_s3c_hwmon_probe_#t~mem91.offset|=182862574002682785169408, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.base|=47, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] CALL call s3c_hwmon_probe_#t~ret92 := IS_ERR(s3c_hwmon_probe_#t~mem91.base, s3c_hwmon_probe_#t~mem91.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |IS_ERR_#in~ptr.base|=0, |IS_ERR_#in~ptr.offset|=182862574002682785169408, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset;havoc ~tmp~9; VAL [IS_ERR_~ptr.base=0, IS_ERR_~ptr.offset=182862574002682785169408, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |IS_ERR_#in~ptr.base|=0, |IS_ERR_#in~ptr.offset|=182862574002682785169408, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] CALL call #t~ret124 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |ldv_is_err_#in~ptr.base|=0, |ldv_is_err_#in~ptr.offset|=182862574002682785169408, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset;#res := (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0);assume true; VAL [ldv_is_err_~ptr.base=0, ldv_is_err_~ptr.offset=182862574002682785169408, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |ldv_is_err_#in~ptr.base|=0, |ldv_is_err_#in~ptr.offset|=182862574002682785169408, |ldv_is_err_#res|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] RET #269#return; VAL [IS_ERR_~ptr.base=0, IS_ERR_~ptr.offset=182862574002682785169408, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |IS_ERR_#in~ptr.base|=0, |IS_ERR_#in~ptr.offset|=182862574002682785169408, |IS_ERR_#t~ret124|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] assume -9223372036854775808 <= #t~ret124 && #t~ret124 <= 9223372036854775807;~tmp~9 := #t~ret124;havoc #t~ret124;#res := ~tmp~9;assume true; VAL [IS_ERR_~ptr.base=0, IS_ERR_~ptr.offset=182862574002682785169408, IS_ERR_~tmp~9=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |IS_ERR_#in~ptr.base|=0, |IS_ERR_#in~ptr.offset|=182862574002682785169408, |IS_ERR_#res|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] RET #251#return; VAL [ULTIMATE.start___kmalloc_~size=800, ULTIMATE.start___kmalloc_~t=52, ULTIMATE.start_kmalloc_~flags=52, ULTIMATE.start_kmalloc_~size=800, ULTIMATE.start_kmalloc_~tmp___2~0.base=(- 36893488147419101220), ULTIMATE.start_kmalloc_~tmp___2~0.offset=0, ULTIMATE.start_kzalloc_~flags=208, ULTIMATE.start_kzalloc_~size=800, ULTIMATE.start_kzalloc_~tmp~0.base=(- 36893488147419101220), ULTIMATE.start_kzalloc_~tmp~0.offset=0, ULTIMATE.start_ldv_malloc_~res~0.base=(- 36893488147419101220), ULTIMATE.start_ldv_malloc_~res~0.offset=0, ULTIMATE.start_ldv_malloc_~size=800, ULTIMATE.start_main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, ULTIMATE.start_main_~tmp___0~2=0, ULTIMATE.start_main_~tmp___1~1=1, ULTIMATE.start_main_~tmp~7=0, ULTIMATE.start_main_~var_group1~0.base=50, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_platform_set_drvdata_~data.base=(- 36893488147419101220), ULTIMATE.start_platform_set_drvdata_~data.offset=0, ULTIMATE.start_platform_set_drvdata_~pdev.base=50, ULTIMATE.start_platform_set_drvdata_~pdev.offset=0, ULTIMATE.start_s3c_hwmon_add_raw_~dev.base=50, ULTIMATE.start_s3c_hwmon_add_raw_~dev.offset=12, ULTIMATE.start_s3c_hwmon_init_~tmp~6=0, ULTIMATE.start_s3c_hwmon_probe_~dev.base=50, ULTIMATE.start_s3c_hwmon_probe_~dev.offset=0, ULTIMATE.start_s3c_hwmon_probe_~hwmon~1.base=(- 36893488147419101220), ULTIMATE.start_s3c_hwmon_probe_~hwmon~1.offset=0, ULTIMATE.start_s3c_hwmon_probe_~pdata~2.base=(- 18446744073709551616), ULTIMATE.start_s3c_hwmon_probe_~pdata~2.offset=(- 18446744073709551615), ULTIMATE.start_s3c_hwmon_probe_~ret~3=0, ULTIMATE.start_s3c_hwmon_probe_~tmp___1~0=0, ULTIMATE.start_s3c_hwmon_probe_~tmp~4.base=(- 36893488147419101220), ULTIMATE.start_s3c_hwmon_probe_~tmp~4.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |ULTIMATE.start___kmalloc_#in~size|=800, |ULTIMATE.start___kmalloc_#in~t|=52, |ULTIMATE.start___kmalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start___kmalloc_#res.offset|=0, |ULTIMATE.start_kmalloc_#in~flags|=52, |ULTIMATE.start_kmalloc_#in~size|=800, |ULTIMATE.start_kmalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_kmalloc_#res.offset|=0, |ULTIMATE.start_kzalloc_#in~flags|=208, |ULTIMATE.start_kzalloc_#in~size|=800, |ULTIMATE.start_kzalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_kzalloc_#res.offset|=0, |ULTIMATE.start_ldv_malloc_#in~size|=800, |ULTIMATE.start_ldv_malloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_ldv_malloc_#res.offset|=0, |ULTIMATE.start_ldv_malloc_#t~malloc25.base|=(- 36893488147419101220), |ULTIMATE.start_ldv_malloc_#t~malloc25.offset|=0, |ULTIMATE.start_main_#t~switch119|=true, |ULTIMATE.start_platform_set_drvdata_#in~data.base|=(- 36893488147419101220), |ULTIMATE.start_platform_set_drvdata_#in~data.offset|=0, |ULTIMATE.start_platform_set_drvdata_#in~pdev.base|=50, |ULTIMATE.start_platform_set_drvdata_#in~pdev.offset|=0, |ULTIMATE.start_s3c_hwmon_add_raw_#in~dev.base|=50, |ULTIMATE.start_s3c_hwmon_add_raw_#in~dev.offset|=12, |ULTIMATE.start_s3c_hwmon_add_raw_#res|=0, |ULTIMATE.start_s3c_hwmon_init_#res|=0, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.base|=50, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.offset|=0, |ULTIMATE.start_s3c_hwmon_probe_#t~mem91.base|=0, |ULTIMATE.start_s3c_hwmon_probe_#t~mem91.offset|=182862574002682785169408, |ULTIMATE.start_s3c_hwmon_probe_#t~ret92|=0, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.base|=47, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] assume -9223372036854775808 <= s3c_hwmon_probe_#t~ret92 && s3c_hwmon_probe_#t~ret92 <= 9223372036854775807;s3c_hwmon_probe_~tmp___3~0 := s3c_hwmon_probe_#t~ret92;havoc s3c_hwmon_probe_#t~mem91.base, s3c_hwmon_probe_#t~mem91.offset;havoc s3c_hwmon_probe_#t~ret92; VAL [ULTIMATE.start___kmalloc_~size=800, ULTIMATE.start___kmalloc_~t=52, ULTIMATE.start_kmalloc_~flags=52, ULTIMATE.start_kmalloc_~size=800, ULTIMATE.start_kmalloc_~tmp___2~0.base=(- 36893488147419101220), ULTIMATE.start_kmalloc_~tmp___2~0.offset=0, ULTIMATE.start_kzalloc_~flags=208, ULTIMATE.start_kzalloc_~size=800, ULTIMATE.start_kzalloc_~tmp~0.base=(- 36893488147419101220), ULTIMATE.start_kzalloc_~tmp~0.offset=0, ULTIMATE.start_ldv_malloc_~res~0.base=(- 36893488147419101220), ULTIMATE.start_ldv_malloc_~res~0.offset=0, ULTIMATE.start_ldv_malloc_~size=800, ULTIMATE.start_main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, ULTIMATE.start_main_~tmp___0~2=0, ULTIMATE.start_main_~tmp___1~1=1, ULTIMATE.start_main_~tmp~7=0, ULTIMATE.start_main_~var_group1~0.base=50, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_platform_set_drvdata_~data.base=(- 36893488147419101220), ULTIMATE.start_platform_set_drvdata_~data.offset=0, ULTIMATE.start_platform_set_drvdata_~pdev.base=50, ULTIMATE.start_platform_set_drvdata_~pdev.offset=0, ULTIMATE.start_s3c_hwmon_add_raw_~dev.base=50, ULTIMATE.start_s3c_hwmon_add_raw_~dev.offset=12, ULTIMATE.start_s3c_hwmon_init_~tmp~6=0, ULTIMATE.start_s3c_hwmon_probe_~dev.base=50, ULTIMATE.start_s3c_hwmon_probe_~dev.offset=0, ULTIMATE.start_s3c_hwmon_probe_~hwmon~1.base=(- 36893488147419101220), ULTIMATE.start_s3c_hwmon_probe_~hwmon~1.offset=0, ULTIMATE.start_s3c_hwmon_probe_~pdata~2.base=(- 18446744073709551616), ULTIMATE.start_s3c_hwmon_probe_~pdata~2.offset=(- 18446744073709551615), ULTIMATE.start_s3c_hwmon_probe_~ret~3=0, ULTIMATE.start_s3c_hwmon_probe_~tmp___1~0=0, ULTIMATE.start_s3c_hwmon_probe_~tmp___3~0=0, ULTIMATE.start_s3c_hwmon_probe_~tmp~4.base=(- 36893488147419101220), ULTIMATE.start_s3c_hwmon_probe_~tmp~4.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |ULTIMATE.start___kmalloc_#in~size|=800, |ULTIMATE.start___kmalloc_#in~t|=52, |ULTIMATE.start___kmalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start___kmalloc_#res.offset|=0, |ULTIMATE.start_kmalloc_#in~flags|=52, |ULTIMATE.start_kmalloc_#in~size|=800, |ULTIMATE.start_kmalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_kmalloc_#res.offset|=0, |ULTIMATE.start_kzalloc_#in~flags|=208, |ULTIMATE.start_kzalloc_#in~size|=800, |ULTIMATE.start_kzalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_kzalloc_#res.offset|=0, |ULTIMATE.start_ldv_malloc_#in~size|=800, |ULTIMATE.start_ldv_malloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_ldv_malloc_#res.offset|=0, |ULTIMATE.start_ldv_malloc_#t~malloc25.base|=(- 36893488147419101220), |ULTIMATE.start_ldv_malloc_#t~malloc25.offset|=0, |ULTIMATE.start_main_#t~switch119|=true, |ULTIMATE.start_platform_set_drvdata_#in~data.base|=(- 36893488147419101220), |ULTIMATE.start_platform_set_drvdata_#in~data.offset|=0, |ULTIMATE.start_platform_set_drvdata_#in~pdev.base|=50, |ULTIMATE.start_platform_set_drvdata_#in~pdev.offset|=0, |ULTIMATE.start_s3c_hwmon_add_raw_#in~dev.base|=50, |ULTIMATE.start_s3c_hwmon_add_raw_#in~dev.offset|=12, |ULTIMATE.start_s3c_hwmon_add_raw_#res|=0, |ULTIMATE.start_s3c_hwmon_init_#res|=0, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.base|=50, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.offset|=0, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.base|=47, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] assume !(0 != s3c_hwmon_probe_~tmp___3~0);s3c_hwmon_probe_~i~0 := 0; VAL [ULTIMATE.start___kmalloc_~size=800, ULTIMATE.start___kmalloc_~t=52, ULTIMATE.start_kmalloc_~flags=52, ULTIMATE.start_kmalloc_~size=800, ULTIMATE.start_kmalloc_~tmp___2~0.base=(- 36893488147419101220), ULTIMATE.start_kmalloc_~tmp___2~0.offset=0, ULTIMATE.start_kzalloc_~flags=208, ULTIMATE.start_kzalloc_~size=800, ULTIMATE.start_kzalloc_~tmp~0.base=(- 36893488147419101220), ULTIMATE.start_kzalloc_~tmp~0.offset=0, ULTIMATE.start_ldv_malloc_~res~0.base=(- 36893488147419101220), ULTIMATE.start_ldv_malloc_~res~0.offset=0, ULTIMATE.start_ldv_malloc_~size=800, ULTIMATE.start_main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, ULTIMATE.start_main_~tmp___0~2=0, ULTIMATE.start_main_~tmp___1~1=1, ULTIMATE.start_main_~tmp~7=0, ULTIMATE.start_main_~var_group1~0.base=50, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_platform_set_drvdata_~data.base=(- 36893488147419101220), ULTIMATE.start_platform_set_drvdata_~data.offset=0, ULTIMATE.start_platform_set_drvdata_~pdev.base=50, ULTIMATE.start_platform_set_drvdata_~pdev.offset=0, ULTIMATE.start_s3c_hwmon_add_raw_~dev.base=50, ULTIMATE.start_s3c_hwmon_add_raw_~dev.offset=12, ULTIMATE.start_s3c_hwmon_init_~tmp~6=0, ULTIMATE.start_s3c_hwmon_probe_~dev.base=50, ULTIMATE.start_s3c_hwmon_probe_~dev.offset=0, ULTIMATE.start_s3c_hwmon_probe_~hwmon~1.base=(- 36893488147419101220), ULTIMATE.start_s3c_hwmon_probe_~hwmon~1.offset=0, ULTIMATE.start_s3c_hwmon_probe_~i~0=0, ULTIMATE.start_s3c_hwmon_probe_~pdata~2.base=(- 18446744073709551616), ULTIMATE.start_s3c_hwmon_probe_~pdata~2.offset=(- 18446744073709551615), ULTIMATE.start_s3c_hwmon_probe_~ret~3=0, ULTIMATE.start_s3c_hwmon_probe_~tmp___1~0=0, ULTIMATE.start_s3c_hwmon_probe_~tmp___3~0=0, ULTIMATE.start_s3c_hwmon_probe_~tmp~4.base=(- 36893488147419101220), ULTIMATE.start_s3c_hwmon_probe_~tmp~4.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |ULTIMATE.start___kmalloc_#in~size|=800, |ULTIMATE.start___kmalloc_#in~t|=52, |ULTIMATE.start___kmalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start___kmalloc_#res.offset|=0, |ULTIMATE.start_kmalloc_#in~flags|=52, |ULTIMATE.start_kmalloc_#in~size|=800, |ULTIMATE.start_kmalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_kmalloc_#res.offset|=0, |ULTIMATE.start_kzalloc_#in~flags|=208, |ULTIMATE.start_kzalloc_#in~size|=800, |ULTIMATE.start_kzalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_kzalloc_#res.offset|=0, |ULTIMATE.start_ldv_malloc_#in~size|=800, |ULTIMATE.start_ldv_malloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_ldv_malloc_#res.offset|=0, |ULTIMATE.start_ldv_malloc_#t~malloc25.base|=(- 36893488147419101220), |ULTIMATE.start_ldv_malloc_#t~malloc25.offset|=0, |ULTIMATE.start_main_#t~switch119|=true, |ULTIMATE.start_platform_set_drvdata_#in~data.base|=(- 36893488147419101220), |ULTIMATE.start_platform_set_drvdata_#in~data.offset|=0, |ULTIMATE.start_platform_set_drvdata_#in~pdev.base|=50, |ULTIMATE.start_platform_set_drvdata_#in~pdev.offset|=0, |ULTIMATE.start_s3c_hwmon_add_raw_#in~dev.base|=50, |ULTIMATE.start_s3c_hwmon_add_raw_#in~dev.offset|=12, |ULTIMATE.start_s3c_hwmon_add_raw_#res|=0, |ULTIMATE.start_s3c_hwmon_init_#res|=0, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.base|=50, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.offset|=0, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.base|=47, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] assume s3c_hwmon_probe_~i~0 % 4294967296 <= 7;call s3c_hwmon_probe_#t~mem97.base, s3c_hwmon_probe_#t~mem97.offset := read~$Pointer$(s3c_hwmon_probe_~pdata~2.base, s3c_hwmon_probe_~pdata~2.offset + 8 * s3c_hwmon_probe_~i~0, 8);s3c_hwmon_probe_~cfg~2.base, s3c_hwmon_probe_~cfg~2.offset := s3c_hwmon_probe_#t~mem97.base, s3c_hwmon_probe_#t~mem97.offset;havoc s3c_hwmon_probe_#t~mem97.base, s3c_hwmon_probe_#t~mem97.offset; VAL [ULTIMATE.start___kmalloc_~size=800, ULTIMATE.start___kmalloc_~t=52, ULTIMATE.start_kmalloc_~flags=52, ULTIMATE.start_kmalloc_~size=800, ULTIMATE.start_kmalloc_~tmp___2~0.base=(- 36893488147419101220), ULTIMATE.start_kmalloc_~tmp___2~0.offset=0, ULTIMATE.start_kzalloc_~flags=208, ULTIMATE.start_kzalloc_~size=800, ULTIMATE.start_kzalloc_~tmp~0.base=(- 36893488147419101220), ULTIMATE.start_kzalloc_~tmp~0.offset=0, ULTIMATE.start_ldv_malloc_~res~0.base=(- 36893488147419101220), ULTIMATE.start_ldv_malloc_~res~0.offset=0, ULTIMATE.start_ldv_malloc_~size=800, ULTIMATE.start_main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, ULTIMATE.start_main_~tmp___0~2=0, ULTIMATE.start_main_~tmp___1~1=1, ULTIMATE.start_main_~tmp~7=0, ULTIMATE.start_main_~var_group1~0.base=50, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_platform_set_drvdata_~data.base=(- 36893488147419101220), ULTIMATE.start_platform_set_drvdata_~data.offset=0, ULTIMATE.start_platform_set_drvdata_~pdev.base=50, ULTIMATE.start_platform_set_drvdata_~pdev.offset=0, ULTIMATE.start_s3c_hwmon_add_raw_~dev.base=50, ULTIMATE.start_s3c_hwmon_add_raw_~dev.offset=12, ULTIMATE.start_s3c_hwmon_init_~tmp~6=0, ULTIMATE.start_s3c_hwmon_probe_~cfg~2.base=(- 36893488147419091769), ULTIMATE.start_s3c_hwmon_probe_~cfg~2.offset=(- 11462), ULTIMATE.start_s3c_hwmon_probe_~dev.base=50, ULTIMATE.start_s3c_hwmon_probe_~dev.offset=0, ULTIMATE.start_s3c_hwmon_probe_~hwmon~1.base=(- 36893488147419101220), ULTIMATE.start_s3c_hwmon_probe_~hwmon~1.offset=0, ULTIMATE.start_s3c_hwmon_probe_~i~0=0, ULTIMATE.start_s3c_hwmon_probe_~pdata~2.base=(- 18446744073709551616), ULTIMATE.start_s3c_hwmon_probe_~pdata~2.offset=(- 18446744073709551615), ULTIMATE.start_s3c_hwmon_probe_~ret~3=0, ULTIMATE.start_s3c_hwmon_probe_~tmp___1~0=0, ULTIMATE.start_s3c_hwmon_probe_~tmp___3~0=0, ULTIMATE.start_s3c_hwmon_probe_~tmp~4.base=(- 36893488147419101220), ULTIMATE.start_s3c_hwmon_probe_~tmp~4.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |ULTIMATE.start___kmalloc_#in~size|=800, |ULTIMATE.start___kmalloc_#in~t|=52, |ULTIMATE.start___kmalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start___kmalloc_#res.offset|=0, |ULTIMATE.start_kmalloc_#in~flags|=52, |ULTIMATE.start_kmalloc_#in~size|=800, |ULTIMATE.start_kmalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_kmalloc_#res.offset|=0, |ULTIMATE.start_kzalloc_#in~flags|=208, |ULTIMATE.start_kzalloc_#in~size|=800, |ULTIMATE.start_kzalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_kzalloc_#res.offset|=0, |ULTIMATE.start_ldv_malloc_#in~size|=800, |ULTIMATE.start_ldv_malloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_ldv_malloc_#res.offset|=0, |ULTIMATE.start_ldv_malloc_#t~malloc25.base|=(- 36893488147419101220), |ULTIMATE.start_ldv_malloc_#t~malloc25.offset|=0, |ULTIMATE.start_main_#t~switch119|=true, |ULTIMATE.start_platform_set_drvdata_#in~data.base|=(- 36893488147419101220), |ULTIMATE.start_platform_set_drvdata_#in~data.offset|=0, |ULTIMATE.start_platform_set_drvdata_#in~pdev.base|=50, |ULTIMATE.start_platform_set_drvdata_#in~pdev.offset|=0, |ULTIMATE.start_s3c_hwmon_add_raw_#in~dev.base|=50, |ULTIMATE.start_s3c_hwmon_add_raw_#in~dev.offset|=12, |ULTIMATE.start_s3c_hwmon_add_raw_#res|=0, |ULTIMATE.start_s3c_hwmon_init_#res|=0, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.base|=50, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.offset|=0, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.base|=47, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] assume !(0 == (s3c_hwmon_probe_~cfg~2.base + s3c_hwmon_probe_~cfg~2.offset) % 18446744073709551616);call s3c_hwmon_probe_#t~mem98 := read~int(s3c_hwmon_probe_~cfg~2.base, 8 + s3c_hwmon_probe_~cfg~2.offset, 4);BeginParallelComposition{ParallelCodeBlock0: assume s3c_hwmon_probe_#t~mem98 % 4294967296 > 65535;havoc s3c_hwmon_probe_#t~mem98;havoc s3c_hwmon_probe_#t~nondet99;ParallelCodeBlock1: assume !(s3c_hwmon_probe_#t~mem98 % 4294967296 > 65535);havoc s3c_hwmon_probe_#t~mem98;}EndParallelCompositioncall s3c_hwmon_probe_#t~mem101 := read~int(s3c_hwmon_probe_~cfg~2.base, 12 + s3c_hwmon_probe_~cfg~2.offset, 4); VAL [ULTIMATE.start___kmalloc_~size=800, ULTIMATE.start___kmalloc_~t=52, ULTIMATE.start_kmalloc_~flags=52, ULTIMATE.start_kmalloc_~size=800, ULTIMATE.start_kmalloc_~tmp___2~0.base=(- 36893488147419101220), ULTIMATE.start_kmalloc_~tmp___2~0.offset=0, ULTIMATE.start_kzalloc_~flags=208, ULTIMATE.start_kzalloc_~size=800, ULTIMATE.start_kzalloc_~tmp~0.base=(- 36893488147419101220), ULTIMATE.start_kzalloc_~tmp~0.offset=0, ULTIMATE.start_ldv_malloc_~res~0.base=(- 36893488147419101220), ULTIMATE.start_ldv_malloc_~res~0.offset=0, ULTIMATE.start_ldv_malloc_~size=800, ULTIMATE.start_main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, ULTIMATE.start_main_~tmp___0~2=0, ULTIMATE.start_main_~tmp___1~1=1, ULTIMATE.start_main_~tmp~7=0, ULTIMATE.start_main_~var_group1~0.base=50, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_platform_set_drvdata_~data.base=(- 36893488147419101220), ULTIMATE.start_platform_set_drvdata_~data.offset=0, ULTIMATE.start_platform_set_drvdata_~pdev.base=50, ULTIMATE.start_platform_set_drvdata_~pdev.offset=0, ULTIMATE.start_s3c_hwmon_add_raw_~dev.base=50, ULTIMATE.start_s3c_hwmon_add_raw_~dev.offset=12, ULTIMATE.start_s3c_hwmon_init_~tmp~6=0, ULTIMATE.start_s3c_hwmon_probe_~cfg~2.base=(- 36893488147419091769), ULTIMATE.start_s3c_hwmon_probe_~cfg~2.offset=(- 11462), ULTIMATE.start_s3c_hwmon_probe_~dev.base=50, ULTIMATE.start_s3c_hwmon_probe_~dev.offset=0, ULTIMATE.start_s3c_hwmon_probe_~hwmon~1.base=(- 36893488147419101220), ULTIMATE.start_s3c_hwmon_probe_~hwmon~1.offset=0, ULTIMATE.start_s3c_hwmon_probe_~i~0=0, ULTIMATE.start_s3c_hwmon_probe_~pdata~2.base=(- 18446744073709551616), ULTIMATE.start_s3c_hwmon_probe_~pdata~2.offset=(- 18446744073709551615), ULTIMATE.start_s3c_hwmon_probe_~ret~3=0, ULTIMATE.start_s3c_hwmon_probe_~tmp___1~0=0, ULTIMATE.start_s3c_hwmon_probe_~tmp___3~0=0, ULTIMATE.start_s3c_hwmon_probe_~tmp~4.base=(- 36893488147419101220), ULTIMATE.start_s3c_hwmon_probe_~tmp~4.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |ULTIMATE.start___kmalloc_#in~size|=800, |ULTIMATE.start___kmalloc_#in~t|=52, |ULTIMATE.start___kmalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start___kmalloc_#res.offset|=0, |ULTIMATE.start_kmalloc_#in~flags|=52, |ULTIMATE.start_kmalloc_#in~size|=800, |ULTIMATE.start_kmalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_kmalloc_#res.offset|=0, |ULTIMATE.start_kzalloc_#in~flags|=208, |ULTIMATE.start_kzalloc_#in~size|=800, |ULTIMATE.start_kzalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_kzalloc_#res.offset|=0, |ULTIMATE.start_ldv_malloc_#in~size|=800, |ULTIMATE.start_ldv_malloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_ldv_malloc_#res.offset|=0, |ULTIMATE.start_ldv_malloc_#t~malloc25.base|=(- 36893488147419101220), |ULTIMATE.start_ldv_malloc_#t~malloc25.offset|=0, |ULTIMATE.start_main_#t~switch119|=true, |ULTIMATE.start_platform_set_drvdata_#in~data.base|=(- 36893488147419101220), |ULTIMATE.start_platform_set_drvdata_#in~data.offset|=0, |ULTIMATE.start_platform_set_drvdata_#in~pdev.base|=50, |ULTIMATE.start_platform_set_drvdata_#in~pdev.offset|=0, |ULTIMATE.start_s3c_hwmon_add_raw_#in~dev.base|=50, |ULTIMATE.start_s3c_hwmon_add_raw_#in~dev.offset|=12, |ULTIMATE.start_s3c_hwmon_add_raw_#res|=0, |ULTIMATE.start_s3c_hwmon_init_#res|=0, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.base|=50, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.offset|=0, |ULTIMATE.start_s3c_hwmon_probe_#t~mem101|=21461951578113, |ULTIMATE.start_s3c_hwmon_probe_#t~nondet99|=65, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.base|=47, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] assume !(0 == s3c_hwmon_probe_#t~mem101 % 4294967296);havoc s3c_hwmon_probe_#t~mem101;call s3c_hwmon_probe_#t~mem104.base, s3c_hwmon_probe_#t~mem104.offset := read~$Pointer$(s3c_hwmon_probe_~pdata~2.base, s3c_hwmon_probe_~pdata~2.offset + 8 * s3c_hwmon_probe_~i~0, 8);s3c_hwmon_create_attr_#in~dev.base, s3c_hwmon_create_attr_#in~dev.offset, s3c_hwmon_create_attr_#in~cfg.base, s3c_hwmon_create_attr_#in~cfg.offset, s3c_hwmon_create_attr_#in~attrs.base, s3c_hwmon_create_attr_#in~attrs.offset, s3c_hwmon_create_attr_#in~channel := s3c_hwmon_probe_~dev.base, 12 + s3c_hwmon_probe_~dev.offset, s3c_hwmon_probe_#t~mem104.base, s3c_hwmon_probe_#t~mem104.offset, s3c_hwmon_probe_~hwmon~1.base, 168 + s3c_hwmon_probe_~hwmon~1.offset + 116 * (s3c_hwmon_probe_~i~0 % 4294967296), s3c_hwmon_probe_~i~0;havoc s3c_hwmon_create_attr_#res;havoc s3c_hwmon_create_attr_#t~nondet64, s3c_hwmon_create_attr_#t~ret66, s3c_hwmon_create_attr_#t~nondet67, s3c_hwmon_create_attr_#t~mem69.base, s3c_hwmon_create_attr_#t~mem69.offset, s3c_hwmon_create_attr_#t~nondet70, s3c_hwmon_create_attr_#t~ret72, s3c_hwmon_create_attr_#t~nondet73, s3c_hwmon_create_attr_~dev.base, s3c_hwmon_create_attr_~dev.offset, s3c_hwmon_create_attr_~cfg.base, s3c_hwmon_create_attr_~cfg.offset, s3c_hwmon_create_attr_~attrs.base, s3c_hwmon_create_attr_~attrs.offset, s3c_hwmon_create_attr_~channel, s3c_hwmon_create_attr_~attr~0.base, s3c_hwmon_create_attr_~attr~0.offset, s3c_hwmon_create_attr_~ret~2;s3c_hwmon_create_attr_~dev.base, s3c_hwmon_create_attr_~dev.offset := s3c_hwmon_create_attr_#in~dev.base, s3c_hwmon_create_attr_#in~dev.offset;s3c_hwmon_create_attr_~cfg.base, s3c_hwmon_create_attr_~cfg.offset := s3c_hwmon_create_attr_#in~cfg.base, s3c_hwmon_create_attr_#in~cfg.offset;s3c_hwmon_create_attr_~attrs.base, s3c_hwmon_create_attr_~attrs.offset := s3c_hwmon_create_attr_#in~attrs.base, s3c_hwmon_create_attr_#in~attrs.offset;s3c_hwmon_create_attr_~channel := s3c_hwmon_create_attr_#in~channel;havoc s3c_hwmon_create_attr_~attr~0.base, s3c_hwmon_create_attr_~attr~0.offset;havoc s3c_hwmon_create_attr_~ret~2;havoc s3c_hwmon_create_attr_#t~nondet64;s3c_hwmon_create_attr_~attr~0.base, s3c_hwmon_create_attr_~attr~0.offset := s3c_hwmon_create_attr_~attrs.base, s3c_hwmon_create_attr_~attrs.offset;call write~int(s3c_hwmon_create_attr_~channel, s3c_hwmon_create_attr_~attr~0.base, 42 + s3c_hwmon_create_attr_~attr~0.offset, 4);call write~$Pointer$(s3c_hwmon_create_attr_~attrs.base, 92 + s3c_hwmon_create_attr_~attrs.offset, s3c_hwmon_create_attr_~attr~0.base, s3c_hwmon_create_attr_~attr~0.offset, 8);call write~int(292, s3c_hwmon_create_attr_~attr~0.base, 8 + s3c_hwmon_create_attr_~attr~0.offset, 2);call write~$Pointer$(#funAddr~s3c_hwmon_ch_show.base, #funAddr~s3c_hwmon_ch_show.offset, s3c_hwmon_create_attr_~attr~0.base, 26 + s3c_hwmon_create_attr_~attr~0.offset, 8);ldv_device_create_file_5_#in~ldv_func_arg1.base, ldv_device_create_file_5_#in~ldv_func_arg1.offset, ldv_device_create_file_5_#in~ldv_func_arg2.base, ldv_device_create_file_5_#in~ldv_func_arg2.offset := s3c_hwmon_create_attr_~dev.base, s3c_hwmon_create_attr_~dev.offset, s3c_hwmon_create_attr_~attr~0.base, s3c_hwmon_create_attr_~attr~0.offset;havoc ldv_device_create_file_5_#res;havoc ldv_device_create_file_5_#t~ret125, ldv_device_create_file_5_~ldv_func_arg1.base, ldv_device_create_file_5_~ldv_func_arg1.offset, ldv_device_create_file_5_~ldv_func_arg2.base, ldv_device_create_file_5_~ldv_func_arg2.offset, ldv_device_create_file_5_~tmp~10;ldv_device_create_file_5_~ldv_func_arg1.base, ldv_device_create_file_5_~ldv_func_arg1.offset := ldv_device_create_file_5_#in~ldv_func_arg1.base, ldv_device_create_file_5_#in~ldv_func_arg1.offset;ldv_device_create_file_5_~ldv_func_arg2.base, ldv_device_create_file_5_~ldv_func_arg2.offset := ldv_device_create_file_5_#in~ldv_func_arg2.base, ldv_device_create_file_5_#in~ldv_func_arg2.offset;havoc ldv_device_create_file_5_~tmp~10; VAL [ULTIMATE.start___kmalloc_~size=800, ULTIMATE.start___kmalloc_~t=52, ULTIMATE.start_kmalloc_~flags=52, ULTIMATE.start_kmalloc_~size=800, ULTIMATE.start_kmalloc_~tmp___2~0.base=(- 36893488147419101220), ULTIMATE.start_kmalloc_~tmp___2~0.offset=0, ULTIMATE.start_kzalloc_~flags=208, ULTIMATE.start_kzalloc_~size=800, ULTIMATE.start_kzalloc_~tmp~0.base=(- 36893488147419101220), ULTIMATE.start_kzalloc_~tmp~0.offset=0, ULTIMATE.start_ldv_device_create_file_5_~ldv_func_arg1.base=50, ULTIMATE.start_ldv_device_create_file_5_~ldv_func_arg1.offset=12, ULTIMATE.start_ldv_device_create_file_5_~ldv_func_arg2.base=(- 36893488147419101220), ULTIMATE.start_ldv_device_create_file_5_~ldv_func_arg2.offset=168, ULTIMATE.start_ldv_malloc_~res~0.base=(- 36893488147419101220), ULTIMATE.start_ldv_malloc_~res~0.offset=0, ULTIMATE.start_ldv_malloc_~size=800, ULTIMATE.start_main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, ULTIMATE.start_main_~tmp___0~2=0, ULTIMATE.start_main_~tmp___1~1=1, ULTIMATE.start_main_~tmp~7=0, ULTIMATE.start_main_~var_group1~0.base=50, ULTIMATE.start_main_~var_group1~0.offset=0, ULTIMATE.start_platform_set_drvdata_~data.base=(- 36893488147419101220), ULTIMATE.start_platform_set_drvdata_~data.offset=0, ULTIMATE.start_platform_set_drvdata_~pdev.base=50, ULTIMATE.start_platform_set_drvdata_~pdev.offset=0, ULTIMATE.start_s3c_hwmon_add_raw_~dev.base=50, ULTIMATE.start_s3c_hwmon_add_raw_~dev.offset=12, ULTIMATE.start_s3c_hwmon_create_attr_~attrs.base=(- 36893488147419101220), ULTIMATE.start_s3c_hwmon_create_attr_~attrs.offset=168, ULTIMATE.start_s3c_hwmon_create_attr_~attr~0.base=(- 36893488147419101220), ULTIMATE.start_s3c_hwmon_create_attr_~attr~0.offset=168, ULTIMATE.start_s3c_hwmon_create_attr_~cfg.base=(- 36893488147419091769), ULTIMATE.start_s3c_hwmon_create_attr_~cfg.offset=(- 11462), ULTIMATE.start_s3c_hwmon_create_attr_~channel=0, ULTIMATE.start_s3c_hwmon_create_attr_~dev.base=50, ULTIMATE.start_s3c_hwmon_create_attr_~dev.offset=12, ULTIMATE.start_s3c_hwmon_init_~tmp~6=0, ULTIMATE.start_s3c_hwmon_probe_~cfg~2.base=(- 36893488147419091769), ULTIMATE.start_s3c_hwmon_probe_~cfg~2.offset=(- 11462), ULTIMATE.start_s3c_hwmon_probe_~dev.base=50, ULTIMATE.start_s3c_hwmon_probe_~dev.offset=0, ULTIMATE.start_s3c_hwmon_probe_~hwmon~1.base=(- 36893488147419101220), ULTIMATE.start_s3c_hwmon_probe_~hwmon~1.offset=0, ULTIMATE.start_s3c_hwmon_probe_~i~0=0, ULTIMATE.start_s3c_hwmon_probe_~pdata~2.base=(- 18446744073709551616), ULTIMATE.start_s3c_hwmon_probe_~pdata~2.offset=(- 18446744073709551615), ULTIMATE.start_s3c_hwmon_probe_~ret~3=0, ULTIMATE.start_s3c_hwmon_probe_~tmp___1~0=0, ULTIMATE.start_s3c_hwmon_probe_~tmp___3~0=0, ULTIMATE.start_s3c_hwmon_probe_~tmp~4.base=(- 36893488147419101220), ULTIMATE.start_s3c_hwmon_probe_~tmp~4.offset=0, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |ULTIMATE.start___kmalloc_#in~size|=800, |ULTIMATE.start___kmalloc_#in~t|=52, |ULTIMATE.start___kmalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start___kmalloc_#res.offset|=0, |ULTIMATE.start_kmalloc_#in~flags|=52, |ULTIMATE.start_kmalloc_#in~size|=800, |ULTIMATE.start_kmalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_kmalloc_#res.offset|=0, |ULTIMATE.start_kzalloc_#in~flags|=208, |ULTIMATE.start_kzalloc_#in~size|=800, |ULTIMATE.start_kzalloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_kzalloc_#res.offset|=0, |ULTIMATE.start_ldv_device_create_file_5_#in~ldv_func_arg1.base|=50, |ULTIMATE.start_ldv_device_create_file_5_#in~ldv_func_arg1.offset|=12, |ULTIMATE.start_ldv_device_create_file_5_#in~ldv_func_arg2.base|=(- 36893488147419101220), |ULTIMATE.start_ldv_device_create_file_5_#in~ldv_func_arg2.offset|=168, |ULTIMATE.start_ldv_malloc_#in~size|=800, |ULTIMATE.start_ldv_malloc_#res.base|=(- 36893488147419101220), |ULTIMATE.start_ldv_malloc_#res.offset|=0, |ULTIMATE.start_ldv_malloc_#t~malloc25.base|=(- 36893488147419101220), |ULTIMATE.start_ldv_malloc_#t~malloc25.offset|=0, |ULTIMATE.start_main_#t~switch119|=true, |ULTIMATE.start_platform_set_drvdata_#in~data.base|=(- 36893488147419101220), |ULTIMATE.start_platform_set_drvdata_#in~data.offset|=0, |ULTIMATE.start_platform_set_drvdata_#in~pdev.base|=50, |ULTIMATE.start_platform_set_drvdata_#in~pdev.offset|=0, |ULTIMATE.start_s3c_hwmon_add_raw_#in~dev.base|=50, |ULTIMATE.start_s3c_hwmon_add_raw_#in~dev.offset|=12, |ULTIMATE.start_s3c_hwmon_add_raw_#res|=0, |ULTIMATE.start_s3c_hwmon_create_attr_#in~attrs.base|=(- 36893488147419101220), |ULTIMATE.start_s3c_hwmon_create_attr_#in~attrs.offset|=168, |ULTIMATE.start_s3c_hwmon_create_attr_#in~cfg.base|=(- 36893488147419091769), |ULTIMATE.start_s3c_hwmon_create_attr_#in~cfg.offset|=(- 11462), |ULTIMATE.start_s3c_hwmon_create_attr_#in~channel|=0, |ULTIMATE.start_s3c_hwmon_create_attr_#in~dev.base|=50, |ULTIMATE.start_s3c_hwmon_create_attr_#in~dev.offset|=12, |ULTIMATE.start_s3c_hwmon_init_#res|=0, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.base|=50, |ULTIMATE.start_s3c_hwmon_probe_#in~dev.offset|=0, |ULTIMATE.start_s3c_hwmon_probe_#t~mem104.base|=(- 36893488147419091769), |ULTIMATE.start_s3c_hwmon_probe_#t~mem104.offset|=(- 11462), |ULTIMATE.start_s3c_hwmon_probe_#t~nondet99|=65, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.base|=47, |ULTIMATE.start_s3c_hwmon_probe_~#__key~0.offset|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] CALL call ldv_device_create_file_5_#t~ret125 := ldv_device_create_file_dev_attr_of_sensor_device_attribute(ldv_device_create_file_5_~ldv_func_arg2.base, ldv_device_create_file_5_~ldv_func_arg2.offset); VAL [|#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |ldv_device_create_file_dev_attr_of_sensor_device_attribute_#in~attr.base|=(- 36893488147419101220), |ldv_device_create_file_dev_attr_of_sensor_device_attribute_#in~attr.offset|=168, |old(~ldv_call_dev_attr_of_sensor_device_attribute~0)|=0, |old(~ldv_count_2~0)|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] ~attr.base, ~attr.offset := #in~attr.base, #in~attr.offset; VAL [ldv_device_create_file_dev_attr_of_sensor_device_attribute_~attr.base=(- 36893488147419101220), ldv_device_create_file_dev_attr_of_sensor_device_attribute_~attr.offset=168, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |ldv_device_create_file_dev_attr_of_sensor_device_attribute_#in~attr.base|=(- 36893488147419101220), |ldv_device_create_file_dev_attr_of_sensor_device_attribute_#in~attr.offset|=168, |old(~ldv_call_dev_attr_of_sensor_device_attribute~0)|=0, |old(~ldv_count_2~0)|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [?] assume 0 == ~ldv_call_dev_attr_of_sensor_device_attribute~0;~ldv_count_2~0 := 1 + ~ldv_count_2~0;~ldv_call_dev_attr_of_sensor_device_attribute~0 := 1; VAL [ldv_device_create_file_dev_attr_of_sensor_device_attribute_~attr.base=(- 36893488147419101220), ldv_device_create_file_dev_attr_of_sensor_device_attribute_~attr.offset=168, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |ldv_device_create_file_dev_attr_of_sensor_device_attribute_#in~attr.base|=(- 36893488147419101220), |ldv_device_create_file_dev_attr_of_sensor_device_attribute_#in~attr.offset|=168, |old(~ldv_call_dev_attr_of_sensor_device_attribute~0)|=0, |old(~ldv_count_2~0)|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=1, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1] [?] assume !(~ldv_count_1~0 >= ~ldv_count_2~0); VAL [ldv_device_create_file_dev_attr_of_sensor_device_attribute_~attr.base=(- 36893488147419101220), ldv_device_create_file_dev_attr_of_sensor_device_attribute_~attr.offset=168, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |ldv_device_create_file_dev_attr_of_sensor_device_attribute_#in~attr.base|=(- 36893488147419101220), |ldv_device_create_file_dev_attr_of_sensor_device_attribute_#in~attr.offset|=168, |old(~ldv_call_dev_attr_of_sensor_device_attribute~0)|=0, |old(~ldv_count_2~0)|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=1, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1] [?] assume !false; VAL [ldv_device_create_file_dev_attr_of_sensor_device_attribute_~attr.base=(- 36893488147419101220), ldv_device_create_file_dev_attr_of_sensor_device_attribute_~attr.offset=168, |#NULL.base|=0, |#NULL.offset|=0, |#t~string100.base|=38, |#t~string100.offset|=0, |#t~string103.base|=39, |#t~string103.offset|=0, |#t~string107.base|=44, |#t~string107.offset|=0, |#t~string113.base|=41, |#t~string113.offset|=0, |#t~string44.base|=35, |#t~string44.offset|=0, |#t~string45.base|=31, |#t~string45.offset|=0, |#t~string57.base|=29, |#t~string57.offset|=0, |#t~string62.base|=28, |#t~string62.offset|=0, |#t~string65.base|=23, |#t~string65.offset|=0, |#t~string68.base|=22, |#t~string68.offset|=0, |#t~string71.base|=19, |#t~string71.offset|=0, |#t~string74.base|=18, |#t~string74.offset|=0, |#t~string77.base|=15, |#t~string77.offset|=0, |#t~string80.base|=14, |#t~string80.offset|=0, |#t~string81.base|=7, |#t~string81.offset|=0, |#t~string86.base|=5, |#t~string86.offset|=0, |#t~string94.base|=6, |#t~string94.offset|=0, |ldv_device_create_file_dev_attr_of_sensor_device_attribute_#in~attr.base|=(- 36893488147419101220), |ldv_device_create_file_dev_attr_of_sensor_device_attribute_#in~attr.offset|=168, |old(~ldv_call_dev_attr_of_sensor_device_attribute~0)|=0, |old(~ldv_count_2~0)|=0, |~#__this_module~0.base|=46, |~#__this_module~0.offset|=45, |~#s3c_hwmon_driver~0.base|=36, |~#s3c_hwmon_driver~0.offset|=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=1, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1] [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L905] call #t~string44.base, #t~string44.offset := #Ultimate.alloc(4); [L905] call write~init~int(60, #t~string44.base, #t~string44.offset, 1); [L905] call write~init~int(55, #t~string44.base, 1 + #t~string44.offset, 1); [L905] call write~init~int(62, #t~string44.base, 2 + #t~string44.offset, 1); [L905] call write~init~int(0, #t~string44.base, 3 + #t~string44.offset, 1); [L905] call #t~string45.base, #t~string45.offset := #Ultimate.alloc(20); [L958] call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4); [L958] call write~init~int(37, #t~string57.base, #t~string57.offset, 1); [L958] call write~init~int(100, #t~string57.base, 1 + #t~string57.offset, 1); [L958] call write~init~int(10, #t~string57.base, 2 + #t~string57.offset, 1); [L958] call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1); [L976] call #t~string62.base, #t~string62.offset := #Ultimate.alloc(4); [L976] call write~init~int(37, #t~string62.base, #t~string62.offset, 1); [L976] call write~init~int(115, #t~string62.base, 1 + #t~string62.offset, 1); [L976] call write~init~int(10, #t~string62.base, 2 + #t~string62.offset, 1); [L976] call write~init~int(0, #t~string62.base, 3 + #t~string62.offset, 1); [L987] call #t~string65.base, #t~string65.offset := #Ultimate.alloc(11); [L995] call #t~string68.base, #t~string68.offset := #Ultimate.alloc(34); [L1001] call #t~string71.base, #t~string71.offset := #Ultimate.alloc(11); [L1010] call #t~string74.base, #t~string74.offset := #Ultimate.alloc(34); [L1048] call #t~string77.base, #t~string77.offset := #Ultimate.alloc(27); [L1056] call #t~string80.base, #t~string80.offset := #Ultimate.alloc(11); [L1062] call #t~string81.base, #t~string81.offset := #Ultimate.alloc(13); [L1066] call #t~string86.base, #t~string86.offset := #Ultimate.alloc(21); [L1082] call #t~string94.base, #t~string94.offset := #Ultimate.alloc(30); [L1099] call #t~string100.base, #t~string100.offset := #Ultimate.alloc(33); [L1105] call #t~string103.base, #t~string103.offset := #Ultimate.alloc(25); [L1113] call #t~string107.base, #t~string107.offset := #Ultimate.alloc(27); [L1178] call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10); [L1205] ~LDV_IN_INTERRUPT~0 := 0; [L1370] ~ldv_count_1~0 := 0; [L1371] ~ldv_count_2~0 := 0; [L1381] ~ldv_call_dev_attr_of_sensor_device_attribute~0 := 0; [L1178-L1180] call ~#s3c_hwmon_driver~0.base, ~#s3c_hwmon_driver~0.offset := #Ultimate.alloc(153); [L1178-L1180] call write~init~$Pointer$(#funAddr~s3c_hwmon_probe.base, #funAddr~s3c_hwmon_probe.offset, ~#s3c_hwmon_driver~0.base, ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(#funAddr~s3c_hwmon_remove.base, #funAddr~s3c_hwmon_remove.offset, ~#s3c_hwmon_driver~0.base, 8 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 16 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 24 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 32 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(#t~string113.base, #t~string113.offset, ~#s3c_hwmon_driver~0.base, 40 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 48 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#s3c_hwmon_driver~0.base, 56 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 64 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~int(0, ~#s3c_hwmon_driver~0.base, 72 + ~#s3c_hwmon_driver~0.offset, 1); [L1178-L1180] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 73 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 81 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 89 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 97 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 105 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 113 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 121 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 129 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 137 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 145 + ~#s3c_hwmon_driver~0.offset, 8); [?] havoc main_#res; [?] havoc main_#t~ret117, main_#t~nondet118, main_#t~switch119, main_#t~ret120, main_#t~ret121, main_#t~nondet122, main_~var_group1~0.base, main_~var_group1~0.offset, main_~res_s3c_hwmon_probe_10~0, main_~ldv_s_s3c_hwmon_driver_platform_driver~0, main_~tmp~7, main_~tmp___0~2, main_~tmp___1~1; [L1208] havoc main_~var_group1~0.base, main_~var_group1~0.offset; [L1209] havoc main_~res_s3c_hwmon_probe_10~0; [L1210] havoc main_~ldv_s_s3c_hwmon_driver_platform_driver~0; [L1211] havoc main_~tmp~7; [L1212] havoc main_~tmp___0~2; [L1213] havoc main_~tmp___1~1; [L1216] main_~ldv_s_s3c_hwmon_driver_platform_driver~0 := 0; [L1217] ~LDV_IN_INTERRUPT~0 := 1; [L1219] call ldv_handler_precall(); [L1220] havoc s3c_hwmon_init_#res; [L1220] havoc s3c_hwmon_init_#t~ret114, s3c_hwmon_init_~tmp~6; [L1183] havoc s3c_hwmon_init_~tmp~6; [L1186] call s3c_hwmon_init_#t~ret114 := platform_driver_register(~#s3c_hwmon_driver~0.base, ~#s3c_hwmon_driver~0.offset); [L1186] assume -2147483648 <= s3c_hwmon_init_#t~ret114 && s3c_hwmon_init_#t~ret114 <= 2147483647; [L1186] s3c_hwmon_init_~tmp~6 := s3c_hwmon_init_#t~ret114; [L1186] havoc s3c_hwmon_init_#t~ret114; [L1187] s3c_hwmon_init_#res := s3c_hwmon_init_~tmp~6; [L1220] main_#t~ret117 := s3c_hwmon_init_#res; [L1220] assume -2147483648 <= main_#t~ret117 && main_#t~ret117 <= 2147483647; [L1220] main_~tmp~7 := main_#t~ret117; [L1220] havoc main_#t~ret117; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp~7=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1221-L1225] assume !(0 != main_~tmp~7); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp~7=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1259] assume -2147483648 <= main_#t~nondet122 && main_#t~nondet122 <= 2147483647; [L1259] main_~tmp___1~1 := main_#t~nondet122; [L1259] havoc main_#t~nondet122; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___1~1=1, main_~tmp~7=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1260-L1264] assume 0 != main_~tmp___1~1 || 0 != main_~ldv_s_s3c_hwmon_driver_platform_driver~0; [L1228] assume -2147483648 <= main_#t~nondet118 && main_#t~nondet118 <= 2147483647; [L1228] main_~tmp___0~2 := main_#t~nondet118; [L1228] havoc main_#t~nondet118; [L1230] main_#t~switch119 := 0 == main_~tmp___0~2; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1230] assume main_#t~switch119; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1231-L1243] assume 0 == main_~ldv_s_s3c_hwmon_driver_platform_driver~0; [L1232] s3c_hwmon_probe_#in~dev.base, s3c_hwmon_probe_#in~dev.offset := main_~var_group1~0.base, main_~var_group1~0.offset; [L1232] havoc s3c_hwmon_probe_#res; [L1232] havoc s3c_hwmon_probe_#t~mem75.base, s3c_hwmon_probe_#t~mem75.offset, s3c_hwmon_probe_#t~nondet76, s3c_hwmon_probe_#t~ret78.base, s3c_hwmon_probe_#t~ret78.offset, s3c_hwmon_probe_#t~nondet79, s3c_hwmon_probe_#t~ret82.base, s3c_hwmon_probe_#t~ret82.offset, s3c_hwmon_probe_#t~mem83.base, s3c_hwmon_probe_#t~mem83.offset, s3c_hwmon_probe_#t~ret84, s3c_hwmon_probe_#t~nondet85, s3c_hwmon_probe_#t~mem87.base, s3c_hwmon_probe_#t~mem87.offset, s3c_hwmon_probe_#t~ret88, s3c_hwmon_probe_#t~ret89, s3c_hwmon_probe_#t~ret90.base, s3c_hwmon_probe_#t~ret90.offset, s3c_hwmon_probe_#t~mem91.base, s3c_hwmon_probe_#t~mem91.offset, s3c_hwmon_probe_#t~ret92, s3c_hwmon_probe_#t~nondet93, s3c_hwmon_probe_#t~mem95.base, s3c_hwmon_probe_#t~mem95.offset, s3c_hwmon_probe_#t~ret96, s3c_hwmon_probe_#t~mem97.base, s3c_hwmon_probe_#t~mem97.offset, s3c_hwmon_probe_#t~mem98, s3c_hwmon_probe_#t~nondet99, s3c_hwmon_probe_#t~mem101, s3c_hwmon_probe_#t~nondet102, s3c_hwmon_probe_#t~mem104.base, s3c_hwmon_probe_#t~mem104.offset, s3c_hwmon_probe_#t~ret105, s3c_hwmon_probe_#t~nondet106, s3c_hwmon_probe_#t~mem108.base, s3c_hwmon_probe_#t~mem108.offset, s3c_hwmon_probe_#t~mem109.base, s3c_hwmon_probe_#t~mem109.offset, s3c_hwmon_probe_~dev.base, s3c_hwmon_probe_~dev.offset, s3c_hwmon_probe_~pdata~2.base, s3c_hwmon_probe_~pdata~2.offset, s3c_hwmon_probe_~hwmon~1.base, s3c_hwmon_probe_~hwmon~1.offset, s3c_hwmon_probe_~ret~3, s3c_hwmon_probe_~i~0, s3c_hwmon_probe_~tmp~4.base, s3c_hwmon_probe_~tmp~4.offset, s3c_hwmon_probe_~#__key~0.base, s3c_hwmon_probe_~#__key~0.offset, s3c_hwmon_probe_~tmp___0~1, s3c_hwmon_probe_~tmp___1~0, s3c_hwmon_probe_~tmp___2~1, s3c_hwmon_probe_~tmp___3~0, s3c_hwmon_probe_~cfg~2.base, s3c_hwmon_probe_~cfg~2.offset; [L1030-L1151] s3c_hwmon_probe_~dev.base, s3c_hwmon_probe_~dev.offset := s3c_hwmon_probe_#in~dev.base, s3c_hwmon_probe_#in~dev.offset; [L1032] havoc s3c_hwmon_probe_~pdata~2.base, s3c_hwmon_probe_~pdata~2.offset; [L1033] havoc s3c_hwmon_probe_~hwmon~1.base, s3c_hwmon_probe_~hwmon~1.offset; [L1034] havoc s3c_hwmon_probe_~ret~3; [L1035] havoc s3c_hwmon_probe_~i~0; [L1036] havoc s3c_hwmon_probe_~tmp~4.base, s3c_hwmon_probe_~tmp~4.offset; [L1037] call s3c_hwmon_probe_~#__key~0.base, s3c_hwmon_probe_~#__key~0.offset := #Ultimate.alloc(8); [L1038] havoc s3c_hwmon_probe_~tmp___0~1; [L1039] havoc s3c_hwmon_probe_~tmp___1~0; [L1040] havoc s3c_hwmon_probe_~tmp___2~1; [L1041] havoc s3c_hwmon_probe_~tmp___3~0; [L1042] havoc s3c_hwmon_probe_~cfg~2.base, s3c_hwmon_probe_~cfg~2.offset; [L1045] call s3c_hwmon_probe_#t~mem75.base, s3c_hwmon_probe_#t~mem75.offset := read~$Pointer$(s3c_hwmon_probe_~dev.base, 277 + s3c_hwmon_probe_~dev.offset, 8); [L1045] s3c_hwmon_probe_~pdata~2.base, s3c_hwmon_probe_~pdata~2.offset := s3c_hwmon_probe_#t~mem75.base, s3c_hwmon_probe_#t~mem75.offset; [L1045] havoc s3c_hwmon_probe_#t~mem75.base, s3c_hwmon_probe_#t~mem75.offset; [L1046] s3c_hwmon_probe_~ret~3 := 0; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1047-L1052] assume !(0 == (s3c_hwmon_probe_~pdata~2.base + s3c_hwmon_probe_~pdata~2.offset) % 18446744073709551616); [L1053] kzalloc_#in~size, kzalloc_#in~flags := 800, 208; [L1053] havoc kzalloc_#res.base, kzalloc_#res.offset; [L1053] havoc kzalloc_#t~ret29.base, kzalloc_#t~ret29.offset, kzalloc_~size, kzalloc_~flags, kzalloc_~tmp~0.base, kzalloc_~tmp~0.offset; [L854-L862] kzalloc_~size := kzalloc_#in~size; [L854-L862] kzalloc_~flags := kzalloc_#in~flags; [L856] havoc kzalloc_~tmp~0.base, kzalloc_~tmp~0.offset; [L859] kmalloc_#in~size, kmalloc_#in~flags := kzalloc_~size, ~bitwiseOr(kzalloc_~flags, 32768); [L859] havoc kmalloc_#res.base, kmalloc_#res.offset; [L859] havoc kmalloc_#t~ret28.base, kmalloc_#t~ret28.offset, kmalloc_~size, kmalloc_~flags, kmalloc_~tmp___2~0.base, kmalloc_~tmp___2~0.offset; [L845-L853] kmalloc_~size := kmalloc_#in~size; [L845-L853] kmalloc_~flags := kmalloc_#in~flags; [L847] havoc kmalloc_~tmp___2~0.base, kmalloc_~tmp___2~0.offset; [L850] __kmalloc_#in~size, __kmalloc_#in~t := kmalloc_~size, kmalloc_~flags; [L850] havoc __kmalloc_#res.base, __kmalloc_#res.offset; [L850] havoc __kmalloc_#t~ret27.base, __kmalloc_#t~ret27.offset, __kmalloc_~size, __kmalloc_~t; [L841-L844] __kmalloc_~size := __kmalloc_#in~size; [L841-L844] __kmalloc_~t := __kmalloc_#in~t; [L843] ldv_malloc_#in~size := __kmalloc_~size; [L843] havoc ldv_malloc_#res.base, ldv_malloc_#res.offset; [L843] havoc ldv_malloc_#t~nondet24, ldv_malloc_#t~malloc25.base, ldv_malloc_#t~malloc25.offset, ldv_malloc_#t~ret26, ldv_malloc_~res~0.base, ldv_malloc_~res~0.offset, ldv_malloc_~size; [L830-L840] ldv_malloc_~size := ldv_malloc_#in~size; [L832] assume -2147483648 <= ldv_malloc_#t~nondet24 && ldv_malloc_#t~nondet24 <= 2147483647; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_~flags=52, kmalloc_~size=800, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_~flags=208, kzalloc_~size=800, ldv_malloc_#in~size=800, ldv_malloc_#t~nondet24=-1, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L832-L839] assume 0 != ldv_malloc_#t~nondet24; [L832] havoc ldv_malloc_#t~nondet24; [L833] call ldv_malloc_#t~malloc25.base, ldv_malloc_#t~malloc25.offset := #Ultimate.alloc(ldv_malloc_~size); [L833] ldv_malloc_~res~0.base, ldv_malloc_~res~0.offset := ldv_malloc_#t~malloc25.base, ldv_malloc_#t~malloc25.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_~flags=52, kmalloc_~size=800, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_~flags=208, kzalloc_~size=800, ldv_malloc_#in~size=800, ldv_malloc_#t~malloc25.base=-36893488147419101220, ldv_malloc_#t~malloc25.offset=0, ldv_malloc_~res~0.base=-36893488147419101220, ldv_malloc_~res~0.offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L834] CALL call ldv_malloc_#t~ret26 := ldv_is_err(ldv_malloc_~res~0.base, ldv_malloc_~res~0.offset); VAL [#in~ptr.base=-36893488147419101220, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1327-L1334] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L1332] #res := (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0); [L828] ensures true; VAL [#in~ptr.base=-36893488147419101220, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr.base=-36893488147419101220, ~ptr.offset=0] [L834] RET call ldv_malloc_#t~ret26 := ldv_is_err(ldv_malloc_~res~0.base, ldv_malloc_~res~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_~flags=52, kmalloc_~size=800, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_~flags=208, kzalloc_~size=800, ldv_malloc_#in~size=800, ldv_malloc_#t~malloc25.base=-36893488147419101220, ldv_malloc_#t~malloc25.offset=0, ldv_malloc_#t~ret26=0, ldv_malloc_~res~0.base=-36893488147419101220, ldv_malloc_~res~0.offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L834] assume -9223372036854775808 <= ldv_malloc_#t~ret26 && ldv_malloc_#t~ret26 <= 9223372036854775807; [L834] assume 0 != (if 0 == ldv_malloc_#t~ret26 then 1 else 0); [L834] havoc ldv_malloc_#t~ret26; [L836] ldv_malloc_#res.base, ldv_malloc_#res.offset := ldv_malloc_~res~0.base, ldv_malloc_~res~0.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_~flags=52, kmalloc_~size=800, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_~flags=208, kzalloc_~size=800, ldv_malloc_#in~size=800, ldv_malloc_#res.base=-36893488147419101220, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc25.base=-36893488147419101220, ldv_malloc_#t~malloc25.offset=0, ldv_malloc_~res~0.base=-36893488147419101220, ldv_malloc_~res~0.offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L843] __kmalloc_#t~ret27.base, __kmalloc_#t~ret27.offset := ldv_malloc_#res.base, ldv_malloc_#res.offset; [L843] __kmalloc_#res.base, __kmalloc_#res.offset := __kmalloc_#t~ret27.base, __kmalloc_#t~ret27.offset; [L843] havoc __kmalloc_#t~ret27.base, __kmalloc_#t~ret27.offset; [L850] kmalloc_#t~ret28.base, kmalloc_#t~ret28.offset := __kmalloc_#res.base, __kmalloc_#res.offset; [L850] kmalloc_~tmp___2~0.base, kmalloc_~tmp___2~0.offset := kmalloc_#t~ret28.base, kmalloc_#t~ret28.offset; [L850] havoc kmalloc_#t~ret28.base, kmalloc_#t~ret28.offset; [L851] kmalloc_#res.base, kmalloc_#res.offset := kmalloc_~tmp___2~0.base, kmalloc_~tmp___2~0.offset; [L859] kzalloc_#t~ret29.base, kzalloc_#t~ret29.offset := kmalloc_#res.base, kmalloc_#res.offset; [L859] kzalloc_~tmp~0.base, kzalloc_~tmp~0.offset := kzalloc_#t~ret29.base, kzalloc_#t~ret29.offset; [L859] havoc kzalloc_#t~ret29.base, kzalloc_#t~ret29.offset; [L860] kzalloc_#res.base, kzalloc_#res.offset := kzalloc_~tmp~0.base, kzalloc_~tmp~0.offset; [L1053] s3c_hwmon_probe_#t~ret78.base, s3c_hwmon_probe_#t~ret78.offset := kzalloc_#res.base, kzalloc_#res.offset; [L1053] s3c_hwmon_probe_~tmp~4.base, s3c_hwmon_probe_~tmp~4.offset := s3c_hwmon_probe_#t~ret78.base, s3c_hwmon_probe_#t~ret78.offset; [L1053] havoc s3c_hwmon_probe_#t~ret78.base, s3c_hwmon_probe_#t~ret78.offset; [L1054] s3c_hwmon_probe_~hwmon~1.base, s3c_hwmon_probe_~hwmon~1.offset := s3c_hwmon_probe_~tmp~4.base, s3c_hwmon_probe_~tmp~4.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res.base=-36893488147419101220, __kmalloc_#res.offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res.base=-36893488147419101220, kmalloc_#res.offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0.base=-36893488147419101220, kmalloc_~tmp___2~0.offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res.base=-36893488147419101220, kzalloc_#res.offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0.base=-36893488147419101220, kzalloc_~tmp~0.offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res.base=-36893488147419101220, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc25.base=-36893488147419101220, ldv_malloc_#t~malloc25.offset=0, ldv_malloc_~res~0.base=-36893488147419101220, ldv_malloc_~res~0.offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp~4.base=-36893488147419101220, s3c_hwmon_probe_~tmp~4.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1055-L1060] assume !(0 == (s3c_hwmon_probe_~hwmon~1.base + s3c_hwmon_probe_~hwmon~1.offset) % 18446744073709551616); [L1061] platform_set_drvdata_#in~pdev.base, platform_set_drvdata_#in~pdev.offset, platform_set_drvdata_#in~data.base, platform_set_drvdata_#in~data.offset := s3c_hwmon_probe_~dev.base, s3c_hwmon_probe_~dev.offset, s3c_hwmon_probe_~hwmon~1.base, s3c_hwmon_probe_~hwmon~1.offset; [L1061] havoc platform_set_drvdata_~pdev.base, platform_set_drvdata_~pdev.offset, platform_set_drvdata_~data.base, platform_set_drvdata_~data.offset; [L876-L884] platform_set_drvdata_~pdev.base, platform_set_drvdata_~pdev.offset := platform_set_drvdata_#in~pdev.base, platform_set_drvdata_#in~pdev.offset; [L876-L884] platform_set_drvdata_~data.base, platform_set_drvdata_~data.offset := platform_set_drvdata_#in~data.base, platform_set_drvdata_#in~data.offset; [L881] call dev_set_drvdata(platform_set_drvdata_~pdev.base, 12 + platform_set_drvdata_~pdev.offset, platform_set_drvdata_~data.base, platform_set_drvdata_~data.offset); [L1062] call __mutex_init(s3c_hwmon_probe_~hwmon~1.base, s3c_hwmon_probe_~hwmon~1.offset, #t~string81.base, #t~string81.offset, s3c_hwmon_probe_~#__key~0.base, s3c_hwmon_probe_~#__key~0.offset); [L1063] call s3c_hwmon_probe_#t~ret82.base, s3c_hwmon_probe_#t~ret82.offset := s3c_adc_register(s3c_hwmon_probe_~dev.base, s3c_hwmon_probe_~dev.offset, 0, 0, 0, 0, 0); [L1063] call write~$Pointer$(s3c_hwmon_probe_#t~ret82.base, s3c_hwmon_probe_#t~ret82.offset, s3c_hwmon_probe_~hwmon~1.base, 152 + s3c_hwmon_probe_~hwmon~1.offset, 8); [L1063] havoc s3c_hwmon_probe_#t~ret82.base, s3c_hwmon_probe_#t~ret82.offset; [L1064] call s3c_hwmon_probe_#t~mem83.base, s3c_hwmon_probe_#t~mem83.offset := read~$Pointer$(s3c_hwmon_probe_~hwmon~1.base, 152 + s3c_hwmon_probe_~hwmon~1.offset, 8); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res.base=-36893488147419101220, __kmalloc_#res.offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res.base=-36893488147419101220, kmalloc_#res.offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0.base=-36893488147419101220, kmalloc_~tmp___2~0.offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res.base=-36893488147419101220, kzalloc_#res.offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0.base=-36893488147419101220, kzalloc_~tmp~0.offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res.base=-36893488147419101220, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc25.base=-36893488147419101220, ldv_malloc_#t~malloc25.offset=0, ldv_malloc_~res~0.base=-36893488147419101220, ldv_malloc_~res~0.offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, platform_set_drvdata_#in~data.base=-36893488147419101220, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=50, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=-36893488147419101220, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=50, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_#t~mem83.base=0, s3c_hwmon_probe_#t~mem83.offset=18446744073709551616, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp~4.base=-36893488147419101220, s3c_hwmon_probe_~tmp~4.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1064] CALL call s3c_hwmon_probe_#t~ret84 := IS_ERR(s3c_hwmon_probe_#t~mem83.base, s3c_hwmon_probe_#t~mem83.offset); VAL [#in~ptr.base=0, #in~ptr.offset=18446744073709551616, #NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1283-L1291] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L1285] havoc ~tmp~9; VAL [#in~ptr.base=0, #in~ptr.offset=18446744073709551616, #NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr.base=0, ~ptr.offset=18446744073709551616] [L1288] CALL call #t~ret124 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=0, #in~ptr.offset=18446744073709551616, #NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1327-L1334] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L1332] #res := (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0); [L828] ensures true; VAL [#in~ptr.base=0, #in~ptr.offset=18446744073709551616, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr.base=0, ~ptr.offset=18446744073709551616] [L1288] RET call #t~ret124 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=0, #in~ptr.offset=18446744073709551616, #NULL.base=0, #NULL.offset=0, #t~ret124=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr.base=0, ~ptr.offset=18446744073709551616] [L1288] assume -9223372036854775808 <= #t~ret124 && #t~ret124 <= 9223372036854775807; [L1288] ~tmp~9 := #t~ret124; [L1288] havoc #t~ret124; [L1289] #res := ~tmp~9; [L864] ensures true; VAL [#in~ptr.base=0, #in~ptr.offset=18446744073709551616, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr.base=0, ~ptr.offset=18446744073709551616, ~tmp~9=0] [L1064] RET call s3c_hwmon_probe_#t~ret84 := IS_ERR(s3c_hwmon_probe_#t~mem83.base, s3c_hwmon_probe_#t~mem83.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res.base=-36893488147419101220, __kmalloc_#res.offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res.base=-36893488147419101220, kmalloc_#res.offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0.base=-36893488147419101220, kmalloc_~tmp___2~0.offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res.base=-36893488147419101220, kzalloc_#res.offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0.base=-36893488147419101220, kzalloc_~tmp~0.offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res.base=-36893488147419101220, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc25.base=-36893488147419101220, ldv_malloc_#t~malloc25.offset=0, ldv_malloc_~res~0.base=-36893488147419101220, ldv_malloc_~res~0.offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, platform_set_drvdata_#in~data.base=-36893488147419101220, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=50, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=-36893488147419101220, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=50, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_#t~mem83.base=0, s3c_hwmon_probe_#t~mem83.offset=18446744073709551616, s3c_hwmon_probe_#t~ret84=0, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp~4.base=-36893488147419101220, s3c_hwmon_probe_~tmp~4.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1064] assume -9223372036854775808 <= s3c_hwmon_probe_#t~ret84 && s3c_hwmon_probe_#t~ret84 <= 9223372036854775807; [L1064] s3c_hwmon_probe_~tmp___1~0 := s3c_hwmon_probe_#t~ret84; [L1064] havoc s3c_hwmon_probe_#t~mem83.base, s3c_hwmon_probe_#t~mem83.offset; [L1064] havoc s3c_hwmon_probe_#t~ret84; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res.base=-36893488147419101220, __kmalloc_#res.offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res.base=-36893488147419101220, kmalloc_#res.offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0.base=-36893488147419101220, kmalloc_~tmp___2~0.offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res.base=-36893488147419101220, kzalloc_#res.offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0.base=-36893488147419101220, kzalloc_~tmp~0.offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res.base=-36893488147419101220, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc25.base=-36893488147419101220, ldv_malloc_#t~malloc25.offset=0, ldv_malloc_~res~0.base=-36893488147419101220, ldv_malloc_~res~0.offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, platform_set_drvdata_#in~data.base=-36893488147419101220, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=50, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=-36893488147419101220, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=50, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp~4.base=-36893488147419101220, s3c_hwmon_probe_~tmp~4.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1065-L1072] assume !(0 != s3c_hwmon_probe_~tmp___1~0); [L1073] s3c_hwmon_add_raw_#in~dev.base, s3c_hwmon_add_raw_#in~dev.offset := s3c_hwmon_probe_~dev.base, 12 + s3c_hwmon_probe_~dev.offset; [L1073] havoc s3c_hwmon_add_raw_#res; [L1073] havoc s3c_hwmon_add_raw_~dev.base, s3c_hwmon_add_raw_~dev.offset; [L911-L918] s3c_hwmon_add_raw_~dev.base, s3c_hwmon_add_raw_~dev.offset := s3c_hwmon_add_raw_#in~dev.base, s3c_hwmon_add_raw_#in~dev.offset; [L916] s3c_hwmon_add_raw_#res := 0; [L1073] s3c_hwmon_probe_#t~ret89 := s3c_hwmon_add_raw_#res; [L1073] assume -2147483648 <= s3c_hwmon_probe_#t~ret89 && s3c_hwmon_probe_#t~ret89 <= 2147483647; [L1073] s3c_hwmon_probe_~ret~3 := s3c_hwmon_probe_#t~ret89; [L1073] havoc s3c_hwmon_probe_#t~ret89; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res.base=-36893488147419101220, __kmalloc_#res.offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res.base=-36893488147419101220, kmalloc_#res.offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0.base=-36893488147419101220, kmalloc_~tmp___2~0.offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res.base=-36893488147419101220, kzalloc_#res.offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0.base=-36893488147419101220, kzalloc_~tmp~0.offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res.base=-36893488147419101220, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc25.base=-36893488147419101220, ldv_malloc_#t~malloc25.offset=0, ldv_malloc_~res~0.base=-36893488147419101220, ldv_malloc_~res~0.offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, platform_set_drvdata_#in~data.base=-36893488147419101220, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=50, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=-36893488147419101220, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=50, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_add_raw_#in~dev.base=50, s3c_hwmon_add_raw_#in~dev.offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev.base=50, s3c_hwmon_add_raw_~dev.offset=12, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp~4.base=-36893488147419101220, s3c_hwmon_probe_~tmp~4.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1074-L1078] assume !(0 != s3c_hwmon_probe_~ret~3); [L1079] call s3c_hwmon_probe_#t~ret90.base, s3c_hwmon_probe_#t~ret90.offset := hwmon_device_register(s3c_hwmon_probe_~dev.base, 12 + s3c_hwmon_probe_~dev.offset); [L1079] call write~$Pointer$(s3c_hwmon_probe_#t~ret90.base, s3c_hwmon_probe_#t~ret90.offset, s3c_hwmon_probe_~hwmon~1.base, 160 + s3c_hwmon_probe_~hwmon~1.offset, 8); [L1079] havoc s3c_hwmon_probe_#t~ret90.base, s3c_hwmon_probe_#t~ret90.offset; [L1080] call s3c_hwmon_probe_#t~mem91.base, s3c_hwmon_probe_#t~mem91.offset := read~$Pointer$(s3c_hwmon_probe_~hwmon~1.base, 160 + s3c_hwmon_probe_~hwmon~1.offset, 8); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res.base=-36893488147419101220, __kmalloc_#res.offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res.base=-36893488147419101220, kmalloc_#res.offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0.base=-36893488147419101220, kmalloc_~tmp___2~0.offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res.base=-36893488147419101220, kzalloc_#res.offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0.base=-36893488147419101220, kzalloc_~tmp~0.offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res.base=-36893488147419101220, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc25.base=-36893488147419101220, ldv_malloc_#t~malloc25.offset=0, ldv_malloc_~res~0.base=-36893488147419101220, ldv_malloc_~res~0.offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, platform_set_drvdata_#in~data.base=-36893488147419101220, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=50, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=-36893488147419101220, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=50, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_add_raw_#in~dev.base=50, s3c_hwmon_add_raw_#in~dev.offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev.base=50, s3c_hwmon_add_raw_~dev.offset=12, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_#t~mem91.base=0, s3c_hwmon_probe_#t~mem91.offset=182862574002682785169408, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp~4.base=-36893488147419101220, s3c_hwmon_probe_~tmp~4.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1080] CALL call s3c_hwmon_probe_#t~ret92 := IS_ERR(s3c_hwmon_probe_#t~mem91.base, s3c_hwmon_probe_#t~mem91.offset); VAL [#in~ptr.base=0, #in~ptr.offset=182862574002682785169408, #NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1283-L1291] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L1285] havoc ~tmp~9; VAL [#in~ptr.base=0, #in~ptr.offset=182862574002682785169408, #NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr.base=0, ~ptr.offset=182862574002682785169408] [L1288] CALL call #t~ret124 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=0, #in~ptr.offset=182862574002682785169408, #NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1327-L1334] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L1332] #res := (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0); [L828] ensures true; VAL [#in~ptr.base=0, #in~ptr.offset=182862574002682785169408, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr.base=0, ~ptr.offset=182862574002682785169408] [L1288] RET call #t~ret124 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=0, #in~ptr.offset=182862574002682785169408, #NULL.base=0, #NULL.offset=0, #t~ret124=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr.base=0, ~ptr.offset=182862574002682785169408] [L1288] assume -9223372036854775808 <= #t~ret124 && #t~ret124 <= 9223372036854775807; [L1288] ~tmp~9 := #t~ret124; [L1288] havoc #t~ret124; [L1289] #res := ~tmp~9; [L864] ensures true; VAL [#in~ptr.base=0, #in~ptr.offset=182862574002682785169408, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr.base=0, ~ptr.offset=182862574002682785169408, ~tmp~9=0] [L1080] RET call s3c_hwmon_probe_#t~ret92 := IS_ERR(s3c_hwmon_probe_#t~mem91.base, s3c_hwmon_probe_#t~mem91.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res.base=-36893488147419101220, __kmalloc_#res.offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res.base=-36893488147419101220, kmalloc_#res.offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0.base=-36893488147419101220, kmalloc_~tmp___2~0.offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res.base=-36893488147419101220, kzalloc_#res.offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0.base=-36893488147419101220, kzalloc_~tmp~0.offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res.base=-36893488147419101220, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc25.base=-36893488147419101220, ldv_malloc_#t~malloc25.offset=0, ldv_malloc_~res~0.base=-36893488147419101220, ldv_malloc_~res~0.offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, platform_set_drvdata_#in~data.base=-36893488147419101220, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=50, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=-36893488147419101220, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=50, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_add_raw_#in~dev.base=50, s3c_hwmon_add_raw_#in~dev.offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev.base=50, s3c_hwmon_add_raw_~dev.offset=12, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_#t~mem91.base=0, s3c_hwmon_probe_#t~mem91.offset=182862574002682785169408, s3c_hwmon_probe_#t~ret92=0, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp~4.base=-36893488147419101220, s3c_hwmon_probe_~tmp~4.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1080] assume -9223372036854775808 <= s3c_hwmon_probe_#t~ret92 && s3c_hwmon_probe_#t~ret92 <= 9223372036854775807; [L1080] s3c_hwmon_probe_~tmp___3~0 := s3c_hwmon_probe_#t~ret92; [L1080] havoc s3c_hwmon_probe_#t~mem91.base, s3c_hwmon_probe_#t~mem91.offset; [L1080] havoc s3c_hwmon_probe_#t~ret92; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res.base=-36893488147419101220, __kmalloc_#res.offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res.base=-36893488147419101220, kmalloc_#res.offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0.base=-36893488147419101220, kmalloc_~tmp___2~0.offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res.base=-36893488147419101220, kzalloc_#res.offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0.base=-36893488147419101220, kzalloc_~tmp~0.offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res.base=-36893488147419101220, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc25.base=-36893488147419101220, ldv_malloc_#t~malloc25.offset=0, ldv_malloc_~res~0.base=-36893488147419101220, ldv_malloc_~res~0.offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, platform_set_drvdata_#in~data.base=-36893488147419101220, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=50, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=-36893488147419101220, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=50, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_add_raw_#in~dev.base=50, s3c_hwmon_add_raw_#in~dev.offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev.base=50, s3c_hwmon_add_raw_~dev.offset=12, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp___3~0=0, s3c_hwmon_probe_~tmp~4.base=-36893488147419101220, s3c_hwmon_probe_~tmp~4.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1081-L1088] assume !(0 != s3c_hwmon_probe_~tmp___3~0); [L1089] s3c_hwmon_probe_~i~0 := 0; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res.base=-36893488147419101220, __kmalloc_#res.offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res.base=-36893488147419101220, kmalloc_#res.offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0.base=-36893488147419101220, kmalloc_~tmp___2~0.offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res.base=-36893488147419101220, kzalloc_#res.offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0.base=-36893488147419101220, kzalloc_~tmp~0.offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res.base=-36893488147419101220, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc25.base=-36893488147419101220, ldv_malloc_#t~malloc25.offset=0, ldv_malloc_~res~0.base=-36893488147419101220, ldv_malloc_~res~0.offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, platform_set_drvdata_#in~data.base=-36893488147419101220, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=50, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=-36893488147419101220, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=50, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_add_raw_#in~dev.base=50, s3c_hwmon_add_raw_#in~dev.offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev.base=50, s3c_hwmon_add_raw_~dev.offset=12, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~i~0=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp___3~0=0, s3c_hwmon_probe_~tmp~4.base=-36893488147419101220, s3c_hwmon_probe_~tmp~4.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1134-L1138] assume s3c_hwmon_probe_~i~0 % 4294967296 <= 7; [L1092] call s3c_hwmon_probe_#t~mem97.base, s3c_hwmon_probe_#t~mem97.offset := read~$Pointer$(s3c_hwmon_probe_~pdata~2.base, s3c_hwmon_probe_~pdata~2.offset + 8 * s3c_hwmon_probe_~i~0, 8); [L1092] s3c_hwmon_probe_~cfg~2.base, s3c_hwmon_probe_~cfg~2.offset := s3c_hwmon_probe_#t~mem97.base, s3c_hwmon_probe_#t~mem97.offset; [L1092] havoc s3c_hwmon_probe_#t~mem97.base, s3c_hwmon_probe_#t~mem97.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res.base=-36893488147419101220, __kmalloc_#res.offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res.base=-36893488147419101220, kmalloc_#res.offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0.base=-36893488147419101220, kmalloc_~tmp___2~0.offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res.base=-36893488147419101220, kzalloc_#res.offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0.base=-36893488147419101220, kzalloc_~tmp~0.offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res.base=-36893488147419101220, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc25.base=-36893488147419101220, ldv_malloc_#t~malloc25.offset=0, ldv_malloc_~res~0.base=-36893488147419101220, ldv_malloc_~res~0.offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, platform_set_drvdata_#in~data.base=-36893488147419101220, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=50, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=-36893488147419101220, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=50, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_add_raw_#in~dev.base=50, s3c_hwmon_add_raw_#in~dev.offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev.base=50, s3c_hwmon_add_raw_~dev.offset=12, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~cfg~2.base=-36893488147419091769, s3c_hwmon_probe_~cfg~2.offset=-11462, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~i~0=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp___3~0=0, s3c_hwmon_probe_~tmp~4.base=-36893488147419101220, s3c_hwmon_probe_~tmp~4.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1093-L1097] assume !(0 == (s3c_hwmon_probe_~cfg~2.base + s3c_hwmon_probe_~cfg~2.offset) % 18446744073709551616); [L1098] call s3c_hwmon_probe_#t~mem98 := read~int(s3c_hwmon_probe_~cfg~2.base, 8 + s3c_hwmon_probe_~cfg~2.offset, 4); [L1098-L1103] assume !(s3c_hwmon_probe_#t~mem98 % 4294967296 > 65535); [L1098] havoc s3c_hwmon_probe_#t~mem98; [L1104] call s3c_hwmon_probe_#t~mem101 := read~int(s3c_hwmon_probe_~cfg~2.base, 12 + s3c_hwmon_probe_~cfg~2.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res.base=-36893488147419101220, __kmalloc_#res.offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res.base=-36893488147419101220, kmalloc_#res.offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0.base=-36893488147419101220, kmalloc_~tmp___2~0.offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res.base=-36893488147419101220, kzalloc_#res.offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0.base=-36893488147419101220, kzalloc_~tmp~0.offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res.base=-36893488147419101220, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc25.base=-36893488147419101220, ldv_malloc_#t~malloc25.offset=0, ldv_malloc_~res~0.base=-36893488147419101220, ldv_malloc_~res~0.offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, platform_set_drvdata_#in~data.base=-36893488147419101220, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=50, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=-36893488147419101220, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=50, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_add_raw_#in~dev.base=50, s3c_hwmon_add_raw_#in~dev.offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev.base=50, s3c_hwmon_add_raw_~dev.offset=12, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_#t~mem101=21461951578113, s3c_hwmon_probe_#t~nondet99=65, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~cfg~2.base=-36893488147419091769, s3c_hwmon_probe_~cfg~2.offset=-11462, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~i~0=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp___3~0=0, s3c_hwmon_probe_~tmp~4.base=-36893488147419101220, s3c_hwmon_probe_~tmp~4.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1104-L1109] assume !(0 == s3c_hwmon_probe_#t~mem101 % 4294967296); [L1104] havoc s3c_hwmon_probe_#t~mem101; [L1110] call s3c_hwmon_probe_#t~mem104.base, s3c_hwmon_probe_#t~mem104.offset := read~$Pointer$(s3c_hwmon_probe_~pdata~2.base, s3c_hwmon_probe_~pdata~2.offset + 8 * s3c_hwmon_probe_~i~0, 8); [L1110-L1111] s3c_hwmon_create_attr_#in~dev.base, s3c_hwmon_create_attr_#in~dev.offset, s3c_hwmon_create_attr_#in~cfg.base, s3c_hwmon_create_attr_#in~cfg.offset, s3c_hwmon_create_attr_#in~attrs.base, s3c_hwmon_create_attr_#in~attrs.offset, s3c_hwmon_create_attr_#in~channel := s3c_hwmon_probe_~dev.base, 12 + s3c_hwmon_probe_~dev.offset, s3c_hwmon_probe_#t~mem104.base, s3c_hwmon_probe_#t~mem104.offset, s3c_hwmon_probe_~hwmon~1.base, 168 + s3c_hwmon_probe_~hwmon~1.offset + 116 * (s3c_hwmon_probe_~i~0 % 4294967296), s3c_hwmon_probe_~i~0; [L1110-L1111] havoc s3c_hwmon_create_attr_#res; [L1110-L1111] havoc s3c_hwmon_create_attr_#t~nondet64, s3c_hwmon_create_attr_#t~ret66, s3c_hwmon_create_attr_#t~nondet67, s3c_hwmon_create_attr_#t~mem69.base, s3c_hwmon_create_attr_#t~mem69.offset, s3c_hwmon_create_attr_#t~nondet70, s3c_hwmon_create_attr_#t~ret72, s3c_hwmon_create_attr_#t~nondet73, s3c_hwmon_create_attr_~dev.base, s3c_hwmon_create_attr_~dev.offset, s3c_hwmon_create_attr_~cfg.base, s3c_hwmon_create_attr_~cfg.offset, s3c_hwmon_create_attr_~attrs.base, s3c_hwmon_create_attr_~attrs.offset, s3c_hwmon_create_attr_~channel, s3c_hwmon_create_attr_~attr~0.base, s3c_hwmon_create_attr_~attr~0.offset, s3c_hwmon_create_attr_~ret~2; [L980-L1019] s3c_hwmon_create_attr_~dev.base, s3c_hwmon_create_attr_~dev.offset := s3c_hwmon_create_attr_#in~dev.base, s3c_hwmon_create_attr_#in~dev.offset; [L980-L1019] s3c_hwmon_create_attr_~cfg.base, s3c_hwmon_create_attr_~cfg.offset := s3c_hwmon_create_attr_#in~cfg.base, s3c_hwmon_create_attr_#in~cfg.offset; [L980-L1019] s3c_hwmon_create_attr_~attrs.base, s3c_hwmon_create_attr_~attrs.offset := s3c_hwmon_create_attr_#in~attrs.base, s3c_hwmon_create_attr_#in~attrs.offset; [L980-L1019] s3c_hwmon_create_attr_~channel := s3c_hwmon_create_attr_#in~channel; [L983] havoc s3c_hwmon_create_attr_~attr~0.base, s3c_hwmon_create_attr_~attr~0.offset; [L984] havoc s3c_hwmon_create_attr_~ret~2; [L987] havoc s3c_hwmon_create_attr_#t~nondet64; [L988] s3c_hwmon_create_attr_~attr~0.base, s3c_hwmon_create_attr_~attr~0.offset := s3c_hwmon_create_attr_~attrs.base, s3c_hwmon_create_attr_~attrs.offset; [L989] call write~int(s3c_hwmon_create_attr_~channel, s3c_hwmon_create_attr_~attr~0.base, 42 + s3c_hwmon_create_attr_~attr~0.offset, 4); [L990] call write~$Pointer$(s3c_hwmon_create_attr_~attrs.base, 92 + s3c_hwmon_create_attr_~attrs.offset, s3c_hwmon_create_attr_~attr~0.base, s3c_hwmon_create_attr_~attr~0.offset, 8); [L991] call write~int(292, s3c_hwmon_create_attr_~attr~0.base, 8 + s3c_hwmon_create_attr_~attr~0.offset, 2); [L992] call write~$Pointer$(#funAddr~s3c_hwmon_ch_show.base, #funAddr~s3c_hwmon_ch_show.offset, s3c_hwmon_create_attr_~attr~0.base, 26 + s3c_hwmon_create_attr_~attr~0.offset, 8); [L993] ldv_device_create_file_5_#in~ldv_func_arg1.base, ldv_device_create_file_5_#in~ldv_func_arg1.offset, ldv_device_create_file_5_#in~ldv_func_arg2.base, ldv_device_create_file_5_#in~ldv_func_arg2.offset := s3c_hwmon_create_attr_~dev.base, s3c_hwmon_create_attr_~dev.offset, s3c_hwmon_create_attr_~attr~0.base, s3c_hwmon_create_attr_~attr~0.offset; [L993] havoc ldv_device_create_file_5_#res; [L993] havoc ldv_device_create_file_5_#t~ret125, ldv_device_create_file_5_~ldv_func_arg1.base, ldv_device_create_file_5_~ldv_func_arg1.offset, ldv_device_create_file_5_~ldv_func_arg2.base, ldv_device_create_file_5_~ldv_func_arg2.offset, ldv_device_create_file_5_~tmp~10; [L1292-L1300] ldv_device_create_file_5_~ldv_func_arg1.base, ldv_device_create_file_5_~ldv_func_arg1.offset := ldv_device_create_file_5_#in~ldv_func_arg1.base, ldv_device_create_file_5_#in~ldv_func_arg1.offset; [L1292-L1300] ldv_device_create_file_5_~ldv_func_arg2.base, ldv_device_create_file_5_~ldv_func_arg2.offset := ldv_device_create_file_5_#in~ldv_func_arg2.base, ldv_device_create_file_5_#in~ldv_func_arg2.offset; [L1294] havoc ldv_device_create_file_5_~tmp~10; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res.base=-36893488147419101220, __kmalloc_#res.offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res.base=-36893488147419101220, kmalloc_#res.offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0.base=-36893488147419101220, kmalloc_~tmp___2~0.offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res.base=-36893488147419101220, kzalloc_#res.offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0.base=-36893488147419101220, kzalloc_~tmp~0.offset=0, ldv_device_create_file_5_#in~ldv_func_arg1.base=50, ldv_device_create_file_5_#in~ldv_func_arg1.offset=12, ldv_device_create_file_5_#in~ldv_func_arg2.base=-36893488147419101220, ldv_device_create_file_5_#in~ldv_func_arg2.offset=168, ldv_device_create_file_5_~ldv_func_arg1.base=50, ldv_device_create_file_5_~ldv_func_arg1.offset=12, ldv_device_create_file_5_~ldv_func_arg2.base=-36893488147419101220, ldv_device_create_file_5_~ldv_func_arg2.offset=168, ldv_malloc_#in~size=800, ldv_malloc_#res.base=-36893488147419101220, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc25.base=-36893488147419101220, ldv_malloc_#t~malloc25.offset=0, ldv_malloc_~res~0.base=-36893488147419101220, ldv_malloc_~res~0.offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, platform_set_drvdata_#in~data.base=-36893488147419101220, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=50, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=-36893488147419101220, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=50, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_add_raw_#in~dev.base=50, s3c_hwmon_add_raw_#in~dev.offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev.base=50, s3c_hwmon_add_raw_~dev.offset=12, s3c_hwmon_create_attr_#in~attrs.base=-36893488147419101220, s3c_hwmon_create_attr_#in~attrs.offset=168, s3c_hwmon_create_attr_#in~cfg.base=-36893488147419091769, s3c_hwmon_create_attr_#in~cfg.offset=-11462, s3c_hwmon_create_attr_#in~channel=0, s3c_hwmon_create_attr_#in~dev.base=50, s3c_hwmon_create_attr_#in~dev.offset=12, s3c_hwmon_create_attr_~attrs.base=-36893488147419101220, s3c_hwmon_create_attr_~attrs.offset=168, s3c_hwmon_create_attr_~attr~0.base=-36893488147419101220, s3c_hwmon_create_attr_~attr~0.offset=168, s3c_hwmon_create_attr_~cfg.base=-36893488147419091769, s3c_hwmon_create_attr_~cfg.offset=-11462, s3c_hwmon_create_attr_~channel=0, s3c_hwmon_create_attr_~dev.base=50, s3c_hwmon_create_attr_~dev.offset=12, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_#t~mem104.base=-36893488147419091769, s3c_hwmon_probe_#t~mem104.offset=-11462, s3c_hwmon_probe_#t~nondet99=65, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~cfg~2.base=-36893488147419091769, s3c_hwmon_probe_~cfg~2.offset=-11462, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~i~0=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp___3~0=0, s3c_hwmon_probe_~tmp~4.base=-36893488147419101220, s3c_hwmon_probe_~tmp~4.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1297] CALL call ldv_device_create_file_5_#t~ret125 := ldv_device_create_file_dev_attr_of_sensor_device_attribute(ldv_device_create_file_5_~ldv_func_arg2.base, ldv_device_create_file_5_~ldv_func_arg2.offset); VAL [#in~attr.base=-36893488147419101220, #in~attr.offset=168, #NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, old(~ldv_call_dev_attr_of_sensor_device_attribute~0)=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1382-L1400] ~attr.base, ~attr.offset := #in~attr.base, #in~attr.offset; VAL [#in~attr.base=-36893488147419101220, #in~attr.offset=168, #NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, old(~ldv_call_dev_attr_of_sensor_device_attribute~0)=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~attr.base=-36893488147419101220, ~attr.offset=168, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1387-L1397] assume 0 == ~ldv_call_dev_attr_of_sensor_device_attribute~0; [L1388] ~ldv_count_2~0 := 1 + ~ldv_count_2~0; [L1389] ~ldv_call_dev_attr_of_sensor_device_attribute~0 := 1; VAL [#in~attr.base=-36893488147419101220, #in~attr.offset=168, #NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, old(~ldv_call_dev_attr_of_sensor_device_attribute~0)=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~attr.base=-36893488147419101220, ~attr.offset=168, ~ldv_call_dev_attr_of_sensor_device_attribute~0=1, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1] [L1390-L1394] assume !(~ldv_count_1~0 >= ~ldv_count_2~0); VAL [#in~attr.base=-36893488147419101220, #in~attr.offset=168, #NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, old(~ldv_call_dev_attr_of_sensor_device_attribute~0)=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~attr.base=-36893488147419101220, ~attr.offset=168, ~ldv_call_dev_attr_of_sensor_device_attribute~0=1, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1] [L1316] assert false; VAL [#in~attr.base=-36893488147419101220, #in~attr.offset=168, #NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, old(~ldv_call_dev_attr_of_sensor_device_attribute~0)=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~attr.base=-36893488147419101220, ~attr.offset=168, ~ldv_call_dev_attr_of_sensor_device_attribute~0=1, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.preprocessor.BoogiePreprocessorBacktranslator [?] #NULL.base, #NULL.offset := 0, 0; [?] #valid := #valid[0 := 0]; [L905] call #t~string44.base, #t~string44.offset := #Ultimate.alloc(4); [L905] call write~init~int(60, #t~string44.base, #t~string44.offset, 1); [L905] call write~init~int(55, #t~string44.base, 1 + #t~string44.offset, 1); [L905] call write~init~int(62, #t~string44.base, 2 + #t~string44.offset, 1); [L905] call write~init~int(0, #t~string44.base, 3 + #t~string44.offset, 1); [L905] call #t~string45.base, #t~string45.offset := #Ultimate.alloc(20); [L958] call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4); [L958] call write~init~int(37, #t~string57.base, #t~string57.offset, 1); [L958] call write~init~int(100, #t~string57.base, 1 + #t~string57.offset, 1); [L958] call write~init~int(10, #t~string57.base, 2 + #t~string57.offset, 1); [L958] call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1); [L976] call #t~string62.base, #t~string62.offset := #Ultimate.alloc(4); [L976] call write~init~int(37, #t~string62.base, #t~string62.offset, 1); [L976] call write~init~int(115, #t~string62.base, 1 + #t~string62.offset, 1); [L976] call write~init~int(10, #t~string62.base, 2 + #t~string62.offset, 1); [L976] call write~init~int(0, #t~string62.base, 3 + #t~string62.offset, 1); [L987] call #t~string65.base, #t~string65.offset := #Ultimate.alloc(11); [L995] call #t~string68.base, #t~string68.offset := #Ultimate.alloc(34); [L1001] call #t~string71.base, #t~string71.offset := #Ultimate.alloc(11); [L1010] call #t~string74.base, #t~string74.offset := #Ultimate.alloc(34); [L1048] call #t~string77.base, #t~string77.offset := #Ultimate.alloc(27); [L1056] call #t~string80.base, #t~string80.offset := #Ultimate.alloc(11); [L1062] call #t~string81.base, #t~string81.offset := #Ultimate.alloc(13); [L1066] call #t~string86.base, #t~string86.offset := #Ultimate.alloc(21); [L1082] call #t~string94.base, #t~string94.offset := #Ultimate.alloc(30); [L1099] call #t~string100.base, #t~string100.offset := #Ultimate.alloc(33); [L1105] call #t~string103.base, #t~string103.offset := #Ultimate.alloc(25); [L1113] call #t~string107.base, #t~string107.offset := #Ultimate.alloc(27); [L1178] call #t~string113.base, #t~string113.offset := #Ultimate.alloc(10); [L1205] ~LDV_IN_INTERRUPT~0 := 0; [L1370] ~ldv_count_1~0 := 0; [L1371] ~ldv_count_2~0 := 0; [L1381] ~ldv_call_dev_attr_of_sensor_device_attribute~0 := 0; [L1178-L1180] call ~#s3c_hwmon_driver~0.base, ~#s3c_hwmon_driver~0.offset := #Ultimate.alloc(153); [L1178-L1180] call write~init~$Pointer$(#funAddr~s3c_hwmon_probe.base, #funAddr~s3c_hwmon_probe.offset, ~#s3c_hwmon_driver~0.base, ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(#funAddr~s3c_hwmon_remove.base, #funAddr~s3c_hwmon_remove.offset, ~#s3c_hwmon_driver~0.base, 8 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 16 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 24 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 32 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(#t~string113.base, #t~string113.offset, ~#s3c_hwmon_driver~0.base, 40 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 48 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(~#__this_module~0.base, ~#__this_module~0.offset, ~#s3c_hwmon_driver~0.base, 56 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 64 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~int(0, ~#s3c_hwmon_driver~0.base, 72 + ~#s3c_hwmon_driver~0.offset, 1); [L1178-L1180] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 73 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 81 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 89 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 97 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 105 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 113 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 121 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 129 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 137 + ~#s3c_hwmon_driver~0.offset, 8); [L1178-L1180] call write~init~$Pointer$(0, 0, ~#s3c_hwmon_driver~0.base, 145 + ~#s3c_hwmon_driver~0.offset, 8); [?] havoc main_#res; [?] havoc main_#t~ret117, main_#t~nondet118, main_#t~switch119, main_#t~ret120, main_#t~ret121, main_#t~nondet122, main_~var_group1~0.base, main_~var_group1~0.offset, main_~res_s3c_hwmon_probe_10~0, main_~ldv_s_s3c_hwmon_driver_platform_driver~0, main_~tmp~7, main_~tmp___0~2, main_~tmp___1~1; [L1208] havoc main_~var_group1~0.base, main_~var_group1~0.offset; [L1209] havoc main_~res_s3c_hwmon_probe_10~0; [L1210] havoc main_~ldv_s_s3c_hwmon_driver_platform_driver~0; [L1211] havoc main_~tmp~7; [L1212] havoc main_~tmp___0~2; [L1213] havoc main_~tmp___1~1; [L1216] main_~ldv_s_s3c_hwmon_driver_platform_driver~0 := 0; [L1217] ~LDV_IN_INTERRUPT~0 := 1; [L1219] call ldv_handler_precall(); [L1220] havoc s3c_hwmon_init_#res; [L1220] havoc s3c_hwmon_init_#t~ret114, s3c_hwmon_init_~tmp~6; [L1183] havoc s3c_hwmon_init_~tmp~6; [L1186] call s3c_hwmon_init_#t~ret114 := platform_driver_register(~#s3c_hwmon_driver~0.base, ~#s3c_hwmon_driver~0.offset); [L1186] assume -2147483648 <= s3c_hwmon_init_#t~ret114 && s3c_hwmon_init_#t~ret114 <= 2147483647; [L1186] s3c_hwmon_init_~tmp~6 := s3c_hwmon_init_#t~ret114; [L1186] havoc s3c_hwmon_init_#t~ret114; [L1187] s3c_hwmon_init_#res := s3c_hwmon_init_~tmp~6; [L1220] main_#t~ret117 := s3c_hwmon_init_#res; [L1220] assume -2147483648 <= main_#t~ret117 && main_#t~ret117 <= 2147483647; [L1220] main_~tmp~7 := main_#t~ret117; [L1220] havoc main_#t~ret117; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp~7=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1221-L1225] assume !(0 != main_~tmp~7); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp~7=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1259] assume -2147483648 <= main_#t~nondet122 && main_#t~nondet122 <= 2147483647; [L1259] main_~tmp___1~1 := main_#t~nondet122; [L1259] havoc main_#t~nondet122; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___1~1=1, main_~tmp~7=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1260-L1264] assume 0 != main_~tmp___1~1 || 0 != main_~ldv_s_s3c_hwmon_driver_platform_driver~0; [L1228] assume -2147483648 <= main_#t~nondet118 && main_#t~nondet118 <= 2147483647; [L1228] main_~tmp___0~2 := main_#t~nondet118; [L1228] havoc main_#t~nondet118; [L1230] main_#t~switch119 := 0 == main_~tmp___0~2; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1230] assume main_#t~switch119; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1231-L1243] assume 0 == main_~ldv_s_s3c_hwmon_driver_platform_driver~0; [L1232] s3c_hwmon_probe_#in~dev.base, s3c_hwmon_probe_#in~dev.offset := main_~var_group1~0.base, main_~var_group1~0.offset; [L1232] havoc s3c_hwmon_probe_#res; [L1232] havoc s3c_hwmon_probe_#t~mem75.base, s3c_hwmon_probe_#t~mem75.offset, s3c_hwmon_probe_#t~nondet76, s3c_hwmon_probe_#t~ret78.base, s3c_hwmon_probe_#t~ret78.offset, s3c_hwmon_probe_#t~nondet79, s3c_hwmon_probe_#t~ret82.base, s3c_hwmon_probe_#t~ret82.offset, s3c_hwmon_probe_#t~mem83.base, s3c_hwmon_probe_#t~mem83.offset, s3c_hwmon_probe_#t~ret84, s3c_hwmon_probe_#t~nondet85, s3c_hwmon_probe_#t~mem87.base, s3c_hwmon_probe_#t~mem87.offset, s3c_hwmon_probe_#t~ret88, s3c_hwmon_probe_#t~ret89, s3c_hwmon_probe_#t~ret90.base, s3c_hwmon_probe_#t~ret90.offset, s3c_hwmon_probe_#t~mem91.base, s3c_hwmon_probe_#t~mem91.offset, s3c_hwmon_probe_#t~ret92, s3c_hwmon_probe_#t~nondet93, s3c_hwmon_probe_#t~mem95.base, s3c_hwmon_probe_#t~mem95.offset, s3c_hwmon_probe_#t~ret96, s3c_hwmon_probe_#t~mem97.base, s3c_hwmon_probe_#t~mem97.offset, s3c_hwmon_probe_#t~mem98, s3c_hwmon_probe_#t~nondet99, s3c_hwmon_probe_#t~mem101, s3c_hwmon_probe_#t~nondet102, s3c_hwmon_probe_#t~mem104.base, s3c_hwmon_probe_#t~mem104.offset, s3c_hwmon_probe_#t~ret105, s3c_hwmon_probe_#t~nondet106, s3c_hwmon_probe_#t~mem108.base, s3c_hwmon_probe_#t~mem108.offset, s3c_hwmon_probe_#t~mem109.base, s3c_hwmon_probe_#t~mem109.offset, s3c_hwmon_probe_~dev.base, s3c_hwmon_probe_~dev.offset, s3c_hwmon_probe_~pdata~2.base, s3c_hwmon_probe_~pdata~2.offset, s3c_hwmon_probe_~hwmon~1.base, s3c_hwmon_probe_~hwmon~1.offset, s3c_hwmon_probe_~ret~3, s3c_hwmon_probe_~i~0, s3c_hwmon_probe_~tmp~4.base, s3c_hwmon_probe_~tmp~4.offset, s3c_hwmon_probe_~#__key~0.base, s3c_hwmon_probe_~#__key~0.offset, s3c_hwmon_probe_~tmp___0~1, s3c_hwmon_probe_~tmp___1~0, s3c_hwmon_probe_~tmp___2~1, s3c_hwmon_probe_~tmp___3~0, s3c_hwmon_probe_~cfg~2.base, s3c_hwmon_probe_~cfg~2.offset; [L1030-L1151] s3c_hwmon_probe_~dev.base, s3c_hwmon_probe_~dev.offset := s3c_hwmon_probe_#in~dev.base, s3c_hwmon_probe_#in~dev.offset; [L1032] havoc s3c_hwmon_probe_~pdata~2.base, s3c_hwmon_probe_~pdata~2.offset; [L1033] havoc s3c_hwmon_probe_~hwmon~1.base, s3c_hwmon_probe_~hwmon~1.offset; [L1034] havoc s3c_hwmon_probe_~ret~3; [L1035] havoc s3c_hwmon_probe_~i~0; [L1036] havoc s3c_hwmon_probe_~tmp~4.base, s3c_hwmon_probe_~tmp~4.offset; [L1037] call s3c_hwmon_probe_~#__key~0.base, s3c_hwmon_probe_~#__key~0.offset := #Ultimate.alloc(8); [L1038] havoc s3c_hwmon_probe_~tmp___0~1; [L1039] havoc s3c_hwmon_probe_~tmp___1~0; [L1040] havoc s3c_hwmon_probe_~tmp___2~1; [L1041] havoc s3c_hwmon_probe_~tmp___3~0; [L1042] havoc s3c_hwmon_probe_~cfg~2.base, s3c_hwmon_probe_~cfg~2.offset; [L1045] call s3c_hwmon_probe_#t~mem75.base, s3c_hwmon_probe_#t~mem75.offset := read~$Pointer$(s3c_hwmon_probe_~dev.base, 277 + s3c_hwmon_probe_~dev.offset, 8); [L1045] s3c_hwmon_probe_~pdata~2.base, s3c_hwmon_probe_~pdata~2.offset := s3c_hwmon_probe_#t~mem75.base, s3c_hwmon_probe_#t~mem75.offset; [L1045] havoc s3c_hwmon_probe_#t~mem75.base, s3c_hwmon_probe_#t~mem75.offset; [L1046] s3c_hwmon_probe_~ret~3 := 0; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1047-L1052] assume !(0 == (s3c_hwmon_probe_~pdata~2.base + s3c_hwmon_probe_~pdata~2.offset) % 18446744073709551616); [L1053] kzalloc_#in~size, kzalloc_#in~flags := 800, 208; [L1053] havoc kzalloc_#res.base, kzalloc_#res.offset; [L1053] havoc kzalloc_#t~ret29.base, kzalloc_#t~ret29.offset, kzalloc_~size, kzalloc_~flags, kzalloc_~tmp~0.base, kzalloc_~tmp~0.offset; [L854-L862] kzalloc_~size := kzalloc_#in~size; [L854-L862] kzalloc_~flags := kzalloc_#in~flags; [L856] havoc kzalloc_~tmp~0.base, kzalloc_~tmp~0.offset; [L859] kmalloc_#in~size, kmalloc_#in~flags := kzalloc_~size, ~bitwiseOr(kzalloc_~flags, 32768); [L859] havoc kmalloc_#res.base, kmalloc_#res.offset; [L859] havoc kmalloc_#t~ret28.base, kmalloc_#t~ret28.offset, kmalloc_~size, kmalloc_~flags, kmalloc_~tmp___2~0.base, kmalloc_~tmp___2~0.offset; [L845-L853] kmalloc_~size := kmalloc_#in~size; [L845-L853] kmalloc_~flags := kmalloc_#in~flags; [L847] havoc kmalloc_~tmp___2~0.base, kmalloc_~tmp___2~0.offset; [L850] __kmalloc_#in~size, __kmalloc_#in~t := kmalloc_~size, kmalloc_~flags; [L850] havoc __kmalloc_#res.base, __kmalloc_#res.offset; [L850] havoc __kmalloc_#t~ret27.base, __kmalloc_#t~ret27.offset, __kmalloc_~size, __kmalloc_~t; [L841-L844] __kmalloc_~size := __kmalloc_#in~size; [L841-L844] __kmalloc_~t := __kmalloc_#in~t; [L843] ldv_malloc_#in~size := __kmalloc_~size; [L843] havoc ldv_malloc_#res.base, ldv_malloc_#res.offset; [L843] havoc ldv_malloc_#t~nondet24, ldv_malloc_#t~malloc25.base, ldv_malloc_#t~malloc25.offset, ldv_malloc_#t~ret26, ldv_malloc_~res~0.base, ldv_malloc_~res~0.offset, ldv_malloc_~size; [L830-L840] ldv_malloc_~size := ldv_malloc_#in~size; [L832] assume -2147483648 <= ldv_malloc_#t~nondet24 && ldv_malloc_#t~nondet24 <= 2147483647; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_~flags=52, kmalloc_~size=800, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_~flags=208, kzalloc_~size=800, ldv_malloc_#in~size=800, ldv_malloc_#t~nondet24=-1, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L832-L839] assume 0 != ldv_malloc_#t~nondet24; [L832] havoc ldv_malloc_#t~nondet24; [L833] call ldv_malloc_#t~malloc25.base, ldv_malloc_#t~malloc25.offset := #Ultimate.alloc(ldv_malloc_~size); [L833] ldv_malloc_~res~0.base, ldv_malloc_~res~0.offset := ldv_malloc_#t~malloc25.base, ldv_malloc_#t~malloc25.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_~flags=52, kmalloc_~size=800, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_~flags=208, kzalloc_~size=800, ldv_malloc_#in~size=800, ldv_malloc_#t~malloc25.base=-36893488147419101220, ldv_malloc_#t~malloc25.offset=0, ldv_malloc_~res~0.base=-36893488147419101220, ldv_malloc_~res~0.offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L834] CALL call ldv_malloc_#t~ret26 := ldv_is_err(ldv_malloc_~res~0.base, ldv_malloc_~res~0.offset); VAL [#in~ptr.base=-36893488147419101220, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1327-L1334] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L1332] #res := (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0); [L828] ensures true; VAL [#in~ptr.base=-36893488147419101220, #in~ptr.offset=0, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr.base=-36893488147419101220, ~ptr.offset=0] [L834] RET call ldv_malloc_#t~ret26 := ldv_is_err(ldv_malloc_~res~0.base, ldv_malloc_~res~0.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_~flags=52, kmalloc_~size=800, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_~flags=208, kzalloc_~size=800, ldv_malloc_#in~size=800, ldv_malloc_#t~malloc25.base=-36893488147419101220, ldv_malloc_#t~malloc25.offset=0, ldv_malloc_#t~ret26=0, ldv_malloc_~res~0.base=-36893488147419101220, ldv_malloc_~res~0.offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L834] assume -9223372036854775808 <= ldv_malloc_#t~ret26 && ldv_malloc_#t~ret26 <= 9223372036854775807; [L834] assume 0 != (if 0 == ldv_malloc_#t~ret26 then 1 else 0); [L834] havoc ldv_malloc_#t~ret26; [L836] ldv_malloc_#res.base, ldv_malloc_#res.offset := ldv_malloc_~res~0.base, ldv_malloc_~res~0.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_~flags=52, kmalloc_~size=800, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_~flags=208, kzalloc_~size=800, ldv_malloc_#in~size=800, ldv_malloc_#res.base=-36893488147419101220, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc25.base=-36893488147419101220, ldv_malloc_#t~malloc25.offset=0, ldv_malloc_~res~0.base=-36893488147419101220, ldv_malloc_~res~0.offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L843] __kmalloc_#t~ret27.base, __kmalloc_#t~ret27.offset := ldv_malloc_#res.base, ldv_malloc_#res.offset; [L843] __kmalloc_#res.base, __kmalloc_#res.offset := __kmalloc_#t~ret27.base, __kmalloc_#t~ret27.offset; [L843] havoc __kmalloc_#t~ret27.base, __kmalloc_#t~ret27.offset; [L850] kmalloc_#t~ret28.base, kmalloc_#t~ret28.offset := __kmalloc_#res.base, __kmalloc_#res.offset; [L850] kmalloc_~tmp___2~0.base, kmalloc_~tmp___2~0.offset := kmalloc_#t~ret28.base, kmalloc_#t~ret28.offset; [L850] havoc kmalloc_#t~ret28.base, kmalloc_#t~ret28.offset; [L851] kmalloc_#res.base, kmalloc_#res.offset := kmalloc_~tmp___2~0.base, kmalloc_~tmp___2~0.offset; [L859] kzalloc_#t~ret29.base, kzalloc_#t~ret29.offset := kmalloc_#res.base, kmalloc_#res.offset; [L859] kzalloc_~tmp~0.base, kzalloc_~tmp~0.offset := kzalloc_#t~ret29.base, kzalloc_#t~ret29.offset; [L859] havoc kzalloc_#t~ret29.base, kzalloc_#t~ret29.offset; [L860] kzalloc_#res.base, kzalloc_#res.offset := kzalloc_~tmp~0.base, kzalloc_~tmp~0.offset; [L1053] s3c_hwmon_probe_#t~ret78.base, s3c_hwmon_probe_#t~ret78.offset := kzalloc_#res.base, kzalloc_#res.offset; [L1053] s3c_hwmon_probe_~tmp~4.base, s3c_hwmon_probe_~tmp~4.offset := s3c_hwmon_probe_#t~ret78.base, s3c_hwmon_probe_#t~ret78.offset; [L1053] havoc s3c_hwmon_probe_#t~ret78.base, s3c_hwmon_probe_#t~ret78.offset; [L1054] s3c_hwmon_probe_~hwmon~1.base, s3c_hwmon_probe_~hwmon~1.offset := s3c_hwmon_probe_~tmp~4.base, s3c_hwmon_probe_~tmp~4.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res.base=-36893488147419101220, __kmalloc_#res.offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res.base=-36893488147419101220, kmalloc_#res.offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0.base=-36893488147419101220, kmalloc_~tmp___2~0.offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res.base=-36893488147419101220, kzalloc_#res.offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0.base=-36893488147419101220, kzalloc_~tmp~0.offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res.base=-36893488147419101220, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc25.base=-36893488147419101220, ldv_malloc_#t~malloc25.offset=0, ldv_malloc_~res~0.base=-36893488147419101220, ldv_malloc_~res~0.offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp~4.base=-36893488147419101220, s3c_hwmon_probe_~tmp~4.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1055-L1060] assume !(0 == (s3c_hwmon_probe_~hwmon~1.base + s3c_hwmon_probe_~hwmon~1.offset) % 18446744073709551616); [L1061] platform_set_drvdata_#in~pdev.base, platform_set_drvdata_#in~pdev.offset, platform_set_drvdata_#in~data.base, platform_set_drvdata_#in~data.offset := s3c_hwmon_probe_~dev.base, s3c_hwmon_probe_~dev.offset, s3c_hwmon_probe_~hwmon~1.base, s3c_hwmon_probe_~hwmon~1.offset; [L1061] havoc platform_set_drvdata_~pdev.base, platform_set_drvdata_~pdev.offset, platform_set_drvdata_~data.base, platform_set_drvdata_~data.offset; [L876-L884] platform_set_drvdata_~pdev.base, platform_set_drvdata_~pdev.offset := platform_set_drvdata_#in~pdev.base, platform_set_drvdata_#in~pdev.offset; [L876-L884] platform_set_drvdata_~data.base, platform_set_drvdata_~data.offset := platform_set_drvdata_#in~data.base, platform_set_drvdata_#in~data.offset; [L881] call dev_set_drvdata(platform_set_drvdata_~pdev.base, 12 + platform_set_drvdata_~pdev.offset, platform_set_drvdata_~data.base, platform_set_drvdata_~data.offset); [L1062] call __mutex_init(s3c_hwmon_probe_~hwmon~1.base, s3c_hwmon_probe_~hwmon~1.offset, #t~string81.base, #t~string81.offset, s3c_hwmon_probe_~#__key~0.base, s3c_hwmon_probe_~#__key~0.offset); [L1063] call s3c_hwmon_probe_#t~ret82.base, s3c_hwmon_probe_#t~ret82.offset := s3c_adc_register(s3c_hwmon_probe_~dev.base, s3c_hwmon_probe_~dev.offset, 0, 0, 0, 0, 0); [L1063] call write~$Pointer$(s3c_hwmon_probe_#t~ret82.base, s3c_hwmon_probe_#t~ret82.offset, s3c_hwmon_probe_~hwmon~1.base, 152 + s3c_hwmon_probe_~hwmon~1.offset, 8); [L1063] havoc s3c_hwmon_probe_#t~ret82.base, s3c_hwmon_probe_#t~ret82.offset; [L1064] call s3c_hwmon_probe_#t~mem83.base, s3c_hwmon_probe_#t~mem83.offset := read~$Pointer$(s3c_hwmon_probe_~hwmon~1.base, 152 + s3c_hwmon_probe_~hwmon~1.offset, 8); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res.base=-36893488147419101220, __kmalloc_#res.offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res.base=-36893488147419101220, kmalloc_#res.offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0.base=-36893488147419101220, kmalloc_~tmp___2~0.offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res.base=-36893488147419101220, kzalloc_#res.offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0.base=-36893488147419101220, kzalloc_~tmp~0.offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res.base=-36893488147419101220, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc25.base=-36893488147419101220, ldv_malloc_#t~malloc25.offset=0, ldv_malloc_~res~0.base=-36893488147419101220, ldv_malloc_~res~0.offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, platform_set_drvdata_#in~data.base=-36893488147419101220, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=50, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=-36893488147419101220, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=50, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_#t~mem83.base=0, s3c_hwmon_probe_#t~mem83.offset=18446744073709551616, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp~4.base=-36893488147419101220, s3c_hwmon_probe_~tmp~4.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1064] CALL call s3c_hwmon_probe_#t~ret84 := IS_ERR(s3c_hwmon_probe_#t~mem83.base, s3c_hwmon_probe_#t~mem83.offset); VAL [#in~ptr.base=0, #in~ptr.offset=18446744073709551616, #NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1283-L1291] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L1285] havoc ~tmp~9; VAL [#in~ptr.base=0, #in~ptr.offset=18446744073709551616, #NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr.base=0, ~ptr.offset=18446744073709551616] [L1288] CALL call #t~ret124 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=0, #in~ptr.offset=18446744073709551616, #NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1327-L1334] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L1332] #res := (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0); [L828] ensures true; VAL [#in~ptr.base=0, #in~ptr.offset=18446744073709551616, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr.base=0, ~ptr.offset=18446744073709551616] [L1288] RET call #t~ret124 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=0, #in~ptr.offset=18446744073709551616, #NULL.base=0, #NULL.offset=0, #t~ret124=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr.base=0, ~ptr.offset=18446744073709551616] [L1288] assume -9223372036854775808 <= #t~ret124 && #t~ret124 <= 9223372036854775807; [L1288] ~tmp~9 := #t~ret124; [L1288] havoc #t~ret124; [L1289] #res := ~tmp~9; [L864] ensures true; VAL [#in~ptr.base=0, #in~ptr.offset=18446744073709551616, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr.base=0, ~ptr.offset=18446744073709551616, ~tmp~9=0] [L1064] RET call s3c_hwmon_probe_#t~ret84 := IS_ERR(s3c_hwmon_probe_#t~mem83.base, s3c_hwmon_probe_#t~mem83.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res.base=-36893488147419101220, __kmalloc_#res.offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res.base=-36893488147419101220, kmalloc_#res.offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0.base=-36893488147419101220, kmalloc_~tmp___2~0.offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res.base=-36893488147419101220, kzalloc_#res.offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0.base=-36893488147419101220, kzalloc_~tmp~0.offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res.base=-36893488147419101220, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc25.base=-36893488147419101220, ldv_malloc_#t~malloc25.offset=0, ldv_malloc_~res~0.base=-36893488147419101220, ldv_malloc_~res~0.offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, platform_set_drvdata_#in~data.base=-36893488147419101220, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=50, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=-36893488147419101220, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=50, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_#t~mem83.base=0, s3c_hwmon_probe_#t~mem83.offset=18446744073709551616, s3c_hwmon_probe_#t~ret84=0, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp~4.base=-36893488147419101220, s3c_hwmon_probe_~tmp~4.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1064] assume -9223372036854775808 <= s3c_hwmon_probe_#t~ret84 && s3c_hwmon_probe_#t~ret84 <= 9223372036854775807; [L1064] s3c_hwmon_probe_~tmp___1~0 := s3c_hwmon_probe_#t~ret84; [L1064] havoc s3c_hwmon_probe_#t~mem83.base, s3c_hwmon_probe_#t~mem83.offset; [L1064] havoc s3c_hwmon_probe_#t~ret84; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res.base=-36893488147419101220, __kmalloc_#res.offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res.base=-36893488147419101220, kmalloc_#res.offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0.base=-36893488147419101220, kmalloc_~tmp___2~0.offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res.base=-36893488147419101220, kzalloc_#res.offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0.base=-36893488147419101220, kzalloc_~tmp~0.offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res.base=-36893488147419101220, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc25.base=-36893488147419101220, ldv_malloc_#t~malloc25.offset=0, ldv_malloc_~res~0.base=-36893488147419101220, ldv_malloc_~res~0.offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, platform_set_drvdata_#in~data.base=-36893488147419101220, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=50, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=-36893488147419101220, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=50, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp~4.base=-36893488147419101220, s3c_hwmon_probe_~tmp~4.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1065-L1072] assume !(0 != s3c_hwmon_probe_~tmp___1~0); [L1073] s3c_hwmon_add_raw_#in~dev.base, s3c_hwmon_add_raw_#in~dev.offset := s3c_hwmon_probe_~dev.base, 12 + s3c_hwmon_probe_~dev.offset; [L1073] havoc s3c_hwmon_add_raw_#res; [L1073] havoc s3c_hwmon_add_raw_~dev.base, s3c_hwmon_add_raw_~dev.offset; [L911-L918] s3c_hwmon_add_raw_~dev.base, s3c_hwmon_add_raw_~dev.offset := s3c_hwmon_add_raw_#in~dev.base, s3c_hwmon_add_raw_#in~dev.offset; [L916] s3c_hwmon_add_raw_#res := 0; [L1073] s3c_hwmon_probe_#t~ret89 := s3c_hwmon_add_raw_#res; [L1073] assume -2147483648 <= s3c_hwmon_probe_#t~ret89 && s3c_hwmon_probe_#t~ret89 <= 2147483647; [L1073] s3c_hwmon_probe_~ret~3 := s3c_hwmon_probe_#t~ret89; [L1073] havoc s3c_hwmon_probe_#t~ret89; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res.base=-36893488147419101220, __kmalloc_#res.offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res.base=-36893488147419101220, kmalloc_#res.offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0.base=-36893488147419101220, kmalloc_~tmp___2~0.offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res.base=-36893488147419101220, kzalloc_#res.offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0.base=-36893488147419101220, kzalloc_~tmp~0.offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res.base=-36893488147419101220, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc25.base=-36893488147419101220, ldv_malloc_#t~malloc25.offset=0, ldv_malloc_~res~0.base=-36893488147419101220, ldv_malloc_~res~0.offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, platform_set_drvdata_#in~data.base=-36893488147419101220, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=50, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=-36893488147419101220, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=50, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_add_raw_#in~dev.base=50, s3c_hwmon_add_raw_#in~dev.offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev.base=50, s3c_hwmon_add_raw_~dev.offset=12, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp~4.base=-36893488147419101220, s3c_hwmon_probe_~tmp~4.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1074-L1078] assume !(0 != s3c_hwmon_probe_~ret~3); [L1079] call s3c_hwmon_probe_#t~ret90.base, s3c_hwmon_probe_#t~ret90.offset := hwmon_device_register(s3c_hwmon_probe_~dev.base, 12 + s3c_hwmon_probe_~dev.offset); [L1079] call write~$Pointer$(s3c_hwmon_probe_#t~ret90.base, s3c_hwmon_probe_#t~ret90.offset, s3c_hwmon_probe_~hwmon~1.base, 160 + s3c_hwmon_probe_~hwmon~1.offset, 8); [L1079] havoc s3c_hwmon_probe_#t~ret90.base, s3c_hwmon_probe_#t~ret90.offset; [L1080] call s3c_hwmon_probe_#t~mem91.base, s3c_hwmon_probe_#t~mem91.offset := read~$Pointer$(s3c_hwmon_probe_~hwmon~1.base, 160 + s3c_hwmon_probe_~hwmon~1.offset, 8); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res.base=-36893488147419101220, __kmalloc_#res.offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res.base=-36893488147419101220, kmalloc_#res.offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0.base=-36893488147419101220, kmalloc_~tmp___2~0.offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res.base=-36893488147419101220, kzalloc_#res.offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0.base=-36893488147419101220, kzalloc_~tmp~0.offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res.base=-36893488147419101220, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc25.base=-36893488147419101220, ldv_malloc_#t~malloc25.offset=0, ldv_malloc_~res~0.base=-36893488147419101220, ldv_malloc_~res~0.offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, platform_set_drvdata_#in~data.base=-36893488147419101220, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=50, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=-36893488147419101220, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=50, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_add_raw_#in~dev.base=50, s3c_hwmon_add_raw_#in~dev.offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev.base=50, s3c_hwmon_add_raw_~dev.offset=12, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_#t~mem91.base=0, s3c_hwmon_probe_#t~mem91.offset=182862574002682785169408, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp~4.base=-36893488147419101220, s3c_hwmon_probe_~tmp~4.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1080] CALL call s3c_hwmon_probe_#t~ret92 := IS_ERR(s3c_hwmon_probe_#t~mem91.base, s3c_hwmon_probe_#t~mem91.offset); VAL [#in~ptr.base=0, #in~ptr.offset=182862574002682785169408, #NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1283-L1291] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L1285] havoc ~tmp~9; VAL [#in~ptr.base=0, #in~ptr.offset=182862574002682785169408, #NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr.base=0, ~ptr.offset=182862574002682785169408] [L1288] CALL call #t~ret124 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=0, #in~ptr.offset=182862574002682785169408, #NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1327-L1334] ~ptr.base, ~ptr.offset := #in~ptr.base, #in~ptr.offset; [L1332] #res := (if (~ptr.base + ~ptr.offset) % 18446744073709551616 > 2012 then 1 else 0); [L828] ensures true; VAL [#in~ptr.base=0, #in~ptr.offset=182862574002682785169408, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr.base=0, ~ptr.offset=182862574002682785169408] [L1288] RET call #t~ret124 := ldv_is_err(~ptr.base, ~ptr.offset); VAL [#in~ptr.base=0, #in~ptr.offset=182862574002682785169408, #NULL.base=0, #NULL.offset=0, #t~ret124=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr.base=0, ~ptr.offset=182862574002682785169408] [L1288] assume -9223372036854775808 <= #t~ret124 && #t~ret124 <= 9223372036854775807; [L1288] ~tmp~9 := #t~ret124; [L1288] havoc #t~ret124; [L1289] #res := ~tmp~9; [L864] ensures true; VAL [#in~ptr.base=0, #in~ptr.offset=182862574002682785169408, #NULL.base=0, #NULL.offset=0, #res=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr.base=0, ~ptr.offset=182862574002682785169408, ~tmp~9=0] [L1080] RET call s3c_hwmon_probe_#t~ret92 := IS_ERR(s3c_hwmon_probe_#t~mem91.base, s3c_hwmon_probe_#t~mem91.offset); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res.base=-36893488147419101220, __kmalloc_#res.offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res.base=-36893488147419101220, kmalloc_#res.offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0.base=-36893488147419101220, kmalloc_~tmp___2~0.offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res.base=-36893488147419101220, kzalloc_#res.offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0.base=-36893488147419101220, kzalloc_~tmp~0.offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res.base=-36893488147419101220, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc25.base=-36893488147419101220, ldv_malloc_#t~malloc25.offset=0, ldv_malloc_~res~0.base=-36893488147419101220, ldv_malloc_~res~0.offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, platform_set_drvdata_#in~data.base=-36893488147419101220, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=50, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=-36893488147419101220, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=50, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_add_raw_#in~dev.base=50, s3c_hwmon_add_raw_#in~dev.offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev.base=50, s3c_hwmon_add_raw_~dev.offset=12, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_#t~mem91.base=0, s3c_hwmon_probe_#t~mem91.offset=182862574002682785169408, s3c_hwmon_probe_#t~ret92=0, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp~4.base=-36893488147419101220, s3c_hwmon_probe_~tmp~4.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1080] assume -9223372036854775808 <= s3c_hwmon_probe_#t~ret92 && s3c_hwmon_probe_#t~ret92 <= 9223372036854775807; [L1080] s3c_hwmon_probe_~tmp___3~0 := s3c_hwmon_probe_#t~ret92; [L1080] havoc s3c_hwmon_probe_#t~mem91.base, s3c_hwmon_probe_#t~mem91.offset; [L1080] havoc s3c_hwmon_probe_#t~ret92; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res.base=-36893488147419101220, __kmalloc_#res.offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res.base=-36893488147419101220, kmalloc_#res.offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0.base=-36893488147419101220, kmalloc_~tmp___2~0.offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res.base=-36893488147419101220, kzalloc_#res.offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0.base=-36893488147419101220, kzalloc_~tmp~0.offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res.base=-36893488147419101220, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc25.base=-36893488147419101220, ldv_malloc_#t~malloc25.offset=0, ldv_malloc_~res~0.base=-36893488147419101220, ldv_malloc_~res~0.offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, platform_set_drvdata_#in~data.base=-36893488147419101220, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=50, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=-36893488147419101220, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=50, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_add_raw_#in~dev.base=50, s3c_hwmon_add_raw_#in~dev.offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev.base=50, s3c_hwmon_add_raw_~dev.offset=12, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp___3~0=0, s3c_hwmon_probe_~tmp~4.base=-36893488147419101220, s3c_hwmon_probe_~tmp~4.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1081-L1088] assume !(0 != s3c_hwmon_probe_~tmp___3~0); [L1089] s3c_hwmon_probe_~i~0 := 0; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res.base=-36893488147419101220, __kmalloc_#res.offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res.base=-36893488147419101220, kmalloc_#res.offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0.base=-36893488147419101220, kmalloc_~tmp___2~0.offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res.base=-36893488147419101220, kzalloc_#res.offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0.base=-36893488147419101220, kzalloc_~tmp~0.offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res.base=-36893488147419101220, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc25.base=-36893488147419101220, ldv_malloc_#t~malloc25.offset=0, ldv_malloc_~res~0.base=-36893488147419101220, ldv_malloc_~res~0.offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, platform_set_drvdata_#in~data.base=-36893488147419101220, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=50, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=-36893488147419101220, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=50, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_add_raw_#in~dev.base=50, s3c_hwmon_add_raw_#in~dev.offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev.base=50, s3c_hwmon_add_raw_~dev.offset=12, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~i~0=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp___3~0=0, s3c_hwmon_probe_~tmp~4.base=-36893488147419101220, s3c_hwmon_probe_~tmp~4.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1134-L1138] assume s3c_hwmon_probe_~i~0 % 4294967296 <= 7; [L1092] call s3c_hwmon_probe_#t~mem97.base, s3c_hwmon_probe_#t~mem97.offset := read~$Pointer$(s3c_hwmon_probe_~pdata~2.base, s3c_hwmon_probe_~pdata~2.offset + 8 * s3c_hwmon_probe_~i~0, 8); [L1092] s3c_hwmon_probe_~cfg~2.base, s3c_hwmon_probe_~cfg~2.offset := s3c_hwmon_probe_#t~mem97.base, s3c_hwmon_probe_#t~mem97.offset; [L1092] havoc s3c_hwmon_probe_#t~mem97.base, s3c_hwmon_probe_#t~mem97.offset; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res.base=-36893488147419101220, __kmalloc_#res.offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res.base=-36893488147419101220, kmalloc_#res.offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0.base=-36893488147419101220, kmalloc_~tmp___2~0.offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res.base=-36893488147419101220, kzalloc_#res.offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0.base=-36893488147419101220, kzalloc_~tmp~0.offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res.base=-36893488147419101220, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc25.base=-36893488147419101220, ldv_malloc_#t~malloc25.offset=0, ldv_malloc_~res~0.base=-36893488147419101220, ldv_malloc_~res~0.offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, platform_set_drvdata_#in~data.base=-36893488147419101220, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=50, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=-36893488147419101220, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=50, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_add_raw_#in~dev.base=50, s3c_hwmon_add_raw_#in~dev.offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev.base=50, s3c_hwmon_add_raw_~dev.offset=12, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~cfg~2.base=-36893488147419091769, s3c_hwmon_probe_~cfg~2.offset=-11462, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~i~0=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp___3~0=0, s3c_hwmon_probe_~tmp~4.base=-36893488147419101220, s3c_hwmon_probe_~tmp~4.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1093-L1097] assume !(0 == (s3c_hwmon_probe_~cfg~2.base + s3c_hwmon_probe_~cfg~2.offset) % 18446744073709551616); [L1098] call s3c_hwmon_probe_#t~mem98 := read~int(s3c_hwmon_probe_~cfg~2.base, 8 + s3c_hwmon_probe_~cfg~2.offset, 4); [L1098-L1103] assume !(s3c_hwmon_probe_#t~mem98 % 4294967296 > 65535); [L1098] havoc s3c_hwmon_probe_#t~mem98; [L1104] call s3c_hwmon_probe_#t~mem101 := read~int(s3c_hwmon_probe_~cfg~2.base, 12 + s3c_hwmon_probe_~cfg~2.offset, 4); VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res.base=-36893488147419101220, __kmalloc_#res.offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res.base=-36893488147419101220, kmalloc_#res.offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0.base=-36893488147419101220, kmalloc_~tmp___2~0.offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res.base=-36893488147419101220, kzalloc_#res.offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0.base=-36893488147419101220, kzalloc_~tmp~0.offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res.base=-36893488147419101220, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc25.base=-36893488147419101220, ldv_malloc_#t~malloc25.offset=0, ldv_malloc_~res~0.base=-36893488147419101220, ldv_malloc_~res~0.offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, platform_set_drvdata_#in~data.base=-36893488147419101220, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=50, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=-36893488147419101220, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=50, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_add_raw_#in~dev.base=50, s3c_hwmon_add_raw_#in~dev.offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev.base=50, s3c_hwmon_add_raw_~dev.offset=12, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_#t~mem101=21461951578113, s3c_hwmon_probe_#t~nondet99=65, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~cfg~2.base=-36893488147419091769, s3c_hwmon_probe_~cfg~2.offset=-11462, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~i~0=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp___3~0=0, s3c_hwmon_probe_~tmp~4.base=-36893488147419101220, s3c_hwmon_probe_~tmp~4.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1104-L1109] assume !(0 == s3c_hwmon_probe_#t~mem101 % 4294967296); [L1104] havoc s3c_hwmon_probe_#t~mem101; [L1110] call s3c_hwmon_probe_#t~mem104.base, s3c_hwmon_probe_#t~mem104.offset := read~$Pointer$(s3c_hwmon_probe_~pdata~2.base, s3c_hwmon_probe_~pdata~2.offset + 8 * s3c_hwmon_probe_~i~0, 8); [L1110-L1111] s3c_hwmon_create_attr_#in~dev.base, s3c_hwmon_create_attr_#in~dev.offset, s3c_hwmon_create_attr_#in~cfg.base, s3c_hwmon_create_attr_#in~cfg.offset, s3c_hwmon_create_attr_#in~attrs.base, s3c_hwmon_create_attr_#in~attrs.offset, s3c_hwmon_create_attr_#in~channel := s3c_hwmon_probe_~dev.base, 12 + s3c_hwmon_probe_~dev.offset, s3c_hwmon_probe_#t~mem104.base, s3c_hwmon_probe_#t~mem104.offset, s3c_hwmon_probe_~hwmon~1.base, 168 + s3c_hwmon_probe_~hwmon~1.offset + 116 * (s3c_hwmon_probe_~i~0 % 4294967296), s3c_hwmon_probe_~i~0; [L1110-L1111] havoc s3c_hwmon_create_attr_#res; [L1110-L1111] havoc s3c_hwmon_create_attr_#t~nondet64, s3c_hwmon_create_attr_#t~ret66, s3c_hwmon_create_attr_#t~nondet67, s3c_hwmon_create_attr_#t~mem69.base, s3c_hwmon_create_attr_#t~mem69.offset, s3c_hwmon_create_attr_#t~nondet70, s3c_hwmon_create_attr_#t~ret72, s3c_hwmon_create_attr_#t~nondet73, s3c_hwmon_create_attr_~dev.base, s3c_hwmon_create_attr_~dev.offset, s3c_hwmon_create_attr_~cfg.base, s3c_hwmon_create_attr_~cfg.offset, s3c_hwmon_create_attr_~attrs.base, s3c_hwmon_create_attr_~attrs.offset, s3c_hwmon_create_attr_~channel, s3c_hwmon_create_attr_~attr~0.base, s3c_hwmon_create_attr_~attr~0.offset, s3c_hwmon_create_attr_~ret~2; [L980-L1019] s3c_hwmon_create_attr_~dev.base, s3c_hwmon_create_attr_~dev.offset := s3c_hwmon_create_attr_#in~dev.base, s3c_hwmon_create_attr_#in~dev.offset; [L980-L1019] s3c_hwmon_create_attr_~cfg.base, s3c_hwmon_create_attr_~cfg.offset := s3c_hwmon_create_attr_#in~cfg.base, s3c_hwmon_create_attr_#in~cfg.offset; [L980-L1019] s3c_hwmon_create_attr_~attrs.base, s3c_hwmon_create_attr_~attrs.offset := s3c_hwmon_create_attr_#in~attrs.base, s3c_hwmon_create_attr_#in~attrs.offset; [L980-L1019] s3c_hwmon_create_attr_~channel := s3c_hwmon_create_attr_#in~channel; [L983] havoc s3c_hwmon_create_attr_~attr~0.base, s3c_hwmon_create_attr_~attr~0.offset; [L984] havoc s3c_hwmon_create_attr_~ret~2; [L987] havoc s3c_hwmon_create_attr_#t~nondet64; [L988] s3c_hwmon_create_attr_~attr~0.base, s3c_hwmon_create_attr_~attr~0.offset := s3c_hwmon_create_attr_~attrs.base, s3c_hwmon_create_attr_~attrs.offset; [L989] call write~int(s3c_hwmon_create_attr_~channel, s3c_hwmon_create_attr_~attr~0.base, 42 + s3c_hwmon_create_attr_~attr~0.offset, 4); [L990] call write~$Pointer$(s3c_hwmon_create_attr_~attrs.base, 92 + s3c_hwmon_create_attr_~attrs.offset, s3c_hwmon_create_attr_~attr~0.base, s3c_hwmon_create_attr_~attr~0.offset, 8); [L991] call write~int(292, s3c_hwmon_create_attr_~attr~0.base, 8 + s3c_hwmon_create_attr_~attr~0.offset, 2); [L992] call write~$Pointer$(#funAddr~s3c_hwmon_ch_show.base, #funAddr~s3c_hwmon_ch_show.offset, s3c_hwmon_create_attr_~attr~0.base, 26 + s3c_hwmon_create_attr_~attr~0.offset, 8); [L993] ldv_device_create_file_5_#in~ldv_func_arg1.base, ldv_device_create_file_5_#in~ldv_func_arg1.offset, ldv_device_create_file_5_#in~ldv_func_arg2.base, ldv_device_create_file_5_#in~ldv_func_arg2.offset := s3c_hwmon_create_attr_~dev.base, s3c_hwmon_create_attr_~dev.offset, s3c_hwmon_create_attr_~attr~0.base, s3c_hwmon_create_attr_~attr~0.offset; [L993] havoc ldv_device_create_file_5_#res; [L993] havoc ldv_device_create_file_5_#t~ret125, ldv_device_create_file_5_~ldv_func_arg1.base, ldv_device_create_file_5_~ldv_func_arg1.offset, ldv_device_create_file_5_~ldv_func_arg2.base, ldv_device_create_file_5_~ldv_func_arg2.offset, ldv_device_create_file_5_~tmp~10; [L1292-L1300] ldv_device_create_file_5_~ldv_func_arg1.base, ldv_device_create_file_5_~ldv_func_arg1.offset := ldv_device_create_file_5_#in~ldv_func_arg1.base, ldv_device_create_file_5_#in~ldv_func_arg1.offset; [L1292-L1300] ldv_device_create_file_5_~ldv_func_arg2.base, ldv_device_create_file_5_~ldv_func_arg2.offset := ldv_device_create_file_5_#in~ldv_func_arg2.base, ldv_device_create_file_5_#in~ldv_func_arg2.offset; [L1294] havoc ldv_device_create_file_5_~tmp~10; VAL [#NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res.base=-36893488147419101220, __kmalloc_#res.offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res.base=-36893488147419101220, kmalloc_#res.offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0.base=-36893488147419101220, kmalloc_~tmp___2~0.offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res.base=-36893488147419101220, kzalloc_#res.offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0.base=-36893488147419101220, kzalloc_~tmp~0.offset=0, ldv_device_create_file_5_#in~ldv_func_arg1.base=50, ldv_device_create_file_5_#in~ldv_func_arg1.offset=12, ldv_device_create_file_5_#in~ldv_func_arg2.base=-36893488147419101220, ldv_device_create_file_5_#in~ldv_func_arg2.offset=168, ldv_device_create_file_5_~ldv_func_arg1.base=50, ldv_device_create_file_5_~ldv_func_arg1.offset=12, ldv_device_create_file_5_~ldv_func_arg2.base=-36893488147419101220, ldv_device_create_file_5_~ldv_func_arg2.offset=168, ldv_malloc_#in~size=800, ldv_malloc_#res.base=-36893488147419101220, ldv_malloc_#res.offset=0, ldv_malloc_#t~malloc25.base=-36893488147419101220, ldv_malloc_#t~malloc25.offset=0, ldv_malloc_~res~0.base=-36893488147419101220, ldv_malloc_~res~0.offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0.base=50, main_~var_group1~0.offset=0, platform_set_drvdata_#in~data.base=-36893488147419101220, platform_set_drvdata_#in~data.offset=0, platform_set_drvdata_#in~pdev.base=50, platform_set_drvdata_#in~pdev.offset=0, platform_set_drvdata_~data.base=-36893488147419101220, platform_set_drvdata_~data.offset=0, platform_set_drvdata_~pdev.base=50, platform_set_drvdata_~pdev.offset=0, s3c_hwmon_add_raw_#in~dev.base=50, s3c_hwmon_add_raw_#in~dev.offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev.base=50, s3c_hwmon_add_raw_~dev.offset=12, s3c_hwmon_create_attr_#in~attrs.base=-36893488147419101220, s3c_hwmon_create_attr_#in~attrs.offset=168, s3c_hwmon_create_attr_#in~cfg.base=-36893488147419091769, s3c_hwmon_create_attr_#in~cfg.offset=-11462, s3c_hwmon_create_attr_#in~channel=0, s3c_hwmon_create_attr_#in~dev.base=50, s3c_hwmon_create_attr_#in~dev.offset=12, s3c_hwmon_create_attr_~attrs.base=-36893488147419101220, s3c_hwmon_create_attr_~attrs.offset=168, s3c_hwmon_create_attr_~attr~0.base=-36893488147419101220, s3c_hwmon_create_attr_~attr~0.offset=168, s3c_hwmon_create_attr_~cfg.base=-36893488147419091769, s3c_hwmon_create_attr_~cfg.offset=-11462, s3c_hwmon_create_attr_~channel=0, s3c_hwmon_create_attr_~dev.base=50, s3c_hwmon_create_attr_~dev.offset=12, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev.base=50, s3c_hwmon_probe_#in~dev.offset=0, s3c_hwmon_probe_#t~mem104.base=-36893488147419091769, s3c_hwmon_probe_#t~mem104.offset=-11462, s3c_hwmon_probe_#t~nondet99=65, s3c_hwmon_probe_~#__key~0.base=47, s3c_hwmon_probe_~#__key~0.offset=0, s3c_hwmon_probe_~cfg~2.base=-36893488147419091769, s3c_hwmon_probe_~cfg~2.offset=-11462, s3c_hwmon_probe_~dev.base=50, s3c_hwmon_probe_~dev.offset=0, s3c_hwmon_probe_~hwmon~1.base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1.offset=0, s3c_hwmon_probe_~i~0=0, s3c_hwmon_probe_~pdata~2.base=-18446744073709551616, s3c_hwmon_probe_~pdata~2.offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp___3~0=0, s3c_hwmon_probe_~tmp~4.base=-36893488147419101220, s3c_hwmon_probe_~tmp~4.offset=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1297] CALL call ldv_device_create_file_5_#t~ret125 := ldv_device_create_file_dev_attr_of_sensor_device_attribute(ldv_device_create_file_5_~ldv_func_arg2.base, ldv_device_create_file_5_~ldv_func_arg2.offset); VAL [#in~attr.base=-36893488147419101220, #in~attr.offset=168, #NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, old(~ldv_call_dev_attr_of_sensor_device_attribute~0)=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1382-L1400] ~attr.base, ~attr.offset := #in~attr.base, #in~attr.offset; VAL [#in~attr.base=-36893488147419101220, #in~attr.offset=168, #NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, old(~ldv_call_dev_attr_of_sensor_device_attribute~0)=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~attr.base=-36893488147419101220, ~attr.offset=168, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1387-L1397] assume 0 == ~ldv_call_dev_attr_of_sensor_device_attribute~0; [L1388] ~ldv_count_2~0 := 1 + ~ldv_count_2~0; [L1389] ~ldv_call_dev_attr_of_sensor_device_attribute~0 := 1; VAL [#in~attr.base=-36893488147419101220, #in~attr.offset=168, #NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, old(~ldv_call_dev_attr_of_sensor_device_attribute~0)=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~attr.base=-36893488147419101220, ~attr.offset=168, ~ldv_call_dev_attr_of_sensor_device_attribute~0=1, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1] [L1390-L1394] assume !(~ldv_count_1~0 >= ~ldv_count_2~0); VAL [#in~attr.base=-36893488147419101220, #in~attr.offset=168, #NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, old(~ldv_call_dev_attr_of_sensor_device_attribute~0)=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~attr.base=-36893488147419101220, ~attr.offset=168, ~ldv_call_dev_attr_of_sensor_device_attribute~0=1, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1] [L1316] assert false; VAL [#in~attr.base=-36893488147419101220, #in~attr.offset=168, #NULL.base=0, #NULL.offset=0, #t~string100.base=38, #t~string100.offset=0, #t~string103.base=39, #t~string103.offset=0, #t~string107.base=44, #t~string107.offset=0, #t~string113.base=41, #t~string113.offset=0, #t~string44.base=35, #t~string44.offset=0, #t~string45.base=31, #t~string45.offset=0, #t~string57.base=29, #t~string57.offset=0, #t~string62.base=28, #t~string62.offset=0, #t~string65.base=23, #t~string65.offset=0, #t~string68.base=22, #t~string68.offset=0, #t~string71.base=19, #t~string71.offset=0, #t~string74.base=18, #t~string74.offset=0, #t~string77.base=15, #t~string77.offset=0, #t~string80.base=14, #t~string80.offset=0, #t~string81.base=7, #t~string81.offset=0, #t~string86.base=5, #t~string86.offset=0, #t~string94.base=6, #t~string94.offset=0, old(~ldv_call_dev_attr_of_sensor_device_attribute~0)=0, old(~ldv_count_2~0)=0, ~#__this_module~0.base=46, ~#__this_module~0.offset=45, ~#s3c_hwmon_driver~0.base=36, ~#s3c_hwmon_driver~0.offset=0, ~attr.base=-36893488147419101220, ~attr.offset=168, ~ldv_call_dev_attr_of_sensor_device_attribute~0=1, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L905] FCALL call #t~string44 := #Ultimate.alloc(4); [L905] FCALL call write~init~int(60, { base: #t~string44!base, offset: #t~string44!offset }, 1); [L905] FCALL call write~init~int(55, { base: #t~string44!base, offset: 1 + #t~string44!offset }, 1); [L905] FCALL call write~init~int(62, { base: #t~string44!base, offset: 2 + #t~string44!offset }, 1); [L905] FCALL call write~init~int(0, { base: #t~string44!base, offset: 3 + #t~string44!offset }, 1); [L905] FCALL call #t~string45 := #Ultimate.alloc(20); [L958] FCALL call #t~string57 := #Ultimate.alloc(4); [L958] FCALL call write~init~int(37, { base: #t~string57!base, offset: #t~string57!offset }, 1); [L958] FCALL call write~init~int(100, { base: #t~string57!base, offset: 1 + #t~string57!offset }, 1); [L958] FCALL call write~init~int(10, { base: #t~string57!base, offset: 2 + #t~string57!offset }, 1); [L958] FCALL call write~init~int(0, { base: #t~string57!base, offset: 3 + #t~string57!offset }, 1); [L976] FCALL call #t~string62 := #Ultimate.alloc(4); [L976] FCALL call write~init~int(37, { base: #t~string62!base, offset: #t~string62!offset }, 1); [L976] FCALL call write~init~int(115, { base: #t~string62!base, offset: 1 + #t~string62!offset }, 1); [L976] FCALL call write~init~int(10, { base: #t~string62!base, offset: 2 + #t~string62!offset }, 1); [L976] FCALL call write~init~int(0, { base: #t~string62!base, offset: 3 + #t~string62!offset }, 1); [L987] FCALL call #t~string65 := #Ultimate.alloc(11); [L995] FCALL call #t~string68 := #Ultimate.alloc(34); [L1001] FCALL call #t~string71 := #Ultimate.alloc(11); [L1010] FCALL call #t~string74 := #Ultimate.alloc(34); [L1048] FCALL call #t~string77 := #Ultimate.alloc(27); [L1056] FCALL call #t~string80 := #Ultimate.alloc(11); [L1062] FCALL call #t~string81 := #Ultimate.alloc(13); [L1066] FCALL call #t~string86 := #Ultimate.alloc(21); [L1082] FCALL call #t~string94 := #Ultimate.alloc(30); [L1099] FCALL call #t~string100 := #Ultimate.alloc(33); [L1105] FCALL call #t~string103 := #Ultimate.alloc(25); [L1113] FCALL call #t~string107 := #Ultimate.alloc(27); [L1178] FCALL call #t~string113 := #Ultimate.alloc(10); [L1205] ~LDV_IN_INTERRUPT~0 := 0; [L1370] ~ldv_count_1~0 := 0; [L1371] ~ldv_count_2~0 := 0; [L1381] ~ldv_call_dev_attr_of_sensor_device_attribute~0 := 0; [L1178-L1180] FCALL call ~#s3c_hwmon_driver~0 := #Ultimate.alloc(153); [L1178-L1180] FCALL call write~init~$Pointer$(#funAddr~s3c_hwmon_probe, { base: ~#s3c_hwmon_driver~0!base, offset: ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$(#funAddr~s3c_hwmon_remove, { base: ~#s3c_hwmon_driver~0!base, offset: 8 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 16 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 24 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 32 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$(#t~string113, { base: ~#s3c_hwmon_driver~0!base, offset: 40 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 48 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#s3c_hwmon_driver~0!base, offset: 56 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 64 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~int(0, { base: ~#s3c_hwmon_driver~0!base, offset: 72 + ~#s3c_hwmon_driver~0!offset }, 1); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 73 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 81 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 89 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 97 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 105 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 113 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 121 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 129 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 137 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 145 + ~#s3c_hwmon_driver~0!offset }, 8); [?] havoc main_#res; [?] havoc main_#t~ret117, main_#t~nondet118, main_#t~switch119, main_#t~ret120, main_#t~ret121, main_#t~nondet122, main_~var_group1~0, main_~res_s3c_hwmon_probe_10~0, main_~ldv_s_s3c_hwmon_driver_platform_driver~0, main_~tmp~7, main_~tmp___0~2, main_~tmp___1~1; [L1208] havoc main_~var_group1~0; [L1209] havoc main_~res_s3c_hwmon_probe_10~0; [L1210] havoc main_~ldv_s_s3c_hwmon_driver_platform_driver~0; [L1211] havoc main_~tmp~7; [L1212] havoc main_~tmp___0~2; [L1213] havoc main_~tmp___1~1; [L1216] main_~ldv_s_s3c_hwmon_driver_platform_driver~0 := 0; [L1217] ~LDV_IN_INTERRUPT~0 := 1; [L1219] FCALL call ldv_handler_precall(); [L1220] havoc s3c_hwmon_init_#res; [L1220] havoc s3c_hwmon_init_#t~ret114, s3c_hwmon_init_~tmp~6; [L1183] havoc s3c_hwmon_init_~tmp~6; [L1186] FCALL call s3c_hwmon_init_#t~ret114 := platform_driver_register(~#s3c_hwmon_driver~0); [L1186] assume -2147483648 <= s3c_hwmon_init_#t~ret114 && s3c_hwmon_init_#t~ret114 <= 2147483647; [L1186] s3c_hwmon_init_~tmp~6 := s3c_hwmon_init_#t~ret114; [L1186] havoc s3c_hwmon_init_#t~ret114; [L1187] s3c_hwmon_init_#res := s3c_hwmon_init_~tmp~6; [L1220] main_#t~ret117 := s3c_hwmon_init_#res; [L1220] assume -2147483648 <= main_#t~ret117 && main_#t~ret117 <= 2147483647; [L1220] main_~tmp~7 := main_#t~ret117; [L1220] havoc main_#t~ret117; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp~7=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1221] COND FALSE !(0 != main_~tmp~7) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp~7=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1259] assume -2147483648 <= main_#t~nondet122 && main_#t~nondet122 <= 2147483647; [L1259] main_~tmp___1~1 := main_#t~nondet122; [L1259] havoc main_#t~nondet122; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___1~1=1, main_~tmp~7=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1260] COND TRUE 0 != main_~tmp___1~1 || 0 != main_~ldv_s_s3c_hwmon_driver_platform_driver~0 [L1228] assume -2147483648 <= main_#t~nondet118 && main_#t~nondet118 <= 2147483647; [L1228] main_~tmp___0~2 := main_#t~nondet118; [L1228] havoc main_#t~nondet118; [L1230] main_#t~switch119 := 0 == main_~tmp___0~2; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1229-L1256] COND TRUE main_#t~switch119 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1231] COND TRUE 0 == main_~ldv_s_s3c_hwmon_driver_platform_driver~0 [L1232] s3c_hwmon_probe_#in~dev := main_~var_group1~0; [L1232] havoc s3c_hwmon_probe_#res; [L1232] havoc s3c_hwmon_probe_#t~mem75, s3c_hwmon_probe_#t~nondet76, s3c_hwmon_probe_#t~ret78, s3c_hwmon_probe_#t~nondet79, s3c_hwmon_probe_#t~ret82, s3c_hwmon_probe_#t~mem83, s3c_hwmon_probe_#t~ret84, s3c_hwmon_probe_#t~nondet85, s3c_hwmon_probe_#t~mem87, s3c_hwmon_probe_#t~ret88, s3c_hwmon_probe_#t~ret89, s3c_hwmon_probe_#t~ret90, s3c_hwmon_probe_#t~mem91, s3c_hwmon_probe_#t~ret92, s3c_hwmon_probe_#t~nondet93, s3c_hwmon_probe_#t~mem95, s3c_hwmon_probe_#t~ret96, s3c_hwmon_probe_#t~mem97, s3c_hwmon_probe_#t~mem98, s3c_hwmon_probe_#t~nondet99, s3c_hwmon_probe_#t~mem101, s3c_hwmon_probe_#t~nondet102, s3c_hwmon_probe_#t~mem104, s3c_hwmon_probe_#t~ret105, s3c_hwmon_probe_#t~nondet106, s3c_hwmon_probe_#t~mem108, s3c_hwmon_probe_#t~mem109, s3c_hwmon_probe_~dev, s3c_hwmon_probe_~pdata~2, s3c_hwmon_probe_~hwmon~1, s3c_hwmon_probe_~ret~3, s3c_hwmon_probe_~i~0, s3c_hwmon_probe_~tmp~4, s3c_hwmon_probe_~#__key~0, s3c_hwmon_probe_~tmp___0~1, s3c_hwmon_probe_~tmp___1~0, s3c_hwmon_probe_~tmp___2~1, s3c_hwmon_probe_~tmp___3~0, s3c_hwmon_probe_~cfg~2; [L1030-L1151] s3c_hwmon_probe_~dev := s3c_hwmon_probe_#in~dev; [L1032] havoc s3c_hwmon_probe_~pdata~2; [L1033] havoc s3c_hwmon_probe_~hwmon~1; [L1034] havoc s3c_hwmon_probe_~ret~3; [L1035] havoc s3c_hwmon_probe_~i~0; [L1036] havoc s3c_hwmon_probe_~tmp~4; [L1037] FCALL call s3c_hwmon_probe_~#__key~0 := #Ultimate.alloc(8); [L1038] havoc s3c_hwmon_probe_~tmp___0~1; [L1039] havoc s3c_hwmon_probe_~tmp___1~0; [L1040] havoc s3c_hwmon_probe_~tmp___2~1; [L1041] havoc s3c_hwmon_probe_~tmp___3~0; [L1042] havoc s3c_hwmon_probe_~cfg~2; [L1045] FCALL call s3c_hwmon_probe_#t~mem75 := read~$Pointer$({ base: s3c_hwmon_probe_~dev!base, offset: 277 + s3c_hwmon_probe_~dev!offset }, 8); [L1045] s3c_hwmon_probe_~pdata~2 := s3c_hwmon_probe_#t~mem75; [L1045] havoc s3c_hwmon_probe_#t~mem75; [L1046] s3c_hwmon_probe_~ret~3 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1047] COND FALSE !(0 == (s3c_hwmon_probe_~pdata~2!base + s3c_hwmon_probe_~pdata~2!offset) % 18446744073709551616) [L1053] kzalloc_#in~size, kzalloc_#in~flags := 800, 208; [L1053] havoc kzalloc_#res; [L1053] havoc kzalloc_#t~ret29, kzalloc_~size, kzalloc_~flags, kzalloc_~tmp~0; [L854-L862] kzalloc_~size := kzalloc_#in~size; [L854-L862] kzalloc_~flags := kzalloc_#in~flags; [L856] havoc kzalloc_~tmp~0; [L859] kmalloc_#in~size, kmalloc_#in~flags := kzalloc_~size, ~bitwiseOr(kzalloc_~flags, 32768); [L859] havoc kmalloc_#res; [L859] havoc kmalloc_#t~ret28, kmalloc_~size, kmalloc_~flags, kmalloc_~tmp___2~0; [L845-L853] kmalloc_~size := kmalloc_#in~size; [L845-L853] kmalloc_~flags := kmalloc_#in~flags; [L847] havoc kmalloc_~tmp___2~0; [L850] __kmalloc_#in~size, __kmalloc_#in~t := kmalloc_~size, kmalloc_~flags; [L850] havoc __kmalloc_#res; [L850] havoc __kmalloc_#t~ret27, __kmalloc_~size, __kmalloc_~t; [L841-L844] __kmalloc_~size := __kmalloc_#in~size; [L841-L844] __kmalloc_~t := __kmalloc_#in~t; [L843] ldv_malloc_#in~size := __kmalloc_~size; [L843] havoc ldv_malloc_#res; [L843] havoc ldv_malloc_#t~nondet24, ldv_malloc_#t~malloc25, ldv_malloc_#t~ret26, ldv_malloc_~res~0, ldv_malloc_~size; [L830-L840] ldv_malloc_~size := ldv_malloc_#in~size; [L832] assume -2147483648 <= ldv_malloc_#t~nondet24 && ldv_malloc_#t~nondet24 <= 2147483647; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_~flags=52, kmalloc_~size=800, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_~flags=208, kzalloc_~size=800, ldv_malloc_#in~size=800, ldv_malloc_#t~nondet24=-1, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L832-L839] COND TRUE 0 != ldv_malloc_#t~nondet24 [L832] havoc ldv_malloc_#t~nondet24; [L833] FCALL call ldv_malloc_#t~malloc25 := #Ultimate.alloc(ldv_malloc_~size); [L833] ldv_malloc_~res~0 := ldv_malloc_#t~malloc25; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_~flags=52, kmalloc_~size=800, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_~flags=208, kzalloc_~size=800, ldv_malloc_#in~size=800, ldv_malloc_#t~malloc25!base=-36893488147419101220, ldv_malloc_#t~malloc25!offset=0, ldv_malloc_~res~0!base=-36893488147419101220, ldv_malloc_~res~0!offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L834] CALL call ldv_malloc_#t~ret26 := ldv_is_err(ldv_malloc_~res~0); VAL [#in~ptr!base=-36893488147419101220, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1327-L1334] ~ptr := #in~ptr; [L1332] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L834] RET call ldv_malloc_#t~ret26 := ldv_is_err(ldv_malloc_~res~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_~flags=52, kmalloc_~size=800, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_~flags=208, kzalloc_~size=800, ldv_malloc_#in~size=800, ldv_malloc_#t~malloc25!base=-36893488147419101220, ldv_malloc_#t~malloc25!offset=0, ldv_malloc_#t~ret26=0, ldv_malloc_~res~0!base=-36893488147419101220, ldv_malloc_~res~0!offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L834] assume -9223372036854775808 <= ldv_malloc_#t~ret26 && ldv_malloc_#t~ret26 <= 9223372036854775807; [L834] assume 0 != (if 0 == ldv_malloc_#t~ret26 then 1 else 0); [L834] havoc ldv_malloc_#t~ret26; [L836] ldv_malloc_#res := ldv_malloc_~res~0; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_~flags=52, kmalloc_~size=800, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_~flags=208, kzalloc_~size=800, ldv_malloc_#in~size=800, ldv_malloc_#res!base=-36893488147419101220, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc25!base=-36893488147419101220, ldv_malloc_#t~malloc25!offset=0, ldv_malloc_~res~0!base=-36893488147419101220, ldv_malloc_~res~0!offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L843] __kmalloc_#t~ret27 := ldv_malloc_#res; [L843] __kmalloc_#res := __kmalloc_#t~ret27; [L843] havoc __kmalloc_#t~ret27; [L850] kmalloc_#t~ret28 := __kmalloc_#res; [L850] kmalloc_~tmp___2~0 := kmalloc_#t~ret28; [L850] havoc kmalloc_#t~ret28; [L851] kmalloc_#res := kmalloc_~tmp___2~0; [L859] kzalloc_#t~ret29 := kmalloc_#res; [L859] kzalloc_~tmp~0 := kzalloc_#t~ret29; [L859] havoc kzalloc_#t~ret29; [L860] kzalloc_#res := kzalloc_~tmp~0; [L1053] s3c_hwmon_probe_#t~ret78 := kzalloc_#res; [L1053] s3c_hwmon_probe_~tmp~4 := s3c_hwmon_probe_#t~ret78; [L1053] havoc s3c_hwmon_probe_#t~ret78; [L1054] s3c_hwmon_probe_~hwmon~1 := s3c_hwmon_probe_~tmp~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res!base=-36893488147419101220, __kmalloc_#res!offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res!base=-36893488147419101220, kmalloc_#res!offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0!base=-36893488147419101220, kmalloc_~tmp___2~0!offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res!base=-36893488147419101220, kzalloc_#res!offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0!base=-36893488147419101220, kzalloc_~tmp~0!offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res!base=-36893488147419101220, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc25!base=-36893488147419101220, ldv_malloc_#t~malloc25!offset=0, ldv_malloc_~res~0!base=-36893488147419101220, ldv_malloc_~res~0!offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~hwmon~1!base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1!offset=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp~4!base=-36893488147419101220, s3c_hwmon_probe_~tmp~4!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1055] COND FALSE !(0 == (s3c_hwmon_probe_~hwmon~1!base + s3c_hwmon_probe_~hwmon~1!offset) % 18446744073709551616) [L1061] platform_set_drvdata_#in~pdev, platform_set_drvdata_#in~data := s3c_hwmon_probe_~dev, s3c_hwmon_probe_~hwmon~1; [L1061] havoc platform_set_drvdata_~pdev, platform_set_drvdata_~data; [L876-L884] platform_set_drvdata_~pdev := platform_set_drvdata_#in~pdev; [L876-L884] platform_set_drvdata_~data := platform_set_drvdata_#in~data; [L881] FCALL call dev_set_drvdata({ base: platform_set_drvdata_~pdev!base, offset: 12 + platform_set_drvdata_~pdev!offset }, platform_set_drvdata_~data); [L1062] FCALL call __mutex_init({ base: s3c_hwmon_probe_~hwmon~1!base, offset: s3c_hwmon_probe_~hwmon~1!offset }, #t~string81, s3c_hwmon_probe_~#__key~0); [L1063] FCALL call s3c_hwmon_probe_#t~ret82 := s3c_adc_register(s3c_hwmon_probe_~dev, { base: 0, offset: 0 }, { base: 0, offset: 0 }, 0); [L1063] FCALL call write~$Pointer$(s3c_hwmon_probe_#t~ret82, { base: s3c_hwmon_probe_~hwmon~1!base, offset: 152 + s3c_hwmon_probe_~hwmon~1!offset }, 8); [L1063] havoc s3c_hwmon_probe_#t~ret82; [L1064] FCALL call s3c_hwmon_probe_#t~mem83 := read~$Pointer$({ base: s3c_hwmon_probe_~hwmon~1!base, offset: 152 + s3c_hwmon_probe_~hwmon~1!offset }, 8); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res!base=-36893488147419101220, __kmalloc_#res!offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res!base=-36893488147419101220, kmalloc_#res!offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0!base=-36893488147419101220, kmalloc_~tmp___2~0!offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res!base=-36893488147419101220, kzalloc_#res!offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0!base=-36893488147419101220, kzalloc_~tmp~0!offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res!base=-36893488147419101220, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc25!base=-36893488147419101220, ldv_malloc_#t~malloc25!offset=0, ldv_malloc_~res~0!base=-36893488147419101220, ldv_malloc_~res~0!offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, platform_set_drvdata_#in~data!base=-36893488147419101220, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=50, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=-36893488147419101220, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=50, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_#t~mem83!base=0, s3c_hwmon_probe_#t~mem83!offset=18446744073709551616, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~hwmon~1!base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1!offset=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp~4!base=-36893488147419101220, s3c_hwmon_probe_~tmp~4!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1064] CALL call s3c_hwmon_probe_#t~ret84 := IS_ERR(s3c_hwmon_probe_#t~mem83); VAL [#in~ptr!base=0, #in~ptr!offset=18446744073709551616, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1283-L1291] ~ptr := #in~ptr; [L1285] havoc ~tmp~9; VAL [#in~ptr!base=0, #in~ptr!offset=18446744073709551616, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr!base=0, ~ptr!offset=18446744073709551616] [L1288] CALL call #t~ret124 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=18446744073709551616, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1327-L1334] ~ptr := #in~ptr; [L1332] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L1288] RET call #t~ret124 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=18446744073709551616, #NULL!base=0, #NULL!offset=0, #t~ret124=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr!base=0, ~ptr!offset=18446744073709551616] [L1288] assume -9223372036854775808 <= #t~ret124 && #t~ret124 <= 9223372036854775807; [L1288] ~tmp~9 := #t~ret124; [L1288] havoc #t~ret124; [L1289] #res := ~tmp~9; [L1064] RET call s3c_hwmon_probe_#t~ret84 := IS_ERR(s3c_hwmon_probe_#t~mem83); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res!base=-36893488147419101220, __kmalloc_#res!offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res!base=-36893488147419101220, kmalloc_#res!offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0!base=-36893488147419101220, kmalloc_~tmp___2~0!offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res!base=-36893488147419101220, kzalloc_#res!offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0!base=-36893488147419101220, kzalloc_~tmp~0!offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res!base=-36893488147419101220, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc25!base=-36893488147419101220, ldv_malloc_#t~malloc25!offset=0, ldv_malloc_~res~0!base=-36893488147419101220, ldv_malloc_~res~0!offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, platform_set_drvdata_#in~data!base=-36893488147419101220, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=50, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=-36893488147419101220, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=50, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_#t~mem83!base=0, s3c_hwmon_probe_#t~mem83!offset=18446744073709551616, s3c_hwmon_probe_#t~ret84=0, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~hwmon~1!base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1!offset=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp~4!base=-36893488147419101220, s3c_hwmon_probe_~tmp~4!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1064] assume -9223372036854775808 <= s3c_hwmon_probe_#t~ret84 && s3c_hwmon_probe_#t~ret84 <= 9223372036854775807; [L1064] s3c_hwmon_probe_~tmp___1~0 := s3c_hwmon_probe_#t~ret84; [L1064] havoc s3c_hwmon_probe_#t~mem83; [L1064] havoc s3c_hwmon_probe_#t~ret84; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res!base=-36893488147419101220, __kmalloc_#res!offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res!base=-36893488147419101220, kmalloc_#res!offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0!base=-36893488147419101220, kmalloc_~tmp___2~0!offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res!base=-36893488147419101220, kzalloc_#res!offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0!base=-36893488147419101220, kzalloc_~tmp~0!offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res!base=-36893488147419101220, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc25!base=-36893488147419101220, ldv_malloc_#t~malloc25!offset=0, ldv_malloc_~res~0!base=-36893488147419101220, ldv_malloc_~res~0!offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, platform_set_drvdata_#in~data!base=-36893488147419101220, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=50, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=-36893488147419101220, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=50, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~hwmon~1!base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1!offset=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp~4!base=-36893488147419101220, s3c_hwmon_probe_~tmp~4!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1065] COND FALSE !(0 != s3c_hwmon_probe_~tmp___1~0) [L1073] s3c_hwmon_add_raw_#in~dev := { base: s3c_hwmon_probe_~dev!base, offset: 12 + s3c_hwmon_probe_~dev!offset }; [L1073] havoc s3c_hwmon_add_raw_#res; [L1073] havoc s3c_hwmon_add_raw_~dev; [L911-L918] s3c_hwmon_add_raw_~dev := s3c_hwmon_add_raw_#in~dev; [L916] s3c_hwmon_add_raw_#res := 0; [L1073] s3c_hwmon_probe_#t~ret89 := s3c_hwmon_add_raw_#res; [L1073] assume -2147483648 <= s3c_hwmon_probe_#t~ret89 && s3c_hwmon_probe_#t~ret89 <= 2147483647; [L1073] s3c_hwmon_probe_~ret~3 := s3c_hwmon_probe_#t~ret89; [L1073] havoc s3c_hwmon_probe_#t~ret89; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res!base=-36893488147419101220, __kmalloc_#res!offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res!base=-36893488147419101220, kmalloc_#res!offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0!base=-36893488147419101220, kmalloc_~tmp___2~0!offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res!base=-36893488147419101220, kzalloc_#res!offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0!base=-36893488147419101220, kzalloc_~tmp~0!offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res!base=-36893488147419101220, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc25!base=-36893488147419101220, ldv_malloc_#t~malloc25!offset=0, ldv_malloc_~res~0!base=-36893488147419101220, ldv_malloc_~res~0!offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, platform_set_drvdata_#in~data!base=-36893488147419101220, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=50, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=-36893488147419101220, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=50, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_add_raw_#in~dev!base=50, s3c_hwmon_add_raw_#in~dev!offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev!base=50, s3c_hwmon_add_raw_~dev!offset=12, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~hwmon~1!base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1!offset=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp~4!base=-36893488147419101220, s3c_hwmon_probe_~tmp~4!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1074] COND FALSE !(0 != s3c_hwmon_probe_~ret~3) [L1079] FCALL call s3c_hwmon_probe_#t~ret90 := hwmon_device_register({ base: s3c_hwmon_probe_~dev!base, offset: 12 + s3c_hwmon_probe_~dev!offset }); [L1079] FCALL call write~$Pointer$(s3c_hwmon_probe_#t~ret90, { base: s3c_hwmon_probe_~hwmon~1!base, offset: 160 + s3c_hwmon_probe_~hwmon~1!offset }, 8); [L1079] havoc s3c_hwmon_probe_#t~ret90; [L1080] FCALL call s3c_hwmon_probe_#t~mem91 := read~$Pointer$({ base: s3c_hwmon_probe_~hwmon~1!base, offset: 160 + s3c_hwmon_probe_~hwmon~1!offset }, 8); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res!base=-36893488147419101220, __kmalloc_#res!offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res!base=-36893488147419101220, kmalloc_#res!offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0!base=-36893488147419101220, kmalloc_~tmp___2~0!offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res!base=-36893488147419101220, kzalloc_#res!offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0!base=-36893488147419101220, kzalloc_~tmp~0!offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res!base=-36893488147419101220, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc25!base=-36893488147419101220, ldv_malloc_#t~malloc25!offset=0, ldv_malloc_~res~0!base=-36893488147419101220, ldv_malloc_~res~0!offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, platform_set_drvdata_#in~data!base=-36893488147419101220, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=50, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=-36893488147419101220, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=50, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_add_raw_#in~dev!base=50, s3c_hwmon_add_raw_#in~dev!offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev!base=50, s3c_hwmon_add_raw_~dev!offset=12, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_#t~mem91!base=0, s3c_hwmon_probe_#t~mem91!offset=182862574002682785169408, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~hwmon~1!base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1!offset=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp~4!base=-36893488147419101220, s3c_hwmon_probe_~tmp~4!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1080] CALL call s3c_hwmon_probe_#t~ret92 := IS_ERR(s3c_hwmon_probe_#t~mem91); VAL [#in~ptr!base=0, #in~ptr!offset=182862574002682785169408, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1283-L1291] ~ptr := #in~ptr; [L1285] havoc ~tmp~9; VAL [#in~ptr!base=0, #in~ptr!offset=182862574002682785169408, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr!base=0, ~ptr!offset=182862574002682785169408] [L1288] CALL call #t~ret124 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=182862574002682785169408, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1327-L1334] ~ptr := #in~ptr; [L1332] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L1288] RET call #t~ret124 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=182862574002682785169408, #NULL!base=0, #NULL!offset=0, #t~ret124=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr!base=0, ~ptr!offset=182862574002682785169408] [L1288] assume -9223372036854775808 <= #t~ret124 && #t~ret124 <= 9223372036854775807; [L1288] ~tmp~9 := #t~ret124; [L1288] havoc #t~ret124; [L1289] #res := ~tmp~9; [L1080] RET call s3c_hwmon_probe_#t~ret92 := IS_ERR(s3c_hwmon_probe_#t~mem91); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res!base=-36893488147419101220, __kmalloc_#res!offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res!base=-36893488147419101220, kmalloc_#res!offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0!base=-36893488147419101220, kmalloc_~tmp___2~0!offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res!base=-36893488147419101220, kzalloc_#res!offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0!base=-36893488147419101220, kzalloc_~tmp~0!offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res!base=-36893488147419101220, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc25!base=-36893488147419101220, ldv_malloc_#t~malloc25!offset=0, ldv_malloc_~res~0!base=-36893488147419101220, ldv_malloc_~res~0!offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, platform_set_drvdata_#in~data!base=-36893488147419101220, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=50, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=-36893488147419101220, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=50, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_add_raw_#in~dev!base=50, s3c_hwmon_add_raw_#in~dev!offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev!base=50, s3c_hwmon_add_raw_~dev!offset=12, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_#t~mem91!base=0, s3c_hwmon_probe_#t~mem91!offset=182862574002682785169408, s3c_hwmon_probe_#t~ret92=0, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~hwmon~1!base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1!offset=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp~4!base=-36893488147419101220, s3c_hwmon_probe_~tmp~4!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1080] assume -9223372036854775808 <= s3c_hwmon_probe_#t~ret92 && s3c_hwmon_probe_#t~ret92 <= 9223372036854775807; [L1080] s3c_hwmon_probe_~tmp___3~0 := s3c_hwmon_probe_#t~ret92; [L1080] havoc s3c_hwmon_probe_#t~mem91; [L1080] havoc s3c_hwmon_probe_#t~ret92; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res!base=-36893488147419101220, __kmalloc_#res!offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res!base=-36893488147419101220, kmalloc_#res!offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0!base=-36893488147419101220, kmalloc_~tmp___2~0!offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res!base=-36893488147419101220, kzalloc_#res!offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0!base=-36893488147419101220, kzalloc_~tmp~0!offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res!base=-36893488147419101220, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc25!base=-36893488147419101220, ldv_malloc_#t~malloc25!offset=0, ldv_malloc_~res~0!base=-36893488147419101220, ldv_malloc_~res~0!offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, platform_set_drvdata_#in~data!base=-36893488147419101220, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=50, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=-36893488147419101220, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=50, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_add_raw_#in~dev!base=50, s3c_hwmon_add_raw_#in~dev!offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev!base=50, s3c_hwmon_add_raw_~dev!offset=12, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~hwmon~1!base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1!offset=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp___3~0=0, s3c_hwmon_probe_~tmp~4!base=-36893488147419101220, s3c_hwmon_probe_~tmp~4!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1081] COND FALSE !(0 != s3c_hwmon_probe_~tmp___3~0) [L1089] s3c_hwmon_probe_~i~0 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res!base=-36893488147419101220, __kmalloc_#res!offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res!base=-36893488147419101220, kmalloc_#res!offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0!base=-36893488147419101220, kmalloc_~tmp___2~0!offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res!base=-36893488147419101220, kzalloc_#res!offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0!base=-36893488147419101220, kzalloc_~tmp~0!offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res!base=-36893488147419101220, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc25!base=-36893488147419101220, ldv_malloc_#t~malloc25!offset=0, ldv_malloc_~res~0!base=-36893488147419101220, ldv_malloc_~res~0!offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, platform_set_drvdata_#in~data!base=-36893488147419101220, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=50, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=-36893488147419101220, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=50, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_add_raw_#in~dev!base=50, s3c_hwmon_add_raw_#in~dev!offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev!base=50, s3c_hwmon_add_raw_~dev!offset=12, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~hwmon~1!base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1!offset=0, s3c_hwmon_probe_~i~0=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp___3~0=0, s3c_hwmon_probe_~tmp~4!base=-36893488147419101220, s3c_hwmon_probe_~tmp~4!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1134] COND TRUE s3c_hwmon_probe_~i~0 % 4294967296 <= 7 [L1092] FCALL call s3c_hwmon_probe_#t~mem97 := read~$Pointer$({ base: s3c_hwmon_probe_~pdata~2!base, offset: s3c_hwmon_probe_~pdata~2!offset + 8 * s3c_hwmon_probe_~i~0 }, 8); [L1092] s3c_hwmon_probe_~cfg~2 := s3c_hwmon_probe_#t~mem97; [L1092] havoc s3c_hwmon_probe_#t~mem97; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res!base=-36893488147419101220, __kmalloc_#res!offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res!base=-36893488147419101220, kmalloc_#res!offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0!base=-36893488147419101220, kmalloc_~tmp___2~0!offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res!base=-36893488147419101220, kzalloc_#res!offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0!base=-36893488147419101220, kzalloc_~tmp~0!offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res!base=-36893488147419101220, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc25!base=-36893488147419101220, ldv_malloc_#t~malloc25!offset=0, ldv_malloc_~res~0!base=-36893488147419101220, ldv_malloc_~res~0!offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, platform_set_drvdata_#in~data!base=-36893488147419101220, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=50, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=-36893488147419101220, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=50, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_add_raw_#in~dev!base=50, s3c_hwmon_add_raw_#in~dev!offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev!base=50, s3c_hwmon_add_raw_~dev!offset=12, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~cfg~2!base=-36893488147419091769, s3c_hwmon_probe_~cfg~2!offset=-11462, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~hwmon~1!base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1!offset=0, s3c_hwmon_probe_~i~0=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp___3~0=0, s3c_hwmon_probe_~tmp~4!base=-36893488147419101220, s3c_hwmon_probe_~tmp~4!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1093] COND FALSE !(0 == (s3c_hwmon_probe_~cfg~2!base + s3c_hwmon_probe_~cfg~2!offset) % 18446744073709551616) [L1098] FCALL call s3c_hwmon_probe_#t~mem98 := read~int({ base: s3c_hwmon_probe_~cfg~2!base, offset: 8 + s3c_hwmon_probe_~cfg~2!offset }, 4); [L1098] COND FALSE !(s3c_hwmon_probe_#t~mem98 % 4294967296 > 65535) [L1098] havoc s3c_hwmon_probe_#t~mem98; [L1104] FCALL call s3c_hwmon_probe_#t~mem101 := read~int({ base: s3c_hwmon_probe_~cfg~2!base, offset: 12 + s3c_hwmon_probe_~cfg~2!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res!base=-36893488147419101220, __kmalloc_#res!offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res!base=-36893488147419101220, kmalloc_#res!offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0!base=-36893488147419101220, kmalloc_~tmp___2~0!offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res!base=-36893488147419101220, kzalloc_#res!offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0!base=-36893488147419101220, kzalloc_~tmp~0!offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res!base=-36893488147419101220, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc25!base=-36893488147419101220, ldv_malloc_#t~malloc25!offset=0, ldv_malloc_~res~0!base=-36893488147419101220, ldv_malloc_~res~0!offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, platform_set_drvdata_#in~data!base=-36893488147419101220, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=50, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=-36893488147419101220, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=50, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_add_raw_#in~dev!base=50, s3c_hwmon_add_raw_#in~dev!offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev!base=50, s3c_hwmon_add_raw_~dev!offset=12, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_#t~mem101=21461951578113, s3c_hwmon_probe_#t~nondet99=65, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~cfg~2!base=-36893488147419091769, s3c_hwmon_probe_~cfg~2!offset=-11462, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~hwmon~1!base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1!offset=0, s3c_hwmon_probe_~i~0=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp___3~0=0, s3c_hwmon_probe_~tmp~4!base=-36893488147419101220, s3c_hwmon_probe_~tmp~4!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1104] COND FALSE !(0 == s3c_hwmon_probe_#t~mem101 % 4294967296) [L1104] havoc s3c_hwmon_probe_#t~mem101; [L1110] FCALL call s3c_hwmon_probe_#t~mem104 := read~$Pointer$({ base: s3c_hwmon_probe_~pdata~2!base, offset: s3c_hwmon_probe_~pdata~2!offset + 8 * s3c_hwmon_probe_~i~0 }, 8); [L1110-L1111] s3c_hwmon_create_attr_#in~dev, s3c_hwmon_create_attr_#in~cfg, s3c_hwmon_create_attr_#in~attrs, s3c_hwmon_create_attr_#in~channel := { base: s3c_hwmon_probe_~dev!base, offset: 12 + s3c_hwmon_probe_~dev!offset }, s3c_hwmon_probe_#t~mem104, { base: s3c_hwmon_probe_~hwmon~1!base, offset: 168 + s3c_hwmon_probe_~hwmon~1!offset + 116 * (s3c_hwmon_probe_~i~0 % 4294967296) }, s3c_hwmon_probe_~i~0; [L1110-L1111] havoc s3c_hwmon_create_attr_#res; [L1110-L1111] havoc s3c_hwmon_create_attr_#t~nondet64, s3c_hwmon_create_attr_#t~ret66, s3c_hwmon_create_attr_#t~nondet67, s3c_hwmon_create_attr_#t~mem69, s3c_hwmon_create_attr_#t~nondet70, s3c_hwmon_create_attr_#t~ret72, s3c_hwmon_create_attr_#t~nondet73, s3c_hwmon_create_attr_~dev, s3c_hwmon_create_attr_~cfg, s3c_hwmon_create_attr_~attrs, s3c_hwmon_create_attr_~channel, s3c_hwmon_create_attr_~attr~0, s3c_hwmon_create_attr_~ret~2; [L980-L1019] s3c_hwmon_create_attr_~dev := s3c_hwmon_create_attr_#in~dev; [L980-L1019] s3c_hwmon_create_attr_~cfg := s3c_hwmon_create_attr_#in~cfg; [L980-L1019] s3c_hwmon_create_attr_~attrs := s3c_hwmon_create_attr_#in~attrs; [L980-L1019] s3c_hwmon_create_attr_~channel := s3c_hwmon_create_attr_#in~channel; [L983] havoc s3c_hwmon_create_attr_~attr~0; [L984] havoc s3c_hwmon_create_attr_~ret~2; [L987] havoc s3c_hwmon_create_attr_#t~nondet64; [L988] s3c_hwmon_create_attr_~attr~0 := { base: s3c_hwmon_create_attr_~attrs!base, offset: s3c_hwmon_create_attr_~attrs!offset }; [L989] FCALL call write~int(s3c_hwmon_create_attr_~channel, { base: s3c_hwmon_create_attr_~attr~0!base, offset: 42 + s3c_hwmon_create_attr_~attr~0!offset }, 4); [L990] FCALL call write~$Pointer$({ base: s3c_hwmon_create_attr_~attrs!base, offset: 92 + s3c_hwmon_create_attr_~attrs!offset }, { base: s3c_hwmon_create_attr_~attr~0!base, offset: s3c_hwmon_create_attr_~attr~0!offset }, 8); [L991] FCALL call write~int(292, { base: s3c_hwmon_create_attr_~attr~0!base, offset: 8 + s3c_hwmon_create_attr_~attr~0!offset }, 2); [L992] FCALL call write~$Pointer$(#funAddr~s3c_hwmon_ch_show, { base: s3c_hwmon_create_attr_~attr~0!base, offset: 26 + s3c_hwmon_create_attr_~attr~0!offset }, 8); [L993] ldv_device_create_file_5_#in~ldv_func_arg1, ldv_device_create_file_5_#in~ldv_func_arg2 := s3c_hwmon_create_attr_~dev, { base: s3c_hwmon_create_attr_~attr~0!base, offset: s3c_hwmon_create_attr_~attr~0!offset }; [L993] havoc ldv_device_create_file_5_#res; [L993] havoc ldv_device_create_file_5_#t~ret125, ldv_device_create_file_5_~ldv_func_arg1, ldv_device_create_file_5_~ldv_func_arg2, ldv_device_create_file_5_~tmp~10; [L1292-L1300] ldv_device_create_file_5_~ldv_func_arg1 := ldv_device_create_file_5_#in~ldv_func_arg1; [L1292-L1300] ldv_device_create_file_5_~ldv_func_arg2 := ldv_device_create_file_5_#in~ldv_func_arg2; [L1294] havoc ldv_device_create_file_5_~tmp~10; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res!base=-36893488147419101220, __kmalloc_#res!offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res!base=-36893488147419101220, kmalloc_#res!offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0!base=-36893488147419101220, kmalloc_~tmp___2~0!offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res!base=-36893488147419101220, kzalloc_#res!offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0!base=-36893488147419101220, kzalloc_~tmp~0!offset=0, ldv_device_create_file_5_#in~ldv_func_arg1!base=50, ldv_device_create_file_5_#in~ldv_func_arg1!offset=12, ldv_device_create_file_5_#in~ldv_func_arg2!base=-36893488147419101220, ldv_device_create_file_5_#in~ldv_func_arg2!offset=168, ldv_device_create_file_5_~ldv_func_arg1!base=50, ldv_device_create_file_5_~ldv_func_arg1!offset=12, ldv_device_create_file_5_~ldv_func_arg2!base=-36893488147419101220, ldv_device_create_file_5_~ldv_func_arg2!offset=168, ldv_malloc_#in~size=800, ldv_malloc_#res!base=-36893488147419101220, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc25!base=-36893488147419101220, ldv_malloc_#t~malloc25!offset=0, ldv_malloc_~res~0!base=-36893488147419101220, ldv_malloc_~res~0!offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, platform_set_drvdata_#in~data!base=-36893488147419101220, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=50, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=-36893488147419101220, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=50, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_add_raw_#in~dev!base=50, s3c_hwmon_add_raw_#in~dev!offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev!base=50, s3c_hwmon_add_raw_~dev!offset=12, s3c_hwmon_create_attr_#in~attrs!base=-36893488147419101220, s3c_hwmon_create_attr_#in~attrs!offset=168, s3c_hwmon_create_attr_#in~cfg!base=-36893488147419091769, s3c_hwmon_create_attr_#in~cfg!offset=-11462, s3c_hwmon_create_attr_#in~channel=0, s3c_hwmon_create_attr_#in~dev!base=50, s3c_hwmon_create_attr_#in~dev!offset=12, s3c_hwmon_create_attr_~attrs!base=-36893488147419101220, s3c_hwmon_create_attr_~attrs!offset=168, s3c_hwmon_create_attr_~attr~0!base=-36893488147419101220, s3c_hwmon_create_attr_~attr~0!offset=168, s3c_hwmon_create_attr_~cfg!base=-36893488147419091769, s3c_hwmon_create_attr_~cfg!offset=-11462, s3c_hwmon_create_attr_~channel=0, s3c_hwmon_create_attr_~dev!base=50, s3c_hwmon_create_attr_~dev!offset=12, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_#t~mem104!base=-36893488147419091769, s3c_hwmon_probe_#t~mem104!offset=-11462, s3c_hwmon_probe_#t~nondet99=65, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~cfg~2!base=-36893488147419091769, s3c_hwmon_probe_~cfg~2!offset=-11462, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~hwmon~1!base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1!offset=0, s3c_hwmon_probe_~i~0=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp___3~0=0, s3c_hwmon_probe_~tmp~4!base=-36893488147419101220, s3c_hwmon_probe_~tmp~4!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1297] CALL call ldv_device_create_file_5_#t~ret125 := ldv_device_create_file_dev_attr_of_sensor_device_attribute(ldv_device_create_file_5_~ldv_func_arg2); VAL [#in~attr!base=-36893488147419101220, #in~attr!offset=168, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, old(~ldv_call_dev_attr_of_sensor_device_attribute~0)=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1382-L1400] ~attr := #in~attr; VAL [#in~attr!base=-36893488147419101220, #in~attr!offset=168, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, old(~ldv_call_dev_attr_of_sensor_device_attribute~0)=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~attr!base=-36893488147419101220, ~attr!offset=168, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1387] COND TRUE 0 == ~ldv_call_dev_attr_of_sensor_device_attribute~0 [L1388] ~ldv_count_2~0 := 1 + ~ldv_count_2~0; [L1389] ~ldv_call_dev_attr_of_sensor_device_attribute~0 := 1; VAL [#in~attr!base=-36893488147419101220, #in~attr!offset=168, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, old(~ldv_call_dev_attr_of_sensor_device_attribute~0)=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~attr!base=-36893488147419101220, ~attr!offset=168, ~ldv_call_dev_attr_of_sensor_device_attribute~0=1, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1] [L1390] COND FALSE !(~ldv_count_1~0 >= ~ldv_count_2~0) VAL [#in~attr!base=-36893488147419101220, #in~attr!offset=168, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, old(~ldv_call_dev_attr_of_sensor_device_attribute~0)=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~attr!base=-36893488147419101220, ~attr!offset=168, ~ldv_call_dev_attr_of_sensor_device_attribute~0=1, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1] [L1316] assert false; VAL [#in~attr!base=-36893488147419101220, #in~attr!offset=168, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, old(~ldv_call_dev_attr_of_sensor_device_attribute~0)=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~attr!base=-36893488147419101220, ~attr!offset=168, ~ldv_call_dev_attr_of_sensor_device_attribute~0=1, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1] ----- ----- class de.uni_freiburg.informatik.ultimate.boogie.procedureinliner.backtranslation.InlinerBacktranslator [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L905] FCALL call #t~string44 := #Ultimate.alloc(4); [L905] FCALL call write~init~int(60, { base: #t~string44!base, offset: #t~string44!offset }, 1); [L905] FCALL call write~init~int(55, { base: #t~string44!base, offset: 1 + #t~string44!offset }, 1); [L905] FCALL call write~init~int(62, { base: #t~string44!base, offset: 2 + #t~string44!offset }, 1); [L905] FCALL call write~init~int(0, { base: #t~string44!base, offset: 3 + #t~string44!offset }, 1); [L905] FCALL call #t~string45 := #Ultimate.alloc(20); [L958] FCALL call #t~string57 := #Ultimate.alloc(4); [L958] FCALL call write~init~int(37, { base: #t~string57!base, offset: #t~string57!offset }, 1); [L958] FCALL call write~init~int(100, { base: #t~string57!base, offset: 1 + #t~string57!offset }, 1); [L958] FCALL call write~init~int(10, { base: #t~string57!base, offset: 2 + #t~string57!offset }, 1); [L958] FCALL call write~init~int(0, { base: #t~string57!base, offset: 3 + #t~string57!offset }, 1); [L976] FCALL call #t~string62 := #Ultimate.alloc(4); [L976] FCALL call write~init~int(37, { base: #t~string62!base, offset: #t~string62!offset }, 1); [L976] FCALL call write~init~int(115, { base: #t~string62!base, offset: 1 + #t~string62!offset }, 1); [L976] FCALL call write~init~int(10, { base: #t~string62!base, offset: 2 + #t~string62!offset }, 1); [L976] FCALL call write~init~int(0, { base: #t~string62!base, offset: 3 + #t~string62!offset }, 1); [L987] FCALL call #t~string65 := #Ultimate.alloc(11); [L995] FCALL call #t~string68 := #Ultimate.alloc(34); [L1001] FCALL call #t~string71 := #Ultimate.alloc(11); [L1010] FCALL call #t~string74 := #Ultimate.alloc(34); [L1048] FCALL call #t~string77 := #Ultimate.alloc(27); [L1056] FCALL call #t~string80 := #Ultimate.alloc(11); [L1062] FCALL call #t~string81 := #Ultimate.alloc(13); [L1066] FCALL call #t~string86 := #Ultimate.alloc(21); [L1082] FCALL call #t~string94 := #Ultimate.alloc(30); [L1099] FCALL call #t~string100 := #Ultimate.alloc(33); [L1105] FCALL call #t~string103 := #Ultimate.alloc(25); [L1113] FCALL call #t~string107 := #Ultimate.alloc(27); [L1178] FCALL call #t~string113 := #Ultimate.alloc(10); [L1205] ~LDV_IN_INTERRUPT~0 := 0; [L1370] ~ldv_count_1~0 := 0; [L1371] ~ldv_count_2~0 := 0; [L1381] ~ldv_call_dev_attr_of_sensor_device_attribute~0 := 0; [L1178-L1180] FCALL call ~#s3c_hwmon_driver~0 := #Ultimate.alloc(153); [L1178-L1180] FCALL call write~init~$Pointer$(#funAddr~s3c_hwmon_probe, { base: ~#s3c_hwmon_driver~0!base, offset: ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$(#funAddr~s3c_hwmon_remove, { base: ~#s3c_hwmon_driver~0!base, offset: 8 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 16 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 24 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 32 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$(#t~string113, { base: ~#s3c_hwmon_driver~0!base, offset: 40 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 48 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#s3c_hwmon_driver~0!base, offset: 56 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 64 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~int(0, { base: ~#s3c_hwmon_driver~0!base, offset: 72 + ~#s3c_hwmon_driver~0!offset }, 1); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 73 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 81 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 89 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 97 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 105 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 113 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 121 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 129 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 137 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 145 + ~#s3c_hwmon_driver~0!offset }, 8); [?] havoc main_#res; [?] havoc main_#t~ret117, main_#t~nondet118, main_#t~switch119, main_#t~ret120, main_#t~ret121, main_#t~nondet122, main_~var_group1~0, main_~res_s3c_hwmon_probe_10~0, main_~ldv_s_s3c_hwmon_driver_platform_driver~0, main_~tmp~7, main_~tmp___0~2, main_~tmp___1~1; [L1208] havoc main_~var_group1~0; [L1209] havoc main_~res_s3c_hwmon_probe_10~0; [L1210] havoc main_~ldv_s_s3c_hwmon_driver_platform_driver~0; [L1211] havoc main_~tmp~7; [L1212] havoc main_~tmp___0~2; [L1213] havoc main_~tmp___1~1; [L1216] main_~ldv_s_s3c_hwmon_driver_platform_driver~0 := 0; [L1217] ~LDV_IN_INTERRUPT~0 := 1; [L1219] FCALL call ldv_handler_precall(); [L1220] havoc s3c_hwmon_init_#res; [L1220] havoc s3c_hwmon_init_#t~ret114, s3c_hwmon_init_~tmp~6; [L1183] havoc s3c_hwmon_init_~tmp~6; [L1186] FCALL call s3c_hwmon_init_#t~ret114 := platform_driver_register(~#s3c_hwmon_driver~0); [L1186] assume -2147483648 <= s3c_hwmon_init_#t~ret114 && s3c_hwmon_init_#t~ret114 <= 2147483647; [L1186] s3c_hwmon_init_~tmp~6 := s3c_hwmon_init_#t~ret114; [L1186] havoc s3c_hwmon_init_#t~ret114; [L1187] s3c_hwmon_init_#res := s3c_hwmon_init_~tmp~6; [L1220] main_#t~ret117 := s3c_hwmon_init_#res; [L1220] assume -2147483648 <= main_#t~ret117 && main_#t~ret117 <= 2147483647; [L1220] main_~tmp~7 := main_#t~ret117; [L1220] havoc main_#t~ret117; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp~7=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1221] COND FALSE !(0 != main_~tmp~7) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp~7=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1259] assume -2147483648 <= main_#t~nondet122 && main_#t~nondet122 <= 2147483647; [L1259] main_~tmp___1~1 := main_#t~nondet122; [L1259] havoc main_#t~nondet122; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___1~1=1, main_~tmp~7=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1260] COND TRUE 0 != main_~tmp___1~1 || 0 != main_~ldv_s_s3c_hwmon_driver_platform_driver~0 [L1228] assume -2147483648 <= main_#t~nondet118 && main_#t~nondet118 <= 2147483647; [L1228] main_~tmp___0~2 := main_#t~nondet118; [L1228] havoc main_#t~nondet118; [L1230] main_#t~switch119 := 0 == main_~tmp___0~2; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1229-L1256] COND TRUE main_#t~switch119 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1231] COND TRUE 0 == main_~ldv_s_s3c_hwmon_driver_platform_driver~0 [L1232] s3c_hwmon_probe_#in~dev := main_~var_group1~0; [L1232] havoc s3c_hwmon_probe_#res; [L1232] havoc s3c_hwmon_probe_#t~mem75, s3c_hwmon_probe_#t~nondet76, s3c_hwmon_probe_#t~ret78, s3c_hwmon_probe_#t~nondet79, s3c_hwmon_probe_#t~ret82, s3c_hwmon_probe_#t~mem83, s3c_hwmon_probe_#t~ret84, s3c_hwmon_probe_#t~nondet85, s3c_hwmon_probe_#t~mem87, s3c_hwmon_probe_#t~ret88, s3c_hwmon_probe_#t~ret89, s3c_hwmon_probe_#t~ret90, s3c_hwmon_probe_#t~mem91, s3c_hwmon_probe_#t~ret92, s3c_hwmon_probe_#t~nondet93, s3c_hwmon_probe_#t~mem95, s3c_hwmon_probe_#t~ret96, s3c_hwmon_probe_#t~mem97, s3c_hwmon_probe_#t~mem98, s3c_hwmon_probe_#t~nondet99, s3c_hwmon_probe_#t~mem101, s3c_hwmon_probe_#t~nondet102, s3c_hwmon_probe_#t~mem104, s3c_hwmon_probe_#t~ret105, s3c_hwmon_probe_#t~nondet106, s3c_hwmon_probe_#t~mem108, s3c_hwmon_probe_#t~mem109, s3c_hwmon_probe_~dev, s3c_hwmon_probe_~pdata~2, s3c_hwmon_probe_~hwmon~1, s3c_hwmon_probe_~ret~3, s3c_hwmon_probe_~i~0, s3c_hwmon_probe_~tmp~4, s3c_hwmon_probe_~#__key~0, s3c_hwmon_probe_~tmp___0~1, s3c_hwmon_probe_~tmp___1~0, s3c_hwmon_probe_~tmp___2~1, s3c_hwmon_probe_~tmp___3~0, s3c_hwmon_probe_~cfg~2; [L1030-L1151] s3c_hwmon_probe_~dev := s3c_hwmon_probe_#in~dev; [L1032] havoc s3c_hwmon_probe_~pdata~2; [L1033] havoc s3c_hwmon_probe_~hwmon~1; [L1034] havoc s3c_hwmon_probe_~ret~3; [L1035] havoc s3c_hwmon_probe_~i~0; [L1036] havoc s3c_hwmon_probe_~tmp~4; [L1037] FCALL call s3c_hwmon_probe_~#__key~0 := #Ultimate.alloc(8); [L1038] havoc s3c_hwmon_probe_~tmp___0~1; [L1039] havoc s3c_hwmon_probe_~tmp___1~0; [L1040] havoc s3c_hwmon_probe_~tmp___2~1; [L1041] havoc s3c_hwmon_probe_~tmp___3~0; [L1042] havoc s3c_hwmon_probe_~cfg~2; [L1045] FCALL call s3c_hwmon_probe_#t~mem75 := read~$Pointer$({ base: s3c_hwmon_probe_~dev!base, offset: 277 + s3c_hwmon_probe_~dev!offset }, 8); [L1045] s3c_hwmon_probe_~pdata~2 := s3c_hwmon_probe_#t~mem75; [L1045] havoc s3c_hwmon_probe_#t~mem75; [L1046] s3c_hwmon_probe_~ret~3 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1047] COND FALSE !(0 == (s3c_hwmon_probe_~pdata~2!base + s3c_hwmon_probe_~pdata~2!offset) % 18446744073709551616) [L1053] kzalloc_#in~size, kzalloc_#in~flags := 800, 208; [L1053] havoc kzalloc_#res; [L1053] havoc kzalloc_#t~ret29, kzalloc_~size, kzalloc_~flags, kzalloc_~tmp~0; [L854-L862] kzalloc_~size := kzalloc_#in~size; [L854-L862] kzalloc_~flags := kzalloc_#in~flags; [L856] havoc kzalloc_~tmp~0; [L859] kmalloc_#in~size, kmalloc_#in~flags := kzalloc_~size, ~bitwiseOr(kzalloc_~flags, 32768); [L859] havoc kmalloc_#res; [L859] havoc kmalloc_#t~ret28, kmalloc_~size, kmalloc_~flags, kmalloc_~tmp___2~0; [L845-L853] kmalloc_~size := kmalloc_#in~size; [L845-L853] kmalloc_~flags := kmalloc_#in~flags; [L847] havoc kmalloc_~tmp___2~0; [L850] __kmalloc_#in~size, __kmalloc_#in~t := kmalloc_~size, kmalloc_~flags; [L850] havoc __kmalloc_#res; [L850] havoc __kmalloc_#t~ret27, __kmalloc_~size, __kmalloc_~t; [L841-L844] __kmalloc_~size := __kmalloc_#in~size; [L841-L844] __kmalloc_~t := __kmalloc_#in~t; [L843] ldv_malloc_#in~size := __kmalloc_~size; [L843] havoc ldv_malloc_#res; [L843] havoc ldv_malloc_#t~nondet24, ldv_malloc_#t~malloc25, ldv_malloc_#t~ret26, ldv_malloc_~res~0, ldv_malloc_~size; [L830-L840] ldv_malloc_~size := ldv_malloc_#in~size; [L832] assume -2147483648 <= ldv_malloc_#t~nondet24 && ldv_malloc_#t~nondet24 <= 2147483647; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_~flags=52, kmalloc_~size=800, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_~flags=208, kzalloc_~size=800, ldv_malloc_#in~size=800, ldv_malloc_#t~nondet24=-1, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L832-L839] COND TRUE 0 != ldv_malloc_#t~nondet24 [L832] havoc ldv_malloc_#t~nondet24; [L833] FCALL call ldv_malloc_#t~malloc25 := #Ultimate.alloc(ldv_malloc_~size); [L833] ldv_malloc_~res~0 := ldv_malloc_#t~malloc25; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_~flags=52, kmalloc_~size=800, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_~flags=208, kzalloc_~size=800, ldv_malloc_#in~size=800, ldv_malloc_#t~malloc25!base=-36893488147419101220, ldv_malloc_#t~malloc25!offset=0, ldv_malloc_~res~0!base=-36893488147419101220, ldv_malloc_~res~0!offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L834] CALL call ldv_malloc_#t~ret26 := ldv_is_err(ldv_malloc_~res~0); VAL [#in~ptr!base=-36893488147419101220, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1327-L1334] ~ptr := #in~ptr; [L1332] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L834] RET call ldv_malloc_#t~ret26 := ldv_is_err(ldv_malloc_~res~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_~flags=52, kmalloc_~size=800, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_~flags=208, kzalloc_~size=800, ldv_malloc_#in~size=800, ldv_malloc_#t~malloc25!base=-36893488147419101220, ldv_malloc_#t~malloc25!offset=0, ldv_malloc_#t~ret26=0, ldv_malloc_~res~0!base=-36893488147419101220, ldv_malloc_~res~0!offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L834] assume -9223372036854775808 <= ldv_malloc_#t~ret26 && ldv_malloc_#t~ret26 <= 9223372036854775807; [L834] assume 0 != (if 0 == ldv_malloc_#t~ret26 then 1 else 0); [L834] havoc ldv_malloc_#t~ret26; [L836] ldv_malloc_#res := ldv_malloc_~res~0; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_~flags=52, kmalloc_~size=800, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_~flags=208, kzalloc_~size=800, ldv_malloc_#in~size=800, ldv_malloc_#res!base=-36893488147419101220, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc25!base=-36893488147419101220, ldv_malloc_#t~malloc25!offset=0, ldv_malloc_~res~0!base=-36893488147419101220, ldv_malloc_~res~0!offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L843] __kmalloc_#t~ret27 := ldv_malloc_#res; [L843] __kmalloc_#res := __kmalloc_#t~ret27; [L843] havoc __kmalloc_#t~ret27; [L850] kmalloc_#t~ret28 := __kmalloc_#res; [L850] kmalloc_~tmp___2~0 := kmalloc_#t~ret28; [L850] havoc kmalloc_#t~ret28; [L851] kmalloc_#res := kmalloc_~tmp___2~0; [L859] kzalloc_#t~ret29 := kmalloc_#res; [L859] kzalloc_~tmp~0 := kzalloc_#t~ret29; [L859] havoc kzalloc_#t~ret29; [L860] kzalloc_#res := kzalloc_~tmp~0; [L1053] s3c_hwmon_probe_#t~ret78 := kzalloc_#res; [L1053] s3c_hwmon_probe_~tmp~4 := s3c_hwmon_probe_#t~ret78; [L1053] havoc s3c_hwmon_probe_#t~ret78; [L1054] s3c_hwmon_probe_~hwmon~1 := s3c_hwmon_probe_~tmp~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res!base=-36893488147419101220, __kmalloc_#res!offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res!base=-36893488147419101220, kmalloc_#res!offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0!base=-36893488147419101220, kmalloc_~tmp___2~0!offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res!base=-36893488147419101220, kzalloc_#res!offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0!base=-36893488147419101220, kzalloc_~tmp~0!offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res!base=-36893488147419101220, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc25!base=-36893488147419101220, ldv_malloc_#t~malloc25!offset=0, ldv_malloc_~res~0!base=-36893488147419101220, ldv_malloc_~res~0!offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~hwmon~1!base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1!offset=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp~4!base=-36893488147419101220, s3c_hwmon_probe_~tmp~4!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1055] COND FALSE !(0 == (s3c_hwmon_probe_~hwmon~1!base + s3c_hwmon_probe_~hwmon~1!offset) % 18446744073709551616) [L1061] platform_set_drvdata_#in~pdev, platform_set_drvdata_#in~data := s3c_hwmon_probe_~dev, s3c_hwmon_probe_~hwmon~1; [L1061] havoc platform_set_drvdata_~pdev, platform_set_drvdata_~data; [L876-L884] platform_set_drvdata_~pdev := platform_set_drvdata_#in~pdev; [L876-L884] platform_set_drvdata_~data := platform_set_drvdata_#in~data; [L881] FCALL call dev_set_drvdata({ base: platform_set_drvdata_~pdev!base, offset: 12 + platform_set_drvdata_~pdev!offset }, platform_set_drvdata_~data); [L1062] FCALL call __mutex_init({ base: s3c_hwmon_probe_~hwmon~1!base, offset: s3c_hwmon_probe_~hwmon~1!offset }, #t~string81, s3c_hwmon_probe_~#__key~0); [L1063] FCALL call s3c_hwmon_probe_#t~ret82 := s3c_adc_register(s3c_hwmon_probe_~dev, { base: 0, offset: 0 }, { base: 0, offset: 0 }, 0); [L1063] FCALL call write~$Pointer$(s3c_hwmon_probe_#t~ret82, { base: s3c_hwmon_probe_~hwmon~1!base, offset: 152 + s3c_hwmon_probe_~hwmon~1!offset }, 8); [L1063] havoc s3c_hwmon_probe_#t~ret82; [L1064] FCALL call s3c_hwmon_probe_#t~mem83 := read~$Pointer$({ base: s3c_hwmon_probe_~hwmon~1!base, offset: 152 + s3c_hwmon_probe_~hwmon~1!offset }, 8); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res!base=-36893488147419101220, __kmalloc_#res!offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res!base=-36893488147419101220, kmalloc_#res!offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0!base=-36893488147419101220, kmalloc_~tmp___2~0!offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res!base=-36893488147419101220, kzalloc_#res!offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0!base=-36893488147419101220, kzalloc_~tmp~0!offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res!base=-36893488147419101220, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc25!base=-36893488147419101220, ldv_malloc_#t~malloc25!offset=0, ldv_malloc_~res~0!base=-36893488147419101220, ldv_malloc_~res~0!offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, platform_set_drvdata_#in~data!base=-36893488147419101220, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=50, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=-36893488147419101220, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=50, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_#t~mem83!base=0, s3c_hwmon_probe_#t~mem83!offset=18446744073709551616, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~hwmon~1!base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1!offset=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp~4!base=-36893488147419101220, s3c_hwmon_probe_~tmp~4!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1064] CALL call s3c_hwmon_probe_#t~ret84 := IS_ERR(s3c_hwmon_probe_#t~mem83); VAL [#in~ptr!base=0, #in~ptr!offset=18446744073709551616, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1283-L1291] ~ptr := #in~ptr; [L1285] havoc ~tmp~9; VAL [#in~ptr!base=0, #in~ptr!offset=18446744073709551616, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr!base=0, ~ptr!offset=18446744073709551616] [L1288] CALL call #t~ret124 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=18446744073709551616, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1327-L1334] ~ptr := #in~ptr; [L1332] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L1288] RET call #t~ret124 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=18446744073709551616, #NULL!base=0, #NULL!offset=0, #t~ret124=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr!base=0, ~ptr!offset=18446744073709551616] [L1288] assume -9223372036854775808 <= #t~ret124 && #t~ret124 <= 9223372036854775807; [L1288] ~tmp~9 := #t~ret124; [L1288] havoc #t~ret124; [L1289] #res := ~tmp~9; [L1064] RET call s3c_hwmon_probe_#t~ret84 := IS_ERR(s3c_hwmon_probe_#t~mem83); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res!base=-36893488147419101220, __kmalloc_#res!offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res!base=-36893488147419101220, kmalloc_#res!offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0!base=-36893488147419101220, kmalloc_~tmp___2~0!offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res!base=-36893488147419101220, kzalloc_#res!offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0!base=-36893488147419101220, kzalloc_~tmp~0!offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res!base=-36893488147419101220, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc25!base=-36893488147419101220, ldv_malloc_#t~malloc25!offset=0, ldv_malloc_~res~0!base=-36893488147419101220, ldv_malloc_~res~0!offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, platform_set_drvdata_#in~data!base=-36893488147419101220, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=50, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=-36893488147419101220, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=50, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_#t~mem83!base=0, s3c_hwmon_probe_#t~mem83!offset=18446744073709551616, s3c_hwmon_probe_#t~ret84=0, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~hwmon~1!base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1!offset=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp~4!base=-36893488147419101220, s3c_hwmon_probe_~tmp~4!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1064] assume -9223372036854775808 <= s3c_hwmon_probe_#t~ret84 && s3c_hwmon_probe_#t~ret84 <= 9223372036854775807; [L1064] s3c_hwmon_probe_~tmp___1~0 := s3c_hwmon_probe_#t~ret84; [L1064] havoc s3c_hwmon_probe_#t~mem83; [L1064] havoc s3c_hwmon_probe_#t~ret84; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res!base=-36893488147419101220, __kmalloc_#res!offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res!base=-36893488147419101220, kmalloc_#res!offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0!base=-36893488147419101220, kmalloc_~tmp___2~0!offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res!base=-36893488147419101220, kzalloc_#res!offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0!base=-36893488147419101220, kzalloc_~tmp~0!offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res!base=-36893488147419101220, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc25!base=-36893488147419101220, ldv_malloc_#t~malloc25!offset=0, ldv_malloc_~res~0!base=-36893488147419101220, ldv_malloc_~res~0!offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, platform_set_drvdata_#in~data!base=-36893488147419101220, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=50, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=-36893488147419101220, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=50, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~hwmon~1!base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1!offset=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp~4!base=-36893488147419101220, s3c_hwmon_probe_~tmp~4!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1065] COND FALSE !(0 != s3c_hwmon_probe_~tmp___1~0) [L1073] s3c_hwmon_add_raw_#in~dev := { base: s3c_hwmon_probe_~dev!base, offset: 12 + s3c_hwmon_probe_~dev!offset }; [L1073] havoc s3c_hwmon_add_raw_#res; [L1073] havoc s3c_hwmon_add_raw_~dev; [L911-L918] s3c_hwmon_add_raw_~dev := s3c_hwmon_add_raw_#in~dev; [L916] s3c_hwmon_add_raw_#res := 0; [L1073] s3c_hwmon_probe_#t~ret89 := s3c_hwmon_add_raw_#res; [L1073] assume -2147483648 <= s3c_hwmon_probe_#t~ret89 && s3c_hwmon_probe_#t~ret89 <= 2147483647; [L1073] s3c_hwmon_probe_~ret~3 := s3c_hwmon_probe_#t~ret89; [L1073] havoc s3c_hwmon_probe_#t~ret89; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res!base=-36893488147419101220, __kmalloc_#res!offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res!base=-36893488147419101220, kmalloc_#res!offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0!base=-36893488147419101220, kmalloc_~tmp___2~0!offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res!base=-36893488147419101220, kzalloc_#res!offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0!base=-36893488147419101220, kzalloc_~tmp~0!offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res!base=-36893488147419101220, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc25!base=-36893488147419101220, ldv_malloc_#t~malloc25!offset=0, ldv_malloc_~res~0!base=-36893488147419101220, ldv_malloc_~res~0!offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, platform_set_drvdata_#in~data!base=-36893488147419101220, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=50, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=-36893488147419101220, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=50, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_add_raw_#in~dev!base=50, s3c_hwmon_add_raw_#in~dev!offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev!base=50, s3c_hwmon_add_raw_~dev!offset=12, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~hwmon~1!base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1!offset=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp~4!base=-36893488147419101220, s3c_hwmon_probe_~tmp~4!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1074] COND FALSE !(0 != s3c_hwmon_probe_~ret~3) [L1079] FCALL call s3c_hwmon_probe_#t~ret90 := hwmon_device_register({ base: s3c_hwmon_probe_~dev!base, offset: 12 + s3c_hwmon_probe_~dev!offset }); [L1079] FCALL call write~$Pointer$(s3c_hwmon_probe_#t~ret90, { base: s3c_hwmon_probe_~hwmon~1!base, offset: 160 + s3c_hwmon_probe_~hwmon~1!offset }, 8); [L1079] havoc s3c_hwmon_probe_#t~ret90; [L1080] FCALL call s3c_hwmon_probe_#t~mem91 := read~$Pointer$({ base: s3c_hwmon_probe_~hwmon~1!base, offset: 160 + s3c_hwmon_probe_~hwmon~1!offset }, 8); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res!base=-36893488147419101220, __kmalloc_#res!offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res!base=-36893488147419101220, kmalloc_#res!offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0!base=-36893488147419101220, kmalloc_~tmp___2~0!offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res!base=-36893488147419101220, kzalloc_#res!offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0!base=-36893488147419101220, kzalloc_~tmp~0!offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res!base=-36893488147419101220, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc25!base=-36893488147419101220, ldv_malloc_#t~malloc25!offset=0, ldv_malloc_~res~0!base=-36893488147419101220, ldv_malloc_~res~0!offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, platform_set_drvdata_#in~data!base=-36893488147419101220, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=50, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=-36893488147419101220, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=50, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_add_raw_#in~dev!base=50, s3c_hwmon_add_raw_#in~dev!offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev!base=50, s3c_hwmon_add_raw_~dev!offset=12, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_#t~mem91!base=0, s3c_hwmon_probe_#t~mem91!offset=182862574002682785169408, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~hwmon~1!base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1!offset=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp~4!base=-36893488147419101220, s3c_hwmon_probe_~tmp~4!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1080] CALL call s3c_hwmon_probe_#t~ret92 := IS_ERR(s3c_hwmon_probe_#t~mem91); VAL [#in~ptr!base=0, #in~ptr!offset=182862574002682785169408, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1283-L1291] ~ptr := #in~ptr; [L1285] havoc ~tmp~9; VAL [#in~ptr!base=0, #in~ptr!offset=182862574002682785169408, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr!base=0, ~ptr!offset=182862574002682785169408] [L1288] CALL call #t~ret124 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=182862574002682785169408, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1327-L1334] ~ptr := #in~ptr; [L1332] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L1288] RET call #t~ret124 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=182862574002682785169408, #NULL!base=0, #NULL!offset=0, #t~ret124=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr!base=0, ~ptr!offset=182862574002682785169408] [L1288] assume -9223372036854775808 <= #t~ret124 && #t~ret124 <= 9223372036854775807; [L1288] ~tmp~9 := #t~ret124; [L1288] havoc #t~ret124; [L1289] #res := ~tmp~9; [L1080] RET call s3c_hwmon_probe_#t~ret92 := IS_ERR(s3c_hwmon_probe_#t~mem91); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res!base=-36893488147419101220, __kmalloc_#res!offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res!base=-36893488147419101220, kmalloc_#res!offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0!base=-36893488147419101220, kmalloc_~tmp___2~0!offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res!base=-36893488147419101220, kzalloc_#res!offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0!base=-36893488147419101220, kzalloc_~tmp~0!offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res!base=-36893488147419101220, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc25!base=-36893488147419101220, ldv_malloc_#t~malloc25!offset=0, ldv_malloc_~res~0!base=-36893488147419101220, ldv_malloc_~res~0!offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, platform_set_drvdata_#in~data!base=-36893488147419101220, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=50, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=-36893488147419101220, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=50, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_add_raw_#in~dev!base=50, s3c_hwmon_add_raw_#in~dev!offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev!base=50, s3c_hwmon_add_raw_~dev!offset=12, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_#t~mem91!base=0, s3c_hwmon_probe_#t~mem91!offset=182862574002682785169408, s3c_hwmon_probe_#t~ret92=0, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~hwmon~1!base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1!offset=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp~4!base=-36893488147419101220, s3c_hwmon_probe_~tmp~4!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1080] assume -9223372036854775808 <= s3c_hwmon_probe_#t~ret92 && s3c_hwmon_probe_#t~ret92 <= 9223372036854775807; [L1080] s3c_hwmon_probe_~tmp___3~0 := s3c_hwmon_probe_#t~ret92; [L1080] havoc s3c_hwmon_probe_#t~mem91; [L1080] havoc s3c_hwmon_probe_#t~ret92; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res!base=-36893488147419101220, __kmalloc_#res!offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res!base=-36893488147419101220, kmalloc_#res!offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0!base=-36893488147419101220, kmalloc_~tmp___2~0!offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res!base=-36893488147419101220, kzalloc_#res!offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0!base=-36893488147419101220, kzalloc_~tmp~0!offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res!base=-36893488147419101220, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc25!base=-36893488147419101220, ldv_malloc_#t~malloc25!offset=0, ldv_malloc_~res~0!base=-36893488147419101220, ldv_malloc_~res~0!offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, platform_set_drvdata_#in~data!base=-36893488147419101220, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=50, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=-36893488147419101220, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=50, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_add_raw_#in~dev!base=50, s3c_hwmon_add_raw_#in~dev!offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev!base=50, s3c_hwmon_add_raw_~dev!offset=12, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~hwmon~1!base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1!offset=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp___3~0=0, s3c_hwmon_probe_~tmp~4!base=-36893488147419101220, s3c_hwmon_probe_~tmp~4!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1081] COND FALSE !(0 != s3c_hwmon_probe_~tmp___3~0) [L1089] s3c_hwmon_probe_~i~0 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res!base=-36893488147419101220, __kmalloc_#res!offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res!base=-36893488147419101220, kmalloc_#res!offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0!base=-36893488147419101220, kmalloc_~tmp___2~0!offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res!base=-36893488147419101220, kzalloc_#res!offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0!base=-36893488147419101220, kzalloc_~tmp~0!offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res!base=-36893488147419101220, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc25!base=-36893488147419101220, ldv_malloc_#t~malloc25!offset=0, ldv_malloc_~res~0!base=-36893488147419101220, ldv_malloc_~res~0!offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, platform_set_drvdata_#in~data!base=-36893488147419101220, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=50, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=-36893488147419101220, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=50, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_add_raw_#in~dev!base=50, s3c_hwmon_add_raw_#in~dev!offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev!base=50, s3c_hwmon_add_raw_~dev!offset=12, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~hwmon~1!base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1!offset=0, s3c_hwmon_probe_~i~0=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp___3~0=0, s3c_hwmon_probe_~tmp~4!base=-36893488147419101220, s3c_hwmon_probe_~tmp~4!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1134] COND TRUE s3c_hwmon_probe_~i~0 % 4294967296 <= 7 [L1092] FCALL call s3c_hwmon_probe_#t~mem97 := read~$Pointer$({ base: s3c_hwmon_probe_~pdata~2!base, offset: s3c_hwmon_probe_~pdata~2!offset + 8 * s3c_hwmon_probe_~i~0 }, 8); [L1092] s3c_hwmon_probe_~cfg~2 := s3c_hwmon_probe_#t~mem97; [L1092] havoc s3c_hwmon_probe_#t~mem97; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res!base=-36893488147419101220, __kmalloc_#res!offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res!base=-36893488147419101220, kmalloc_#res!offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0!base=-36893488147419101220, kmalloc_~tmp___2~0!offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res!base=-36893488147419101220, kzalloc_#res!offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0!base=-36893488147419101220, kzalloc_~tmp~0!offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res!base=-36893488147419101220, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc25!base=-36893488147419101220, ldv_malloc_#t~malloc25!offset=0, ldv_malloc_~res~0!base=-36893488147419101220, ldv_malloc_~res~0!offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, platform_set_drvdata_#in~data!base=-36893488147419101220, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=50, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=-36893488147419101220, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=50, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_add_raw_#in~dev!base=50, s3c_hwmon_add_raw_#in~dev!offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev!base=50, s3c_hwmon_add_raw_~dev!offset=12, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~cfg~2!base=-36893488147419091769, s3c_hwmon_probe_~cfg~2!offset=-11462, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~hwmon~1!base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1!offset=0, s3c_hwmon_probe_~i~0=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp___3~0=0, s3c_hwmon_probe_~tmp~4!base=-36893488147419101220, s3c_hwmon_probe_~tmp~4!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1093] COND FALSE !(0 == (s3c_hwmon_probe_~cfg~2!base + s3c_hwmon_probe_~cfg~2!offset) % 18446744073709551616) [L1098] FCALL call s3c_hwmon_probe_#t~mem98 := read~int({ base: s3c_hwmon_probe_~cfg~2!base, offset: 8 + s3c_hwmon_probe_~cfg~2!offset }, 4); [L1098] COND FALSE !(s3c_hwmon_probe_#t~mem98 % 4294967296 > 65535) [L1098] havoc s3c_hwmon_probe_#t~mem98; [L1104] FCALL call s3c_hwmon_probe_#t~mem101 := read~int({ base: s3c_hwmon_probe_~cfg~2!base, offset: 12 + s3c_hwmon_probe_~cfg~2!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res!base=-36893488147419101220, __kmalloc_#res!offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res!base=-36893488147419101220, kmalloc_#res!offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0!base=-36893488147419101220, kmalloc_~tmp___2~0!offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res!base=-36893488147419101220, kzalloc_#res!offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0!base=-36893488147419101220, kzalloc_~tmp~0!offset=0, ldv_malloc_#in~size=800, ldv_malloc_#res!base=-36893488147419101220, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc25!base=-36893488147419101220, ldv_malloc_#t~malloc25!offset=0, ldv_malloc_~res~0!base=-36893488147419101220, ldv_malloc_~res~0!offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, platform_set_drvdata_#in~data!base=-36893488147419101220, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=50, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=-36893488147419101220, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=50, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_add_raw_#in~dev!base=50, s3c_hwmon_add_raw_#in~dev!offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev!base=50, s3c_hwmon_add_raw_~dev!offset=12, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_#t~mem101=21461951578113, s3c_hwmon_probe_#t~nondet99=65, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~cfg~2!base=-36893488147419091769, s3c_hwmon_probe_~cfg~2!offset=-11462, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~hwmon~1!base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1!offset=0, s3c_hwmon_probe_~i~0=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp___3~0=0, s3c_hwmon_probe_~tmp~4!base=-36893488147419101220, s3c_hwmon_probe_~tmp~4!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1104] COND FALSE !(0 == s3c_hwmon_probe_#t~mem101 % 4294967296) [L1104] havoc s3c_hwmon_probe_#t~mem101; [L1110] FCALL call s3c_hwmon_probe_#t~mem104 := read~$Pointer$({ base: s3c_hwmon_probe_~pdata~2!base, offset: s3c_hwmon_probe_~pdata~2!offset + 8 * s3c_hwmon_probe_~i~0 }, 8); [L1110-L1111] s3c_hwmon_create_attr_#in~dev, s3c_hwmon_create_attr_#in~cfg, s3c_hwmon_create_attr_#in~attrs, s3c_hwmon_create_attr_#in~channel := { base: s3c_hwmon_probe_~dev!base, offset: 12 + s3c_hwmon_probe_~dev!offset }, s3c_hwmon_probe_#t~mem104, { base: s3c_hwmon_probe_~hwmon~1!base, offset: 168 + s3c_hwmon_probe_~hwmon~1!offset + 116 * (s3c_hwmon_probe_~i~0 % 4294967296) }, s3c_hwmon_probe_~i~0; [L1110-L1111] havoc s3c_hwmon_create_attr_#res; [L1110-L1111] havoc s3c_hwmon_create_attr_#t~nondet64, s3c_hwmon_create_attr_#t~ret66, s3c_hwmon_create_attr_#t~nondet67, s3c_hwmon_create_attr_#t~mem69, s3c_hwmon_create_attr_#t~nondet70, s3c_hwmon_create_attr_#t~ret72, s3c_hwmon_create_attr_#t~nondet73, s3c_hwmon_create_attr_~dev, s3c_hwmon_create_attr_~cfg, s3c_hwmon_create_attr_~attrs, s3c_hwmon_create_attr_~channel, s3c_hwmon_create_attr_~attr~0, s3c_hwmon_create_attr_~ret~2; [L980-L1019] s3c_hwmon_create_attr_~dev := s3c_hwmon_create_attr_#in~dev; [L980-L1019] s3c_hwmon_create_attr_~cfg := s3c_hwmon_create_attr_#in~cfg; [L980-L1019] s3c_hwmon_create_attr_~attrs := s3c_hwmon_create_attr_#in~attrs; [L980-L1019] s3c_hwmon_create_attr_~channel := s3c_hwmon_create_attr_#in~channel; [L983] havoc s3c_hwmon_create_attr_~attr~0; [L984] havoc s3c_hwmon_create_attr_~ret~2; [L987] havoc s3c_hwmon_create_attr_#t~nondet64; [L988] s3c_hwmon_create_attr_~attr~0 := { base: s3c_hwmon_create_attr_~attrs!base, offset: s3c_hwmon_create_attr_~attrs!offset }; [L989] FCALL call write~int(s3c_hwmon_create_attr_~channel, { base: s3c_hwmon_create_attr_~attr~0!base, offset: 42 + s3c_hwmon_create_attr_~attr~0!offset }, 4); [L990] FCALL call write~$Pointer$({ base: s3c_hwmon_create_attr_~attrs!base, offset: 92 + s3c_hwmon_create_attr_~attrs!offset }, { base: s3c_hwmon_create_attr_~attr~0!base, offset: s3c_hwmon_create_attr_~attr~0!offset }, 8); [L991] FCALL call write~int(292, { base: s3c_hwmon_create_attr_~attr~0!base, offset: 8 + s3c_hwmon_create_attr_~attr~0!offset }, 2); [L992] FCALL call write~$Pointer$(#funAddr~s3c_hwmon_ch_show, { base: s3c_hwmon_create_attr_~attr~0!base, offset: 26 + s3c_hwmon_create_attr_~attr~0!offset }, 8); [L993] ldv_device_create_file_5_#in~ldv_func_arg1, ldv_device_create_file_5_#in~ldv_func_arg2 := s3c_hwmon_create_attr_~dev, { base: s3c_hwmon_create_attr_~attr~0!base, offset: s3c_hwmon_create_attr_~attr~0!offset }; [L993] havoc ldv_device_create_file_5_#res; [L993] havoc ldv_device_create_file_5_#t~ret125, ldv_device_create_file_5_~ldv_func_arg1, ldv_device_create_file_5_~ldv_func_arg2, ldv_device_create_file_5_~tmp~10; [L1292-L1300] ldv_device_create_file_5_~ldv_func_arg1 := ldv_device_create_file_5_#in~ldv_func_arg1; [L1292-L1300] ldv_device_create_file_5_~ldv_func_arg2 := ldv_device_create_file_5_#in~ldv_func_arg2; [L1294] havoc ldv_device_create_file_5_~tmp~10; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, __kmalloc_#in~size=800, __kmalloc_#in~t=52, __kmalloc_#res!base=-36893488147419101220, __kmalloc_#res!offset=0, __kmalloc_~size=800, __kmalloc_~t=52, kmalloc_#in~flags=52, kmalloc_#in~size=800, kmalloc_#res!base=-36893488147419101220, kmalloc_#res!offset=0, kmalloc_~flags=52, kmalloc_~size=800, kmalloc_~tmp___2~0!base=-36893488147419101220, kmalloc_~tmp___2~0!offset=0, kzalloc_#in~flags=208, kzalloc_#in~size=800, kzalloc_#res!base=-36893488147419101220, kzalloc_#res!offset=0, kzalloc_~flags=208, kzalloc_~size=800, kzalloc_~tmp~0!base=-36893488147419101220, kzalloc_~tmp~0!offset=0, ldv_device_create_file_5_#in~ldv_func_arg1!base=50, ldv_device_create_file_5_#in~ldv_func_arg1!offset=12, ldv_device_create_file_5_#in~ldv_func_arg2!base=-36893488147419101220, ldv_device_create_file_5_#in~ldv_func_arg2!offset=168, ldv_device_create_file_5_~ldv_func_arg1!base=50, ldv_device_create_file_5_~ldv_func_arg1!offset=12, ldv_device_create_file_5_~ldv_func_arg2!base=-36893488147419101220, ldv_device_create_file_5_~ldv_func_arg2!offset=168, ldv_malloc_#in~size=800, ldv_malloc_#res!base=-36893488147419101220, ldv_malloc_#res!offset=0, ldv_malloc_#t~malloc25!base=-36893488147419101220, ldv_malloc_#t~malloc25!offset=0, ldv_malloc_~res~0!base=-36893488147419101220, ldv_malloc_~res~0!offset=0, ldv_malloc_~size=800, main_#t~switch119=true, main_~ldv_s_s3c_hwmon_driver_platform_driver~0=0, main_~tmp___0~2=0, main_~tmp___1~1=1, main_~tmp~7=0, main_~var_group1~0!base=50, main_~var_group1~0!offset=0, platform_set_drvdata_#in~data!base=-36893488147419101220, platform_set_drvdata_#in~data!offset=0, platform_set_drvdata_#in~pdev!base=50, platform_set_drvdata_#in~pdev!offset=0, platform_set_drvdata_~data!base=-36893488147419101220, platform_set_drvdata_~data!offset=0, platform_set_drvdata_~pdev!base=50, platform_set_drvdata_~pdev!offset=0, s3c_hwmon_add_raw_#in~dev!base=50, s3c_hwmon_add_raw_#in~dev!offset=12, s3c_hwmon_add_raw_#res=0, s3c_hwmon_add_raw_~dev!base=50, s3c_hwmon_add_raw_~dev!offset=12, s3c_hwmon_create_attr_#in~attrs!base=-36893488147419101220, s3c_hwmon_create_attr_#in~attrs!offset=168, s3c_hwmon_create_attr_#in~cfg!base=-36893488147419091769, s3c_hwmon_create_attr_#in~cfg!offset=-11462, s3c_hwmon_create_attr_#in~channel=0, s3c_hwmon_create_attr_#in~dev!base=50, s3c_hwmon_create_attr_#in~dev!offset=12, s3c_hwmon_create_attr_~attrs!base=-36893488147419101220, s3c_hwmon_create_attr_~attrs!offset=168, s3c_hwmon_create_attr_~attr~0!base=-36893488147419101220, s3c_hwmon_create_attr_~attr~0!offset=168, s3c_hwmon_create_attr_~cfg!base=-36893488147419091769, s3c_hwmon_create_attr_~cfg!offset=-11462, s3c_hwmon_create_attr_~channel=0, s3c_hwmon_create_attr_~dev!base=50, s3c_hwmon_create_attr_~dev!offset=12, s3c_hwmon_init_#res=0, s3c_hwmon_init_~tmp~6=0, s3c_hwmon_probe_#in~dev!base=50, s3c_hwmon_probe_#in~dev!offset=0, s3c_hwmon_probe_#t~mem104!base=-36893488147419091769, s3c_hwmon_probe_#t~mem104!offset=-11462, s3c_hwmon_probe_#t~nondet99=65, s3c_hwmon_probe_~#__key~0!base=47, s3c_hwmon_probe_~#__key~0!offset=0, s3c_hwmon_probe_~cfg~2!base=-36893488147419091769, s3c_hwmon_probe_~cfg~2!offset=-11462, s3c_hwmon_probe_~dev!base=50, s3c_hwmon_probe_~dev!offset=0, s3c_hwmon_probe_~hwmon~1!base=-36893488147419101220, s3c_hwmon_probe_~hwmon~1!offset=0, s3c_hwmon_probe_~i~0=0, s3c_hwmon_probe_~pdata~2!base=-18446744073709551616, s3c_hwmon_probe_~pdata~2!offset=-18446744073709551615, s3c_hwmon_probe_~ret~3=0, s3c_hwmon_probe_~tmp___1~0=0, s3c_hwmon_probe_~tmp___3~0=0, s3c_hwmon_probe_~tmp~4!base=-36893488147419101220, s3c_hwmon_probe_~tmp~4!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1297] CALL call ldv_device_create_file_5_#t~ret125 := ldv_device_create_file_dev_attr_of_sensor_device_attribute(ldv_device_create_file_5_~ldv_func_arg2); VAL [#in~attr!base=-36893488147419101220, #in~attr!offset=168, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, old(~ldv_call_dev_attr_of_sensor_device_attribute~0)=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1382-L1400] ~attr := #in~attr; VAL [#in~attr!base=-36893488147419101220, #in~attr!offset=168, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, old(~ldv_call_dev_attr_of_sensor_device_attribute~0)=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~attr!base=-36893488147419101220, ~attr!offset=168, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1387] COND TRUE 0 == ~ldv_call_dev_attr_of_sensor_device_attribute~0 [L1388] ~ldv_count_2~0 := 1 + ~ldv_count_2~0; [L1389] ~ldv_call_dev_attr_of_sensor_device_attribute~0 := 1; VAL [#in~attr!base=-36893488147419101220, #in~attr!offset=168, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, old(~ldv_call_dev_attr_of_sensor_device_attribute~0)=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~attr!base=-36893488147419101220, ~attr!offset=168, ~ldv_call_dev_attr_of_sensor_device_attribute~0=1, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1] [L1390] COND FALSE !(~ldv_count_1~0 >= ~ldv_count_2~0) VAL [#in~attr!base=-36893488147419101220, #in~attr!offset=168, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, old(~ldv_call_dev_attr_of_sensor_device_attribute~0)=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~attr!base=-36893488147419101220, ~attr!offset=168, ~ldv_call_dev_attr_of_sensor_device_attribute~0=1, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1] [L1316] assert false; VAL [#in~attr!base=-36893488147419101220, #in~attr!offset=168, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, old(~ldv_call_dev_attr_of_sensor_device_attribute~0)=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~attr!base=-36893488147419101220, ~attr!offset=168, ~ldv_call_dev_attr_of_sensor_device_attribute~0=1, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1] [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L905] FCALL call #t~string44 := #Ultimate.alloc(4); [L905] FCALL call write~init~int(60, { base: #t~string44!base, offset: #t~string44!offset }, 1); [L905] FCALL call write~init~int(55, { base: #t~string44!base, offset: 1 + #t~string44!offset }, 1); [L905] FCALL call write~init~int(62, { base: #t~string44!base, offset: 2 + #t~string44!offset }, 1); [L905] FCALL call write~init~int(0, { base: #t~string44!base, offset: 3 + #t~string44!offset }, 1); [L905] FCALL call #t~string45 := #Ultimate.alloc(20); [L958] FCALL call #t~string57 := #Ultimate.alloc(4); [L958] FCALL call write~init~int(37, { base: #t~string57!base, offset: #t~string57!offset }, 1); [L958] FCALL call write~init~int(100, { base: #t~string57!base, offset: 1 + #t~string57!offset }, 1); [L958] FCALL call write~init~int(10, { base: #t~string57!base, offset: 2 + #t~string57!offset }, 1); [L958] FCALL call write~init~int(0, { base: #t~string57!base, offset: 3 + #t~string57!offset }, 1); [L976] FCALL call #t~string62 := #Ultimate.alloc(4); [L976] FCALL call write~init~int(37, { base: #t~string62!base, offset: #t~string62!offset }, 1); [L976] FCALL call write~init~int(115, { base: #t~string62!base, offset: 1 + #t~string62!offset }, 1); [L976] FCALL call write~init~int(10, { base: #t~string62!base, offset: 2 + #t~string62!offset }, 1); [L976] FCALL call write~init~int(0, { base: #t~string62!base, offset: 3 + #t~string62!offset }, 1); [L987] FCALL call #t~string65 := #Ultimate.alloc(11); [L995] FCALL call #t~string68 := #Ultimate.alloc(34); [L1001] FCALL call #t~string71 := #Ultimate.alloc(11); [L1010] FCALL call #t~string74 := #Ultimate.alloc(34); [L1048] FCALL call #t~string77 := #Ultimate.alloc(27); [L1056] FCALL call #t~string80 := #Ultimate.alloc(11); [L1062] FCALL call #t~string81 := #Ultimate.alloc(13); [L1066] FCALL call #t~string86 := #Ultimate.alloc(21); [L1082] FCALL call #t~string94 := #Ultimate.alloc(30); [L1099] FCALL call #t~string100 := #Ultimate.alloc(33); [L1105] FCALL call #t~string103 := #Ultimate.alloc(25); [L1113] FCALL call #t~string107 := #Ultimate.alloc(27); [L1178] FCALL call #t~string113 := #Ultimate.alloc(10); [L1205] ~LDV_IN_INTERRUPT~0 := 0; [L1370] ~ldv_count_1~0 := 0; [L1371] ~ldv_count_2~0 := 0; [L1381] ~ldv_call_dev_attr_of_sensor_device_attribute~0 := 0; [L1178-L1180] FCALL call ~#s3c_hwmon_driver~0 := #Ultimate.alloc(153); [L1178-L1180] FCALL call write~init~$Pointer$(#funAddr~s3c_hwmon_probe, { base: ~#s3c_hwmon_driver~0!base, offset: ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$(#funAddr~s3c_hwmon_remove, { base: ~#s3c_hwmon_driver~0!base, offset: 8 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 16 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 24 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 32 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$(#t~string113, { base: ~#s3c_hwmon_driver~0!base, offset: 40 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 48 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#s3c_hwmon_driver~0!base, offset: 56 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 64 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~int(0, { base: ~#s3c_hwmon_driver~0!base, offset: 72 + ~#s3c_hwmon_driver~0!offset }, 1); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 73 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 81 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 89 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 97 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 105 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 113 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 121 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 129 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 137 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 145 + ~#s3c_hwmon_driver~0!offset }, 8); [L1208] havoc ~var_group1~0; [L1209] havoc ~res_s3c_hwmon_probe_10~0; [L1210] havoc ~ldv_s_s3c_hwmon_driver_platform_driver~0; [L1211] havoc ~tmp~7; [L1212] havoc ~tmp___0~2; [L1213] havoc ~tmp___1~1; [L1216] ~ldv_s_s3c_hwmon_driver_platform_driver~0 := 0; [L1217] ~LDV_IN_INTERRUPT~0 := 1; [L1219] FCALL call ldv_handler_precall(); [L1183] havoc ~tmp~6; [L1186] FCALL call #t~ret114 := platform_driver_register(~#s3c_hwmon_driver~0); [L1186] assume -2147483648 <= #t~ret114 && #t~ret114 <= 2147483647; [L1186] ~tmp~6 := #t~ret114; [L1186] havoc #t~ret114; [L1187] #res := ~tmp~6; [L1220] assume -2147483648 <= #t~ret117 && #t~ret117 <= 2147483647; [L1220] ~tmp~7 := #t~ret117; [L1220] havoc #t~ret117; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1221] COND FALSE !(0 != ~tmp~7) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1259] assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647; [L1259] ~tmp___1~1 := #t~nondet122; [L1259] havoc #t~nondet122; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1260] COND TRUE 0 != ~tmp___1~1 || 0 != ~ldv_s_s3c_hwmon_driver_platform_driver~0 [L1228] assume -2147483648 <= #t~nondet118 && #t~nondet118 <= 2147483647; [L1228] ~tmp___0~2 := #t~nondet118; [L1228] havoc #t~nondet118; [L1230] #t~switch119 := 0 == ~tmp___0~2; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1229-L1256] COND TRUE #t~switch119 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1231] COND TRUE 0 == ~ldv_s_s3c_hwmon_driver_platform_driver~0 [L1030-L1151] ~dev := #in~dev; [L1032] havoc ~pdata~2; [L1033] havoc ~hwmon~1; [L1034] havoc ~ret~3; [L1035] havoc ~i~0; [L1036] havoc ~tmp~4; [L1037] FCALL call ~#__key~0 := #Ultimate.alloc(8); [L1038] havoc ~tmp___0~1; [L1039] havoc ~tmp___1~0; [L1040] havoc ~tmp___2~1; [L1041] havoc ~tmp___3~0; [L1042] havoc ~cfg~2; [L1045] FCALL call #t~mem75 := read~$Pointer$({ base: ~dev!base, offset: 277 + ~dev!offset }, 8); [L1045] ~pdata~2 := #t~mem75; [L1045] havoc #t~mem75; [L1046] ~ret~3 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1047] COND FALSE !(0 == (~pdata~2!base + ~pdata~2!offset) % 18446744073709551616) [L854-L862] ~size := #in~size; [L854-L862] ~flags := #in~flags; [L856] havoc ~tmp~0; [L845-L853] ~size := #in~size; [L845-L853] ~flags := #in~flags; [L847] havoc ~tmp___2~0; [L841-L844] ~size := #in~size; [L841-L844] ~t := #in~t; [L830-L840] ~size := #in~size; [L832] assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L832-L839] COND TRUE 0 != #t~nondet24 [L832] havoc #t~nondet24; [L833] FCALL call #t~malloc25 := #Ultimate.alloc(~size); [L833] ~res~0 := #t~malloc25; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L834] CALL call #t~ret26 := ldv_is_err(~res~0); VAL [#in~ptr!base=-36893488147419101220, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1327-L1334] ~ptr := #in~ptr; [L1332] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L834] RET call #t~ret26 := ldv_is_err(~res~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L834] assume -9223372036854775808 <= #t~ret26 && #t~ret26 <= 9223372036854775807; [L834] assume 0 != (if 0 == #t~ret26 then 1 else 0); [L834] havoc #t~ret26; [L836] #res := ~res~0; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L843] #res := #t~ret27; [L843] havoc #t~ret27; [L850] ~tmp___2~0 := #t~ret28; [L850] havoc #t~ret28; [L851] #res := ~tmp___2~0; [L859] ~tmp~0 := #t~ret29; [L859] havoc #t~ret29; [L860] #res := ~tmp~0; [L1053] ~tmp~4 := #t~ret78; [L1053] havoc #t~ret78; [L1054] ~hwmon~1 := ~tmp~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1055] COND FALSE !(0 == (~hwmon~1!base + ~hwmon~1!offset) % 18446744073709551616) [L876-L884] ~pdev := #in~pdev; [L876-L884] ~data := #in~data; [L881] FCALL call dev_set_drvdata({ base: ~pdev!base, offset: 12 + ~pdev!offset }, ~data); [L1062] FCALL call __mutex_init({ base: ~hwmon~1!base, offset: ~hwmon~1!offset }, #t~string81, ~#__key~0); [L1063] FCALL call #t~ret82 := s3c_adc_register(~dev, { base: 0, offset: 0 }, { base: 0, offset: 0 }, 0); [L1063] FCALL call write~$Pointer$(#t~ret82, { base: ~hwmon~1!base, offset: 152 + ~hwmon~1!offset }, 8); [L1063] havoc #t~ret82; [L1064] FCALL call #t~mem83 := read~$Pointer$({ base: ~hwmon~1!base, offset: 152 + ~hwmon~1!offset }, 8); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1064] CALL call #t~ret84 := IS_ERR(#t~mem83); VAL [#in~ptr!base=0, #in~ptr!offset=18446744073709551616, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1283-L1291] ~ptr := #in~ptr; [L1285] havoc ~tmp~9; VAL [#in~ptr!base=0, #in~ptr!offset=18446744073709551616, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr!base=0, ~ptr!offset=18446744073709551616] [L1288] CALL call #t~ret124 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=18446744073709551616, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1327-L1334] ~ptr := #in~ptr; [L1332] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L1288] RET call #t~ret124 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=18446744073709551616, #NULL!base=0, #NULL!offset=0, #t~ret124=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr!base=0, ~ptr!offset=18446744073709551616] [L1288] assume -9223372036854775808 <= #t~ret124 && #t~ret124 <= 9223372036854775807; [L1288] ~tmp~9 := #t~ret124; [L1288] havoc #t~ret124; [L1289] #res := ~tmp~9; [L1064] RET call #t~ret84 := IS_ERR(#t~mem83); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1064] assume -9223372036854775808 <= #t~ret84 && #t~ret84 <= 9223372036854775807; [L1064] ~tmp___1~0 := #t~ret84; [L1064] havoc #t~mem83; [L1064] havoc #t~ret84; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1065] COND FALSE !(0 != ~tmp___1~0) [L911-L918] ~dev := #in~dev; [L916] #res := 0; [L1073] assume -2147483648 <= #t~ret89 && #t~ret89 <= 2147483647; [L1073] ~ret~3 := #t~ret89; [L1073] havoc #t~ret89; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1074] COND FALSE !(0 != ~ret~3) [L1079] FCALL call #t~ret90 := hwmon_device_register({ base: ~dev!base, offset: 12 + ~dev!offset }); [L1079] FCALL call write~$Pointer$(#t~ret90, { base: ~hwmon~1!base, offset: 160 + ~hwmon~1!offset }, 8); [L1079] havoc #t~ret90; [L1080] FCALL call #t~mem91 := read~$Pointer$({ base: ~hwmon~1!base, offset: 160 + ~hwmon~1!offset }, 8); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1080] CALL call #t~ret92 := IS_ERR(#t~mem91); VAL [#in~ptr!base=0, #in~ptr!offset=182862574002682785169408, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1283-L1291] ~ptr := #in~ptr; [L1285] havoc ~tmp~9; VAL [#in~ptr!base=0, #in~ptr!offset=182862574002682785169408, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr!base=0, ~ptr!offset=182862574002682785169408] [L1288] CALL call #t~ret124 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=182862574002682785169408, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1327-L1334] ~ptr := #in~ptr; [L1332] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L1288] RET call #t~ret124 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=182862574002682785169408, #NULL!base=0, #NULL!offset=0, #t~ret124=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr!base=0, ~ptr!offset=182862574002682785169408] [L1288] assume -9223372036854775808 <= #t~ret124 && #t~ret124 <= 9223372036854775807; [L1288] ~tmp~9 := #t~ret124; [L1288] havoc #t~ret124; [L1289] #res := ~tmp~9; [L1080] RET call #t~ret92 := IS_ERR(#t~mem91); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1080] assume -9223372036854775808 <= #t~ret92 && #t~ret92 <= 9223372036854775807; [L1080] ~tmp___3~0 := #t~ret92; [L1080] havoc #t~mem91; [L1080] havoc #t~ret92; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1081] COND FALSE !(0 != ~tmp___3~0) [L1089] ~i~0 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1134] COND TRUE ~i~0 % 4294967296 <= 7 [L1092] FCALL call #t~mem97 := read~$Pointer$({ base: ~pdata~2!base, offset: ~pdata~2!offset + 8 * ~i~0 }, 8); [L1092] ~cfg~2 := #t~mem97; [L1092] havoc #t~mem97; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1093] COND FALSE !(0 == (~cfg~2!base + ~cfg~2!offset) % 18446744073709551616) [L1098] FCALL call #t~mem98 := read~int({ base: ~cfg~2!base, offset: 8 + ~cfg~2!offset }, 4); [L1098] COND FALSE !(#t~mem98 % 4294967296 > 65535) [L1098] havoc #t~mem98; [L1104] FCALL call #t~mem101 := read~int({ base: ~cfg~2!base, offset: 12 + ~cfg~2!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1104] COND FALSE !(0 == #t~mem101 % 4294967296) [L1104] havoc #t~mem101; [L1110] FCALL call #t~mem104 := read~$Pointer$({ base: ~pdata~2!base, offset: ~pdata~2!offset + 8 * ~i~0 }, 8); [L980-L1019] ~dev := #in~dev; [L980-L1019] ~cfg := #in~cfg; [L980-L1019] ~attrs := #in~attrs; [L980-L1019] ~channel := #in~channel; [L983] havoc ~attr~0; [L984] havoc ~ret~2; [L987] havoc #t~nondet64; [L988] ~attr~0 := { base: ~attrs!base, offset: ~attrs!offset }; [L989] FCALL call write~int(~channel, { base: ~attr~0!base, offset: 42 + ~attr~0!offset }, 4); [L990] FCALL call write~$Pointer$({ base: ~attrs!base, offset: 92 + ~attrs!offset }, { base: ~attr~0!base, offset: ~attr~0!offset }, 8); [L991] FCALL call write~int(292, { base: ~attr~0!base, offset: 8 + ~attr~0!offset }, 2); [L992] FCALL call write~$Pointer$(#funAddr~s3c_hwmon_ch_show, { base: ~attr~0!base, offset: 26 + ~attr~0!offset }, 8); [L1292-L1300] ~ldv_func_arg1 := #in~ldv_func_arg1; [L1292-L1300] ~ldv_func_arg2 := #in~ldv_func_arg2; [L1294] havoc ~tmp~10; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1297] CALL call #t~ret125 := ldv_device_create_file_dev_attr_of_sensor_device_attribute(~ldv_func_arg2); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, old(~ldv_call_dev_attr_of_sensor_device_attribute~0)=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1382-L1400] ~attr := #in~attr; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, old(~ldv_call_dev_attr_of_sensor_device_attribute~0)=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1387] COND TRUE 0 == ~ldv_call_dev_attr_of_sensor_device_attribute~0 [L1388] ~ldv_count_2~0 := 1 + ~ldv_count_2~0; [L1389] ~ldv_call_dev_attr_of_sensor_device_attribute~0 := 1; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, old(~ldv_call_dev_attr_of_sensor_device_attribute~0)=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=1, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1] [L1390] COND FALSE !(~ldv_count_1~0 >= ~ldv_count_2~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, old(~ldv_call_dev_attr_of_sensor_device_attribute~0)=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=1, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1] [L1316] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, old(~ldv_call_dev_attr_of_sensor_device_attribute~0)=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=1, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1] ----- ----- class de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieBacktranslator [?] #NULL := { base: 0, offset: 0 }; [?] #valid[0] := 0; [L905] FCALL call #t~string44 := #Ultimate.alloc(4); [L905] FCALL call write~init~int(60, { base: #t~string44!base, offset: #t~string44!offset }, 1); [L905] FCALL call write~init~int(55, { base: #t~string44!base, offset: 1 + #t~string44!offset }, 1); [L905] FCALL call write~init~int(62, { base: #t~string44!base, offset: 2 + #t~string44!offset }, 1); [L905] FCALL call write~init~int(0, { base: #t~string44!base, offset: 3 + #t~string44!offset }, 1); [L905] FCALL call #t~string45 := #Ultimate.alloc(20); [L958] FCALL call #t~string57 := #Ultimate.alloc(4); [L958] FCALL call write~init~int(37, { base: #t~string57!base, offset: #t~string57!offset }, 1); [L958] FCALL call write~init~int(100, { base: #t~string57!base, offset: 1 + #t~string57!offset }, 1); [L958] FCALL call write~init~int(10, { base: #t~string57!base, offset: 2 + #t~string57!offset }, 1); [L958] FCALL call write~init~int(0, { base: #t~string57!base, offset: 3 + #t~string57!offset }, 1); [L976] FCALL call #t~string62 := #Ultimate.alloc(4); [L976] FCALL call write~init~int(37, { base: #t~string62!base, offset: #t~string62!offset }, 1); [L976] FCALL call write~init~int(115, { base: #t~string62!base, offset: 1 + #t~string62!offset }, 1); [L976] FCALL call write~init~int(10, { base: #t~string62!base, offset: 2 + #t~string62!offset }, 1); [L976] FCALL call write~init~int(0, { base: #t~string62!base, offset: 3 + #t~string62!offset }, 1); [L987] FCALL call #t~string65 := #Ultimate.alloc(11); [L995] FCALL call #t~string68 := #Ultimate.alloc(34); [L1001] FCALL call #t~string71 := #Ultimate.alloc(11); [L1010] FCALL call #t~string74 := #Ultimate.alloc(34); [L1048] FCALL call #t~string77 := #Ultimate.alloc(27); [L1056] FCALL call #t~string80 := #Ultimate.alloc(11); [L1062] FCALL call #t~string81 := #Ultimate.alloc(13); [L1066] FCALL call #t~string86 := #Ultimate.alloc(21); [L1082] FCALL call #t~string94 := #Ultimate.alloc(30); [L1099] FCALL call #t~string100 := #Ultimate.alloc(33); [L1105] FCALL call #t~string103 := #Ultimate.alloc(25); [L1113] FCALL call #t~string107 := #Ultimate.alloc(27); [L1178] FCALL call #t~string113 := #Ultimate.alloc(10); [L1205] ~LDV_IN_INTERRUPT~0 := 0; [L1370] ~ldv_count_1~0 := 0; [L1371] ~ldv_count_2~0 := 0; [L1381] ~ldv_call_dev_attr_of_sensor_device_attribute~0 := 0; [L1178-L1180] FCALL call ~#s3c_hwmon_driver~0 := #Ultimate.alloc(153); [L1178-L1180] FCALL call write~init~$Pointer$(#funAddr~s3c_hwmon_probe, { base: ~#s3c_hwmon_driver~0!base, offset: ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$(#funAddr~s3c_hwmon_remove, { base: ~#s3c_hwmon_driver~0!base, offset: 8 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 16 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 24 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 32 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$(#t~string113, { base: ~#s3c_hwmon_driver~0!base, offset: 40 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 48 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$(~#__this_module~0, { base: ~#s3c_hwmon_driver~0!base, offset: 56 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 64 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~int(0, { base: ~#s3c_hwmon_driver~0!base, offset: 72 + ~#s3c_hwmon_driver~0!offset }, 1); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 73 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 81 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 89 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 97 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 105 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 113 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 121 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 129 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 137 + ~#s3c_hwmon_driver~0!offset }, 8); [L1178-L1180] FCALL call write~init~$Pointer$({ base: 0, offset: 0 }, { base: ~#s3c_hwmon_driver~0!base, offset: 145 + ~#s3c_hwmon_driver~0!offset }, 8); [L1208] havoc ~var_group1~0; [L1209] havoc ~res_s3c_hwmon_probe_10~0; [L1210] havoc ~ldv_s_s3c_hwmon_driver_platform_driver~0; [L1211] havoc ~tmp~7; [L1212] havoc ~tmp___0~2; [L1213] havoc ~tmp___1~1; [L1216] ~ldv_s_s3c_hwmon_driver_platform_driver~0 := 0; [L1217] ~LDV_IN_INTERRUPT~0 := 1; [L1219] FCALL call ldv_handler_precall(); [L1183] havoc ~tmp~6; [L1186] FCALL call #t~ret114 := platform_driver_register(~#s3c_hwmon_driver~0); [L1186] assume -2147483648 <= #t~ret114 && #t~ret114 <= 2147483647; [L1186] ~tmp~6 := #t~ret114; [L1186] havoc #t~ret114; [L1187] #res := ~tmp~6; [L1220] assume -2147483648 <= #t~ret117 && #t~ret117 <= 2147483647; [L1220] ~tmp~7 := #t~ret117; [L1220] havoc #t~ret117; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1221] COND FALSE !(0 != ~tmp~7) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1259] assume -2147483648 <= #t~nondet122 && #t~nondet122 <= 2147483647; [L1259] ~tmp___1~1 := #t~nondet122; [L1259] havoc #t~nondet122; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1260] COND TRUE 0 != ~tmp___1~1 || 0 != ~ldv_s_s3c_hwmon_driver_platform_driver~0 [L1228] assume -2147483648 <= #t~nondet118 && #t~nondet118 <= 2147483647; [L1228] ~tmp___0~2 := #t~nondet118; [L1228] havoc #t~nondet118; [L1230] #t~switch119 := 0 == ~tmp___0~2; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1229-L1256] COND TRUE #t~switch119 VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1231] COND TRUE 0 == ~ldv_s_s3c_hwmon_driver_platform_driver~0 [L1030-L1151] ~dev := #in~dev; [L1032] havoc ~pdata~2; [L1033] havoc ~hwmon~1; [L1034] havoc ~ret~3; [L1035] havoc ~i~0; [L1036] havoc ~tmp~4; [L1037] FCALL call ~#__key~0 := #Ultimate.alloc(8); [L1038] havoc ~tmp___0~1; [L1039] havoc ~tmp___1~0; [L1040] havoc ~tmp___2~1; [L1041] havoc ~tmp___3~0; [L1042] havoc ~cfg~2; [L1045] FCALL call #t~mem75 := read~$Pointer$({ base: ~dev!base, offset: 277 + ~dev!offset }, 8); [L1045] ~pdata~2 := #t~mem75; [L1045] havoc #t~mem75; [L1046] ~ret~3 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1047] COND FALSE !(0 == (~pdata~2!base + ~pdata~2!offset) % 18446744073709551616) [L854-L862] ~size := #in~size; [L854-L862] ~flags := #in~flags; [L856] havoc ~tmp~0; [L845-L853] ~size := #in~size; [L845-L853] ~flags := #in~flags; [L847] havoc ~tmp___2~0; [L841-L844] ~size := #in~size; [L841-L844] ~t := #in~t; [L830-L840] ~size := #in~size; [L832] assume -2147483648 <= #t~nondet24 && #t~nondet24 <= 2147483647; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L832-L839] COND TRUE 0 != #t~nondet24 [L832] havoc #t~nondet24; [L833] FCALL call #t~malloc25 := #Ultimate.alloc(~size); [L833] ~res~0 := #t~malloc25; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L834] CALL call #t~ret26 := ldv_is_err(~res~0); VAL [#in~ptr!base=-36893488147419101220, #in~ptr!offset=0, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1327-L1334] ~ptr := #in~ptr; [L1332] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L834] RET call #t~ret26 := ldv_is_err(~res~0); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L834] assume -9223372036854775808 <= #t~ret26 && #t~ret26 <= 9223372036854775807; [L834] assume 0 != (if 0 == #t~ret26 then 1 else 0); [L834] havoc #t~ret26; [L836] #res := ~res~0; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L843] #res := #t~ret27; [L843] havoc #t~ret27; [L850] ~tmp___2~0 := #t~ret28; [L850] havoc #t~ret28; [L851] #res := ~tmp___2~0; [L859] ~tmp~0 := #t~ret29; [L859] havoc #t~ret29; [L860] #res := ~tmp~0; [L1053] ~tmp~4 := #t~ret78; [L1053] havoc #t~ret78; [L1054] ~hwmon~1 := ~tmp~4; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1055] COND FALSE !(0 == (~hwmon~1!base + ~hwmon~1!offset) % 18446744073709551616) [L876-L884] ~pdev := #in~pdev; [L876-L884] ~data := #in~data; [L881] FCALL call dev_set_drvdata({ base: ~pdev!base, offset: 12 + ~pdev!offset }, ~data); [L1062] FCALL call __mutex_init({ base: ~hwmon~1!base, offset: ~hwmon~1!offset }, #t~string81, ~#__key~0); [L1063] FCALL call #t~ret82 := s3c_adc_register(~dev, { base: 0, offset: 0 }, { base: 0, offset: 0 }, 0); [L1063] FCALL call write~$Pointer$(#t~ret82, { base: ~hwmon~1!base, offset: 152 + ~hwmon~1!offset }, 8); [L1063] havoc #t~ret82; [L1064] FCALL call #t~mem83 := read~$Pointer$({ base: ~hwmon~1!base, offset: 152 + ~hwmon~1!offset }, 8); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1064] CALL call #t~ret84 := IS_ERR(#t~mem83); VAL [#in~ptr!base=0, #in~ptr!offset=18446744073709551616, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1283-L1291] ~ptr := #in~ptr; [L1285] havoc ~tmp~9; VAL [#in~ptr!base=0, #in~ptr!offset=18446744073709551616, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr!base=0, ~ptr!offset=18446744073709551616] [L1288] CALL call #t~ret124 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=18446744073709551616, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1327-L1334] ~ptr := #in~ptr; [L1332] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L1288] RET call #t~ret124 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=18446744073709551616, #NULL!base=0, #NULL!offset=0, #t~ret124=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr!base=0, ~ptr!offset=18446744073709551616] [L1288] assume -9223372036854775808 <= #t~ret124 && #t~ret124 <= 9223372036854775807; [L1288] ~tmp~9 := #t~ret124; [L1288] havoc #t~ret124; [L1289] #res := ~tmp~9; [L1064] RET call #t~ret84 := IS_ERR(#t~mem83); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1064] assume -9223372036854775808 <= #t~ret84 && #t~ret84 <= 9223372036854775807; [L1064] ~tmp___1~0 := #t~ret84; [L1064] havoc #t~mem83; [L1064] havoc #t~ret84; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1065] COND FALSE !(0 != ~tmp___1~0) [L911-L918] ~dev := #in~dev; [L916] #res := 0; [L1073] assume -2147483648 <= #t~ret89 && #t~ret89 <= 2147483647; [L1073] ~ret~3 := #t~ret89; [L1073] havoc #t~ret89; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1074] COND FALSE !(0 != ~ret~3) [L1079] FCALL call #t~ret90 := hwmon_device_register({ base: ~dev!base, offset: 12 + ~dev!offset }); [L1079] FCALL call write~$Pointer$(#t~ret90, { base: ~hwmon~1!base, offset: 160 + ~hwmon~1!offset }, 8); [L1079] havoc #t~ret90; [L1080] FCALL call #t~mem91 := read~$Pointer$({ base: ~hwmon~1!base, offset: 160 + ~hwmon~1!offset }, 8); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1080] CALL call #t~ret92 := IS_ERR(#t~mem91); VAL [#in~ptr!base=0, #in~ptr!offset=182862574002682785169408, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1283-L1291] ~ptr := #in~ptr; [L1285] havoc ~tmp~9; VAL [#in~ptr!base=0, #in~ptr!offset=182862574002682785169408, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr!base=0, ~ptr!offset=182862574002682785169408] [L1288] CALL call #t~ret124 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=182862574002682785169408, #NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1327-L1334] ~ptr := #in~ptr; [L1332] #res := (if (~ptr!base + ~ptr!offset) % 18446744073709551616 > 2012 then 1 else 0); [L1288] RET call #t~ret124 := ldv_is_err(~ptr); VAL [#in~ptr!base=0, #in~ptr!offset=182862574002682785169408, #NULL!base=0, #NULL!offset=0, #t~ret124=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1, ~ptr!base=0, ~ptr!offset=182862574002682785169408] [L1288] assume -9223372036854775808 <= #t~ret124 && #t~ret124 <= 9223372036854775807; [L1288] ~tmp~9 := #t~ret124; [L1288] havoc #t~ret124; [L1289] #res := ~tmp~9; [L1080] RET call #t~ret92 := IS_ERR(#t~mem91); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1080] assume -9223372036854775808 <= #t~ret92 && #t~ret92 <= 9223372036854775807; [L1080] ~tmp___3~0 := #t~ret92; [L1080] havoc #t~mem91; [L1080] havoc #t~ret92; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1081] COND FALSE !(0 != ~tmp___3~0) [L1089] ~i~0 := 0; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1134] COND TRUE ~i~0 % 4294967296 <= 7 [L1092] FCALL call #t~mem97 := read~$Pointer$({ base: ~pdata~2!base, offset: ~pdata~2!offset + 8 * ~i~0 }, 8); [L1092] ~cfg~2 := #t~mem97; [L1092] havoc #t~mem97; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1093] COND FALSE !(0 == (~cfg~2!base + ~cfg~2!offset) % 18446744073709551616) [L1098] FCALL call #t~mem98 := read~int({ base: ~cfg~2!base, offset: 8 + ~cfg~2!offset }, 4); [L1098] COND FALSE !(#t~mem98 % 4294967296 > 65535) [L1098] havoc #t~mem98; [L1104] FCALL call #t~mem101 := read~int({ base: ~cfg~2!base, offset: 12 + ~cfg~2!offset }, 4); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1104] COND FALSE !(0 == #t~mem101 % 4294967296) [L1104] havoc #t~mem101; [L1110] FCALL call #t~mem104 := read~$Pointer$({ base: ~pdata~2!base, offset: ~pdata~2!offset + 8 * ~i~0 }, 8); [L980-L1019] ~dev := #in~dev; [L980-L1019] ~cfg := #in~cfg; [L980-L1019] ~attrs := #in~attrs; [L980-L1019] ~channel := #in~channel; [L983] havoc ~attr~0; [L984] havoc ~ret~2; [L987] havoc #t~nondet64; [L988] ~attr~0 := { base: ~attrs!base, offset: ~attrs!offset }; [L989] FCALL call write~int(~channel, { base: ~attr~0!base, offset: 42 + ~attr~0!offset }, 4); [L990] FCALL call write~$Pointer$({ base: ~attrs!base, offset: 92 + ~attrs!offset }, { base: ~attr~0!base, offset: ~attr~0!offset }, 8); [L991] FCALL call write~int(292, { base: ~attr~0!base, offset: 8 + ~attr~0!offset }, 2); [L992] FCALL call write~$Pointer$(#funAddr~s3c_hwmon_ch_show, { base: ~attr~0!base, offset: 26 + ~attr~0!offset }, 8); [L1292-L1300] ~ldv_func_arg1 := #in~ldv_func_arg1; [L1292-L1300] ~ldv_func_arg2 := #in~ldv_func_arg2; [L1294] havoc ~tmp~10; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1297] CALL call #t~ret125 := ldv_device_create_file_dev_attr_of_sensor_device_attribute(~ldv_func_arg2); VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, old(~ldv_call_dev_attr_of_sensor_device_attribute~0)=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1382-L1400] ~attr := #in~attr; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, old(~ldv_call_dev_attr_of_sensor_device_attribute~0)=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=0, ~ldv_count_1~0=0, ~ldv_count_2~0=0, ~LDV_IN_INTERRUPT~0=1] [L1387] COND TRUE 0 == ~ldv_call_dev_attr_of_sensor_device_attribute~0 [L1388] ~ldv_count_2~0 := 1 + ~ldv_count_2~0; [L1389] ~ldv_call_dev_attr_of_sensor_device_attribute~0 := 1; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, old(~ldv_call_dev_attr_of_sensor_device_attribute~0)=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=1, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1] [L1390] COND FALSE !(~ldv_count_1~0 >= ~ldv_count_2~0) VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, old(~ldv_call_dev_attr_of_sensor_device_attribute~0)=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=1, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1] [L1316] assert false; VAL [#NULL!base=0, #NULL!offset=0, #t~string100!base=38, #t~string100!offset=0, #t~string103!base=39, #t~string103!offset=0, #t~string107!base=44, #t~string107!offset=0, #t~string113!base=41, #t~string113!offset=0, #t~string44!base=35, #t~string44!offset=0, #t~string45!base=31, #t~string45!offset=0, #t~string57!base=29, #t~string57!offset=0, #t~string62!base=28, #t~string62!offset=0, #t~string65!base=23, #t~string65!offset=0, #t~string68!base=22, #t~string68!offset=0, #t~string71!base=19, #t~string71!offset=0, #t~string74!base=18, #t~string74!offset=0, #t~string77!base=15, #t~string77!offset=0, #t~string80!base=14, #t~string80!offset=0, #t~string81!base=7, #t~string81!offset=0, #t~string86!base=5, #t~string86!offset=0, #t~string94!base=6, #t~string94!offset=0, old(~ldv_call_dev_attr_of_sensor_device_attribute~0)=0, old(~ldv_count_2~0)=0, ~#__this_module~0!base=46, ~#__this_module~0!offset=45, ~#s3c_hwmon_driver~0!base=36, ~#s3c_hwmon_driver~0!offset=0, ~ldv_call_dev_attr_of_sensor_device_attribute~0=1, ~ldv_count_1~0=0, ~ldv_count_2~0=1, ~LDV_IN_INTERRUPT~0=1] [L1205] int LDV_IN_INTERRUPT ; [L1370] int ldv_count_1 = 0; [L1371] int ldv_count_2 = 0; [L1381] int ldv_call_dev_attr_of_sensor_device_attribute = 0; [L1178-L1180] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1208] struct platform_device *var_group1 ; [L1209] int res_s3c_hwmon_probe_10 ; [L1210] int ldv_s_s3c_hwmon_driver_platform_driver ; [L1211] int tmp ; [L1212] int tmp___0 ; [L1213] int tmp___1 ; [L1216] ldv_s_s3c_hwmon_driver_platform_driver = 0 [L1217] LDV_IN_INTERRUPT = 1 [L1183] int tmp ; [L1186] tmp = platform_driver_register(& s3c_hwmon_driver) [L1187] return (tmp); [L1220] tmp = s3c_hwmon_init() [L1221] COND FALSE !(tmp != 0) VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L1259] tmp___1 = __VERIFIER_nondet_int() [L1260] COND TRUE tmp___1 != 0 || ldv_s_s3c_hwmon_driver_platform_driver != 0 [L1228] tmp___0 = __VERIFIER_nondet_int() [L1230] case 0: VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L1231] COND TRUE ldv_s_s3c_hwmon_driver_platform_driver == 0 [L1032] struct s3c_hwmon_pdata *pdata ; [L1033] struct s3c_hwmon *hwmon ; [L1034] int ret ; [L1035] int i ; [L1036] void *tmp ; [L1037] struct lock_class_key __key ; [L1038] long tmp___0 ; [L1039] long tmp___1 ; [L1040] long tmp___2 ; [L1041] long tmp___3 ; [L1042] struct s3c_hwmon_chcfg *cfg ; [L1045] EXPR dev->dev.platform_data [L1045] pdata = (struct s3c_hwmon_pdata *)dev->dev.platform_data [L1046] ret = 0 VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L1047] COND FALSE !((unsigned long )pdata == (unsigned long )((struct s3c_hwmon_pdata *)0)) [L856] void *tmp ; [L847] void *tmp___2 ; [L832] COND TRUE __VERIFIER_nondet_int() [L833] void *res = malloc(size); VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L834] CALL ldv_is_err(res) VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ptr={-36893488147419101220:0}, s3c_hwmon_driver={36:0}] [L1332] return ((unsigned long )ptr > 2012UL); [L834] RET ldv_is_err(res) VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L836] return res; VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L843] return ldv_malloc(size); [L850] tmp___2 = __kmalloc(size, flags) [L851] return (tmp___2); [L859] tmp = kmalloc(size, flags | 32768U) [L860] return (tmp); [L1053] tmp = kzalloc(800U, 208U) [L1054] hwmon = (struct s3c_hwmon *)tmp VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L1055] COND FALSE !((unsigned long )hwmon == (unsigned long )((struct s3c_hwmon *)0)) [L1063] hwmon->client = s3c_adc_register(dev, 0, 0, 0U) [L1064] EXPR hwmon->client VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L1064] CALL, EXPR IS_ERR((void const *)hwmon->client) VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ptr={0:18446744073709551616}, s3c_hwmon_driver={36:0}] [L1285] long tmp ; VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ptr={0:18446744073709551616}, ptr={0:18446744073709551616}, s3c_hwmon_driver={36:0}] [L1288] CALL, EXPR ldv_is_err(ptr) VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ptr={0:18446744073709551616}, s3c_hwmon_driver={36:0}] [L1332] return ((unsigned long )ptr > 2012UL); [L1288] RET, EXPR ldv_is_err(ptr) VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, ptr={0:18446744073709551616}, ptr={0:18446744073709551616}, s3c_hwmon_driver={36:0}] [L1288] tmp = ldv_is_err(ptr) [L1289] return (tmp); [L1064] RET, EXPR IS_ERR((void const *)hwmon->client) VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L1064] tmp___1 = IS_ERR((void const *)hwmon->client) [L1065] COND FALSE !(tmp___1 != 0L) [L916] return (0); [L1073] ret = s3c_hwmon_add_raw(& dev->dev) [L1074] COND FALSE !(ret != 0) [L1079] hwmon->hwmon_dev = hwmon_device_register(& dev->dev) [L1080] EXPR hwmon->hwmon_dev VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L1080] CALL, EXPR IS_ERR((void const *)hwmon->hwmon_dev) VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ptr={0:182862574002682785169408}, s3c_hwmon_driver={36:0}] [L1285] long tmp ; VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ptr={0:182862574002682785169408}, ptr={0:182862574002682785169408}, s3c_hwmon_driver={36:0}] [L1288] CALL, EXPR ldv_is_err(ptr) VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ptr={0:182862574002682785169408}, s3c_hwmon_driver={36:0}] [L1332] return ((unsigned long )ptr > 2012UL); [L1288] RET, EXPR ldv_is_err(ptr) VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, ptr={0:182862574002682785169408}, ptr={0:182862574002682785169408}, s3c_hwmon_driver={36:0}] [L1288] tmp = ldv_is_err(ptr) [L1289] return (tmp); [L1080] RET, EXPR IS_ERR((void const *)hwmon->hwmon_dev) VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L1080] tmp___3 = IS_ERR((void const *)hwmon->hwmon_dev) [L1081] COND FALSE !(tmp___3 != 0L) [L1089] i = 0 VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L1134] COND TRUE (unsigned int )i <= 7U [L1092] EXPR pdata->in[i] [L1092] cfg = pdata->in[i] [L1093] COND FALSE !((unsigned long )cfg == (unsigned long )((struct s3c_hwmon_chcfg *)0)) [L1098] EXPR cfg->mult [L1098] COND FALSE !(cfg->mult > 65535U) [L1104] EXPR cfg->div VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L1104] COND FALSE !(cfg->div == 0U) [L1110] pdata->in[i] [L983] struct sensor_device_attribute *attr ; [L984] int ret ; [L988] attr = & attrs->in [L989] attr->index = channel [L990] attr->dev_attr.attr.name = (char const *)(& attrs->in_name) [L991] attr->dev_attr.attr.mode = 292U [L992] attr->dev_attr.show = & s3c_hwmon_ch_show [L1294] int tmp ; VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L1297] CALL ldv_device_create_file_dev_attr_of_sensor_device_attribute(ldv_func_arg2) VAL [\old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L1387] COND TRUE ldv_call_dev_attr_of_sensor_device_attribute == 0 [L1388] ldv_count_2 = ldv_count_2 + 1 [L1389] ldv_call_dev_attr_of_sensor_device_attribute = 1 VAL [\old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=1, ldv_count_1=0, ldv_count_2=1, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L1390] COND FALSE !(ldv_count_1 >= ldv_count_2) VAL [\old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=1, ldv_count_1=0, ldv_count_2=1, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L1316] __VERIFIER_error() VAL [\old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=1, ldv_count_1=0, ldv_count_2=1, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] ----- [2018-11-23 16:02:20,168 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck CFG 23.11 04:02:20 ImpRootNode [2018-11-23 16:02:20,168 INFO L132 PluginConnector]: ------------------------ END CodeCheck---------------------------- [2018-11-23 16:02:20,169 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-23 16:02:20,169 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-23 16:02:20,169 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-23 16:02:20,170 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 04:02:17" (3/4) ... [2018-11-23 16:02:20,174 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-23 16:02:20,200 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-23 16:02:20,201 INFO L168 Benchmark]: Toolchain (without parser) took 4128.15 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 167.2 MB). Free memory was 951.7 MB in the beginning and 871.6 MB in the end (delta: 80.2 MB). Peak memory consumption was 247.4 MB. Max. memory is 11.5 GB. [2018-11-23 16:02:20,203 INFO L168 Benchmark]: CDTParser took 0.20 ms. Allocated memory is still 1.0 GB. Free memory is still 979.9 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 16:02:20,204 INFO L168 Benchmark]: CACSL2BoogieTranslator took 595.64 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 167.2 MB). Free memory was 951.7 MB in the beginning and 1.1 GB in the end (delta: -194.6 MB). Peak memory consumption was 39.8 MB. Max. memory is 11.5 GB. [2018-11-23 16:02:20,205 INFO L168 Benchmark]: Boogie Procedure Inliner took 64.13 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 3.2 MB). Peak memory consumption was 3.2 MB. Max. memory is 11.5 GB. [2018-11-23 16:02:20,205 INFO L168 Benchmark]: Boogie Preprocessor took 45.09 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 3.2 MB). Peak memory consumption was 3.2 MB. Max. memory is 11.5 GB. [2018-11-23 16:02:20,206 INFO L168 Benchmark]: RCFGBuilder took 876.04 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 90.8 MB). Peak memory consumption was 90.8 MB. Max. memory is 11.5 GB. [2018-11-23 16:02:20,207 INFO L168 Benchmark]: CodeCheck took 2511.58 ms. Allocated memory is still 1.2 GB. Free memory was 1.0 GB in the beginning and 871.6 MB in the end (delta: 177.6 MB). Peak memory consumption was 177.6 MB. Max. memory is 11.5 GB. [2018-11-23 16:02:20,208 INFO L168 Benchmark]: Witness Printer took 31.40 ms. Allocated memory is still 1.2 GB. Free memory is still 871.6 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 16:02:20,212 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck: - StatisticsResult: Ultimate CodeCheck benchmark data CFG has 8 procedures, 106 locations, 1 error locations. UNSAFE Result, 1.1s OverallTime, 2 OverallIterations, 0 TraceHistogramMax, 0.0s AutomataDifference, 0.0s DeadEndRemovalTime, 0.0s HoareAnnotationTime, HoareTripleCheckerStatistics: 53 SDtfs, 0 SDslu, 0 SDs, 0 SdLazy, 10 SolverSat, 4 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.0s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 227 GetRequests, 222 SyntacticMatches, 1 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=-1occurred in iteration=-1, traceCheckStatistics: 0.0s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 0.1s InterpolantComputationTime, 78 NumberOfCodeBlocks, 78 NumberOfCodeBlocksAsserted, 2 NumberOfCheckSat, 36 ConstructedInterpolants, 0 QuantifiedInterpolants, 1728 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 1 InterpolantComputations, 1 PerfectInterpolantSequences, 6/6 InterpolantCoveringCapability, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s AbstIntTime, 0 AbstIntIterations, 0 AbstIntStrong, NaN AbsIntWeakeningRatio, NaN AbsIntAvgWeakeningVarsNumRemoved, NaN AbsIntAvgWeakenedConjuncts, 0.0s DumpTime, AutomataMinimizationStatistics: No data available, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: No data available, ReuseStatistics: No data available - UnprovableResult [Line: 1316]: Unable to prove that call of __VERIFIER_error() unreachable Unable to prove that call of __VERIFIER_error() unreachable Reason: overapproximation of large string literal at line 1178, overapproximation of bitwiseOr at line 859. Possible FailurePath: [L1205] int LDV_IN_INTERRUPT ; [L1370] int ldv_count_1 = 0; [L1371] int ldv_count_2 = 0; [L1381] int ldv_call_dev_attr_of_sensor_device_attribute = 0; [L1178-L1180] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1208] struct platform_device *var_group1 ; [L1209] int res_s3c_hwmon_probe_10 ; [L1210] int ldv_s_s3c_hwmon_driver_platform_driver ; [L1211] int tmp ; [L1212] int tmp___0 ; [L1213] int tmp___1 ; [L1216] ldv_s_s3c_hwmon_driver_platform_driver = 0 [L1217] LDV_IN_INTERRUPT = 1 [L1183] int tmp ; [L1186] tmp = platform_driver_register(& s3c_hwmon_driver) [L1187] return (tmp); [L1220] tmp = s3c_hwmon_init() [L1221] COND FALSE !(tmp != 0) VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L1259] tmp___1 = __VERIFIER_nondet_int() [L1260] COND TRUE tmp___1 != 0 || ldv_s_s3c_hwmon_driver_platform_driver != 0 [L1228] tmp___0 = __VERIFIER_nondet_int() [L1230] case 0: VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L1231] COND TRUE ldv_s_s3c_hwmon_driver_platform_driver == 0 [L1032] struct s3c_hwmon_pdata *pdata ; [L1033] struct s3c_hwmon *hwmon ; [L1034] int ret ; [L1035] int i ; [L1036] void *tmp ; [L1037] struct lock_class_key __key ; [L1038] long tmp___0 ; [L1039] long tmp___1 ; [L1040] long tmp___2 ; [L1041] long tmp___3 ; [L1042] struct s3c_hwmon_chcfg *cfg ; [L1045] EXPR dev->dev.platform_data [L1045] pdata = (struct s3c_hwmon_pdata *)dev->dev.platform_data [L1046] ret = 0 VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L1047] COND FALSE !((unsigned long )pdata == (unsigned long )((struct s3c_hwmon_pdata *)0)) [L856] void *tmp ; [L847] void *tmp___2 ; [L832] COND TRUE __VERIFIER_nondet_int() [L833] void *res = malloc(size); VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L834] CALL ldv_is_err(res) VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ptr={-36893488147419101220:0}, s3c_hwmon_driver={36:0}] [L1332] return ((unsigned long )ptr > 2012UL); [L834] RET ldv_is_err(res) VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L836] return res; VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L843] return ldv_malloc(size); [L850] tmp___2 = __kmalloc(size, flags) [L851] return (tmp___2); [L859] tmp = kmalloc(size, flags | 32768U) [L860] return (tmp); [L1053] tmp = kzalloc(800U, 208U) [L1054] hwmon = (struct s3c_hwmon *)tmp VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L1055] COND FALSE !((unsigned long )hwmon == (unsigned long )((struct s3c_hwmon *)0)) [L1063] hwmon->client = s3c_adc_register(dev, 0, 0, 0U) [L1064] EXPR hwmon->client VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L1064] CALL, EXPR IS_ERR((void const *)hwmon->client) VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ptr={0:18446744073709551616}, s3c_hwmon_driver={36:0}] [L1285] long tmp ; VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ptr={0:18446744073709551616}, ptr={0:18446744073709551616}, s3c_hwmon_driver={36:0}] [L1288] CALL, EXPR ldv_is_err(ptr) VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ptr={0:18446744073709551616}, s3c_hwmon_driver={36:0}] [L1332] return ((unsigned long )ptr > 2012UL); [L1288] RET, EXPR ldv_is_err(ptr) VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, ptr={0:18446744073709551616}, ptr={0:18446744073709551616}, s3c_hwmon_driver={36:0}] [L1288] tmp = ldv_is_err(ptr) [L1289] return (tmp); [L1064] RET, EXPR IS_ERR((void const *)hwmon->client) VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L1064] tmp___1 = IS_ERR((void const *)hwmon->client) [L1065] COND FALSE !(tmp___1 != 0L) [L916] return (0); [L1073] ret = s3c_hwmon_add_raw(& dev->dev) [L1074] COND FALSE !(ret != 0) [L1079] hwmon->hwmon_dev = hwmon_device_register(& dev->dev) [L1080] EXPR hwmon->hwmon_dev VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L1080] CALL, EXPR IS_ERR((void const *)hwmon->hwmon_dev) VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ptr={0:182862574002682785169408}, s3c_hwmon_driver={36:0}] [L1285] long tmp ; VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ptr={0:182862574002682785169408}, ptr={0:182862574002682785169408}, s3c_hwmon_driver={36:0}] [L1288] CALL, EXPR ldv_is_err(ptr) VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ptr={0:182862574002682785169408}, s3c_hwmon_driver={36:0}] [L1332] return ((unsigned long )ptr > 2012UL); [L1288] RET, EXPR ldv_is_err(ptr) VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, ptr={0:182862574002682785169408}, ptr={0:182862574002682785169408}, s3c_hwmon_driver={36:0}] [L1288] tmp = ldv_is_err(ptr) [L1289] return (tmp); [L1080] RET, EXPR IS_ERR((void const *)hwmon->hwmon_dev) VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L1080] tmp___3 = IS_ERR((void const *)hwmon->hwmon_dev) [L1081] COND FALSE !(tmp___3 != 0L) [L1089] i = 0 VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L1134] COND TRUE (unsigned int )i <= 7U [L1092] EXPR pdata->in[i] [L1092] cfg = pdata->in[i] [L1093] COND FALSE !((unsigned long )cfg == (unsigned long )((struct s3c_hwmon_chcfg *)0)) [L1098] EXPR cfg->mult [L1098] COND FALSE !(cfg->mult > 65535U) [L1104] EXPR cfg->div VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L1104] COND FALSE !(cfg->div == 0U) [L1110] pdata->in[i] [L983] struct sensor_device_attribute *attr ; [L984] int ret ; [L988] attr = & attrs->in [L989] attr->index = channel [L990] attr->dev_attr.attr.name = (char const *)(& attrs->in_name) [L991] attr->dev_attr.attr.mode = 292U [L992] attr->dev_attr.show = & s3c_hwmon_ch_show [L1294] int tmp ; VAL [__this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L1297] CALL ldv_device_create_file_dev_attr_of_sensor_device_attribute(ldv_func_arg2) VAL [\old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L1387] COND TRUE ldv_call_dev_attr_of_sensor_device_attribute == 0 [L1388] ldv_count_2 = ldv_count_2 + 1 [L1389] ldv_call_dev_attr_of_sensor_device_attribute = 1 VAL [\old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=1, ldv_count_1=0, ldv_count_2=1, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L1390] COND FALSE !(ldv_count_1 >= ldv_count_2) VAL [\old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=1, ldv_count_1=0, ldv_count_2=1, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] [L1316] __VERIFIER_error() VAL [\old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={46:45}, ldv_call_dev_attr_of_sensor_device_attribute=1, ldv_count_1=0, ldv_count_2=1, LDV_IN_INTERRUPT=1, s3c_hwmon_driver={36:0}] * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.20 ms. Allocated memory is still 1.0 GB. Free memory is still 979.9 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 595.64 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 167.2 MB). Free memory was 951.7 MB in the beginning and 1.1 GB in the end (delta: -194.6 MB). Peak memory consumption was 39.8 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 64.13 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 3.2 MB). Peak memory consumption was 3.2 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 45.09 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 3.2 MB). Peak memory consumption was 3.2 MB. Max. memory is 11.5 GB. * RCFGBuilder took 876.04 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 90.8 MB). Peak memory consumption was 90.8 MB. Max. memory is 11.5 GB. * CodeCheck took 2511.58 ms. Allocated memory is still 1.2 GB. Free memory was 1.0 GB in the beginning and 871.6 MB in the end (delta: 177.6 MB). Peak memory consumption was 177.6 MB. Max. memory is 11.5 GB. * Witness Printer took 31.40 ms. Allocated memory is still 1.2 GB. Free memory is still 871.6 MB. There was no memory consumed. Max. memory is 11.5 GB. RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces Received shutdown request... ### Bit-precise run ### This is Ultimate 0.1.23-aa41828 [2018-11-23 16:02:22,200 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-23 16:02:22,202 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-23 16:02:22,211 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-23 16:02:22,212 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-23 16:02:22,213 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-23 16:02:22,214 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-23 16:02:22,215 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-23 16:02:22,217 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-23 16:02:22,217 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-23 16:02:22,218 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-23 16:02:22,219 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-23 16:02:22,219 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-23 16:02:22,221 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-23 16:02:22,222 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-23 16:02:22,223 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-23 16:02:22,224 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-23 16:02:22,226 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-23 16:02:22,228 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-23 16:02:22,230 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-23 16:02:22,231 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-23 16:02:22,232 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-23 16:02:22,235 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-23 16:02:22,235 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-23 16:02:22,235 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-23 16:02:22,236 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-23 16:02:22,238 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-23 16:02:22,238 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-23 16:02:22,239 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-23 16:02:22,241 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-23 16:02:22,241 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-23 16:02:22,242 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-23 16:02:22,242 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-23 16:02:22,242 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-23 16:02:22,243 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-23 16:02:22,244 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-23 16:02:22,245 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_1ec337dd-a4d7-459f-9600-e176c29f02ec/bin-2019/ukojak/config/svcomp-Reach-64bit-Kojak_Bitvector.epf [2018-11-23 16:02:22,258 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-23 16:02:22,259 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-23 16:02:22,259 INFO L131 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2018-11-23 16:02:22,260 INFO L133 SettingsManager]: * ... to procedures called more than once=ALWAYS [2018-11-23 16:02:22,260 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-23 16:02:22,260 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-23 16:02:22,261 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-23 16:02:22,261 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-23 16:02:22,261 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2018-11-23 16:02:22,261 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2018-11-23 16:02:22,262 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2018-11-23 16:02:22,262 INFO L133 SettingsManager]: * Use bitvectors instead of ints=true [2018-11-23 16:02:22,262 INFO L133 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2018-11-23 16:02:22,262 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-23 16:02:22,262 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-23 16:02:22,262 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2018-11-23 16:02:22,262 INFO L131 SettingsManager]: Preferences of CodeCheck differ from their defaults: [2018-11-23 16:02:22,262 INFO L133 SettingsManager]: * Timeout in seconds=1000000 [2018-11-23 16:02:22,263 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-23 16:02:22,263 INFO L133 SettingsManager]: * To the following directory=./dump/ [2018-11-23 16:02:22,263 INFO L133 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 [2018-11-23 16:02:22,263 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-23 16:02:22,263 INFO L133 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2018-11-23 16:02:22,263 INFO L133 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2018-11-23 16:02:22,264 INFO L133 SettingsManager]: * Use separate solver for trace checks=false [2018-11-23 16:02:22,264 INFO L133 SettingsManager]: * Trace refinement strategy=WALRUS [2018-11-23 16:02:22,264 INFO L133 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2018-11-23 16:02:22,264 INFO L133 SettingsManager]: * Command for external solver=cvc4nyu --tear-down-incremental --rewrite-divk --print-success --lang smt [2018-11-23 16:02:22,264 INFO L133 SettingsManager]: * Logic for external solver=AUFBV [2018-11-23 16:02:22,264 INFO L133 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2018-11-23 16:02:22,266 INFO L133 SettingsManager]: * To the following directory=dump/ Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_1ec337dd-a4d7-459f-9600-e176c29f02ec/bin-2019/ukojak Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Kojak Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ad0c37fc2c8e1e9b1468a2381d63a3c4c80429a5 [2018-11-23 16:02:22,302 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-23 16:02:22,312 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-23 16:02:22,315 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-23 16:02:22,316 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-23 16:02:22,317 INFO L276 PluginConnector]: CDTParser initialized [2018-11-23 16:02:22,317 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_1ec337dd-a4d7-459f-9600-e176c29f02ec/bin-2019/ukojak/../../sv-benchmarks/c/ldv-commit-tester/m0_false-unreach-call_drivers-hwmon-s3c-hwmon-ko--130_7a--af3071a-1.c [2018-11-23 16:02:22,365 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_1ec337dd-a4d7-459f-9600-e176c29f02ec/bin-2019/ukojak/data/7335e3a0d/ad1a117600b149868e23f7fe157213d3/FLAGfcaac5f60 [2018-11-23 16:02:22,813 INFO L307 CDTParser]: Found 1 translation units. [2018-11-23 16:02:22,814 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_1ec337dd-a4d7-459f-9600-e176c29f02ec/sv-benchmarks/c/ldv-commit-tester/m0_false-unreach-call_drivers-hwmon-s3c-hwmon-ko--130_7a--af3071a-1.c [2018-11-23 16:02:22,827 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_1ec337dd-a4d7-459f-9600-e176c29f02ec/bin-2019/ukojak/data/7335e3a0d/ad1a117600b149868e23f7fe157213d3/FLAGfcaac5f60 [2018-11-23 16:02:23,339 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_1ec337dd-a4d7-459f-9600-e176c29f02ec/bin-2019/ukojak/data/7335e3a0d/ad1a117600b149868e23f7fe157213d3 [2018-11-23 16:02:23,343 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-23 16:02:23,345 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-23 16:02:23,346 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-23 16:02:23,346 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-23 16:02:23,350 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-23 16:02:23,351 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 04:02:23" (1/1) ... [2018-11-23 16:02:23,354 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7c1ec60d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:02:23, skipping insertion in model container [2018-11-23 16:02:23,354 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 04:02:23" (1/1) ... [2018-11-23 16:02:23,365 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-23 16:02:23,416 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-23 16:02:23,821 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 16:02:23,839 INFO L191 MainTranslator]: Completed pre-run [2018-11-23 16:02:23,986 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-23 16:02:24,022 INFO L195 MainTranslator]: Completed translation [2018-11-23 16:02:24,022 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:02:24 WrapperNode [2018-11-23 16:02:24,022 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-23 16:02:24,023 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-23 16:02:24,023 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-23 16:02:24,023 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-23 16:02:24,033 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:02:24" (1/1) ... [2018-11-23 16:02:24,051 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:02:24" (1/1) ... [2018-11-23 16:02:24,084 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-23 16:02:24,085 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-23 16:02:24,085 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-23 16:02:24,085 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-23 16:02:24,096 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:02:24" (1/1) ... [2018-11-23 16:02:24,097 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:02:24" (1/1) ... [2018-11-23 16:02:24,103 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:02:24" (1/1) ... [2018-11-23 16:02:24,103 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:02:24" (1/1) ... [2018-11-23 16:02:24,119 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:02:24" (1/1) ... [2018-11-23 16:02:24,122 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:02:24" (1/1) ... [2018-11-23 16:02:24,125 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:02:24" (1/1) ... [2018-11-23 16:02:24,129 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-23 16:02:24,129 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-23 16:02:24,129 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-23 16:02:24,129 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-23 16:02:24,131 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 04:02:24" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_1ec337dd-a4d7-459f-9600-e176c29f02ec/bin-2019/ukojak/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:10000 [2018-11-23 16:02:24,186 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_hwmon_remove_raw [2018-11-23 16:02:24,186 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_hwmon_remove_raw [2018-11-23 16:02:24,186 INFO L130 BoogieDeclarations]: Found specification of procedure dev_get_drvdata [2018-11-23 16:02:24,186 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2018-11-23 16:02:24,187 INFO L130 BoogieDeclarations]: Found specification of procedure platform_driver_unregister [2018-11-23 16:02:24,187 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-23 16:02:24,187 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2018-11-23 16:02:24,187 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_return_value_probe [2018-11-23 16:02:24,187 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2018-11-23 16:02:24,187 INFO L130 BoogieDeclarations]: Found specification of procedure hwmon_device_register [2018-11-23 16:02:24,188 INFO L130 BoogieDeclarations]: Found specification of procedure platform_driver_register [2018-11-23 16:02:24,188 INFO L130 BoogieDeclarations]: Found specification of procedure PTR_ERR [2018-11-23 16:02:24,188 INFO L138 BoogieDeclarations]: Found implementation of procedure PTR_ERR [2018-11-23 16:02:24,190 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err [2018-11-23 16:02:24,190 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err [2018-11-23 16:02:24,190 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_adc_register [2018-11-23 16:02:24,190 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_hwmon_remove_attr [2018-11-23 16:02:24,190 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_hwmon_remove_attr [2018-11-23 16:02:24,191 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2018-11-23 16:02:24,191 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2018-11-23 16:02:24,191 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2018-11-23 16:02:24,191 INFO L130 BoogieDeclarations]: Found specification of procedure dev_set_drvdata [2018-11-23 16:02:24,191 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2018-11-23 16:02:24,191 INFO L130 BoogieDeclarations]: Found specification of procedure platform_get_drvdata [2018-11-23 16:02:24,191 INFO L138 BoogieDeclarations]: Found implementation of procedure platform_get_drvdata [2018-11-23 16:02:24,192 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2018-11-23 16:02:24,192 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_device_create_file_dev_attr_of_sensor_device_attribute [2018-11-23 16:02:24,192 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_device_create_file_dev_attr_of_sensor_device_attribute [2018-11-23 16:02:24,192 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2018-11-23 16:02:24,192 INFO L130 BoogieDeclarations]: Found specification of procedure hwmon_device_unregister [2018-11-23 16:02:24,192 INFO L130 BoogieDeclarations]: Found specification of procedure __mutex_init [2018-11-23 16:02:24,192 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_adc_release [2018-11-23 16:02:24,192 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_return_value [2018-11-23 16:02:24,193 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_handler_precall [2018-11-23 16:02:24,193 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_final_state [2018-11-23 16:02:24,193 INFO L130 BoogieDeclarations]: Found specification of procedure device_remove_file [2018-11-23 16:02:24,193 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-23 16:02:24,193 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-23 16:02:24,193 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2018-11-23 16:02:24,193 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2018-11-23 16:02:25,747 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-23 16:02:25,748 INFO L280 CfgBuilder]: Removed 36 assue(true) statements. [2018-11-23 16:02:25,748 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 04:02:25 BoogieIcfgContainer [2018-11-23 16:02:25,748 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-23 16:02:25,749 INFO L113 PluginConnector]: ------------------------CodeCheck---------------------------- [2018-11-23 16:02:25,749 INFO L271 PluginConnector]: Initializing CodeCheck... [2018-11-23 16:02:25,761 INFO L276 PluginConnector]: CodeCheck initialized [2018-11-23 16:02:25,761 INFO L185 PluginConnector]: Executing the observer CodeCheckObserver from plugin CodeCheck for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 04:02:25" (1/1) ... [2018-11-23 16:02:25,773 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-23 16:02:25,804 INFO L82 GeneralOperation]: Start removeUnreachable. Operand no size info available [2018-11-23 16:02:25,814 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 105 states to 77 states and 105 transitions. [2018-11-23 16:02:25,815 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 105 transitions. [2018-11-23 16:02:25,820 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2018-11-23 16:02:25,821 INFO L427 CodeCheckObserver]: Error Path is FOUND. [2018-11-23 16:02:25,870 FATAL L292 ToolchainWalker]: The Plugin de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck has thrown an exception: java.lang.IllegalArgumentException: Indexed Sort BitVec undefined at de.uni_freiburg.informatik.ultimate.logic.SortSymbol.checkArity(SortSymbol.java:153) at de.uni_freiburg.informatik.ultimate.logic.SortSymbol.getSort(SortSymbol.java:177) at de.uni_freiburg.informatik.ultimate.logic.Theory.getSort(Theory.java:1243) at de.uni_freiburg.informatik.ultimate.logic.NoopScript.sort(NoopScript.java:287) at de.uni_freiburg.informatik.ultimate.modelcheckerutils.smt.TermTransferrer.transferSort(TermTransferrer.java:128) at de.uni_freiburg.informatik.ultimate.modelcheckerutils.smt.TermTransferrer.convertApplicationTerm(TermTransferrer.java:162) at de.uni_freiburg.informatik.ultimate.logic.TermTransformer$BuildApplicationTerm.walk(TermTransformer.java:320) at de.uni_freiburg.informatik.ultimate.logic.NonRecursive.run(NonRecursive.java:122) at de.uni_freiburg.informatik.ultimate.logic.NonRecursive.run(NonRecursive.java:113) at de.uni_freiburg.informatik.ultimate.logic.TermTransformer.transform(TermTransformer.java:253) at de.uni_freiburg.informatik.ultimate.modelcheckerutils.cfg.SmtSymbols.transferSymbols(SmtSymbols.java:129) at de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck.CodeCheckObserver.process(CodeCheckObserver.java:449) at de.uni_freiburg.informatik.ultimate.core.coreplugin.modelwalker.CFGWalker.runObserver(CFGWalker.java:57) at de.uni_freiburg.informatik.ultimate.core.coreplugin.modelwalker.BaseWalker.runObserver(BaseWalker.java:93) at de.uni_freiburg.informatik.ultimate.core.coreplugin.modelwalker.BaseWalker.run(BaseWalker.java:86) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runObserver(PluginConnector.java:167) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runTool(PluginConnector.java:151) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.run(PluginConnector.java:128) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.executePluginConnector(ToolchainWalker.java:232) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.processPlugin(ToolchainWalker.java:226) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walkUnprotected(ToolchainWalker.java:142) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walk(ToolchainWalker.java:104) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainManager$Toolchain.processToolchain(ToolchainManager.java:316) at de.uni_freiburg.informatik.ultimate.core.coreplugin.toolchain.DefaultToolchainJob.run(DefaultToolchainJob.java:145) at org.eclipse.core.internal.jobs.Worker.run(Worker.java:55) [2018-11-23 16:02:25,874 INFO L168 Benchmark]: Toolchain (without parser) took 2530.12 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 158.9 MB). Free memory was 947.9 MB in the beginning and 1.0 GB in the end (delta: -76.8 MB). Peak memory consumption was 82.0 MB. Max. memory is 11.5 GB. [2018-11-23 16:02:25,876 INFO L168 Benchmark]: CDTParser took 0.15 ms. Allocated memory is still 1.0 GB. Free memory is still 978.7 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 16:02:25,876 INFO L168 Benchmark]: CACSL2BoogieTranslator took 677.10 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 158.9 MB). Free memory was 947.9 MB in the beginning and 1.1 GB in the end (delta: -184.5 MB). Peak memory consumption was 46.4 MB. Max. memory is 11.5 GB. [2018-11-23 16:02:25,877 INFO L168 Benchmark]: Boogie Procedure Inliner took 61.35 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 16:02:25,877 INFO L168 Benchmark]: Boogie Preprocessor took 44.07 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.5 MB). Peak memory consumption was 6.5 MB. Max. memory is 11.5 GB. [2018-11-23 16:02:25,878 INFO L168 Benchmark]: RCFGBuilder took 1619.35 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 101.2 MB). Peak memory consumption was 101.2 MB. Max. memory is 11.5 GB. [2018-11-23 16:02:25,879 INFO L168 Benchmark]: CodeCheck took 124.17 ms. Allocated memory is still 1.2 GB. Free memory is still 1.0 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-23 16:02:25,882 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck: - ExceptionOrErrorResult: IllegalArgumentException: Indexed Sort BitVec undefined de.uni_freiburg.informatik.ultimate.plugins.generator.codecheck: IllegalArgumentException: Indexed Sort BitVec undefined: de.uni_freiburg.informatik.ultimate.logic.SortSymbol.checkArity(SortSymbol.java:153) * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15 ms. Allocated memory is still 1.0 GB. Free memory is still 978.7 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 677.10 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 158.9 MB). Free memory was 947.9 MB in the beginning and 1.1 GB in the end (delta: -184.5 MB). Peak memory consumption was 46.4 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 61.35 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * Boogie Preprocessor took 44.07 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.5 MB). Peak memory consumption was 6.5 MB. Max. memory is 11.5 GB. * RCFGBuilder took 1619.35 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 101.2 MB). Peak memory consumption was 101.2 MB. Max. memory is 11.5 GB. * CodeCheck took 124.17 ms. Allocated memory is still 1.2 GB. Free memory is still 1.0 GB. There was no memory consumed. Max. memory is 11.5 GB. RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request...