./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0f8a17c6 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 14cb0b0179e79f0e2d385464cbe440f1c78ee76831b4c47fbbc7c2a57322304c --- Real Ultimate output --- This is Ultimate 0.2.1-dev-0f8a17c [2021-11-17 01:54:17,705 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-17 01:54:17,707 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-17 01:54:17,746 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-17 01:54:17,747 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-17 01:54:17,749 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-17 01:54:17,750 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-17 01:54:17,752 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-17 01:54:17,753 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-17 01:54:17,756 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-17 01:54:17,757 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-17 01:54:17,758 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-17 01:54:17,758 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-17 01:54:17,760 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-17 01:54:17,761 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-17 01:54:17,764 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-17 01:54:17,764 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-17 01:54:17,765 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-17 01:54:17,766 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-17 01:54:17,769 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-17 01:54:17,771 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-17 01:54:17,771 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-17 01:54:17,773 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-17 01:54:17,773 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-17 01:54:17,778 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-17 01:54:17,778 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-17 01:54:17,778 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-17 01:54:17,780 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-17 01:54:17,780 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-17 01:54:17,781 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-17 01:54:17,781 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-17 01:54:17,781 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-17 01:54:17,783 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-17 01:54:17,783 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-17 01:54:17,784 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-17 01:54:17,784 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-17 01:54:17,785 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-17 01:54:17,785 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-17 01:54:17,785 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-17 01:54:17,786 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-17 01:54:17,786 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-17 01:54:17,787 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2021-11-17 01:54:17,810 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-17 01:54:17,811 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-17 01:54:17,811 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-17 01:54:17,811 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-17 01:54:17,812 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-17 01:54:17,812 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-17 01:54:17,813 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-17 01:54:17,813 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-17 01:54:17,813 INFO L138 SettingsManager]: * Use SBE=true [2021-11-17 01:54:17,813 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-17 01:54:17,814 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-17 01:54:17,814 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-17 01:54:17,814 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-17 01:54:17,814 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-17 01:54:17,814 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-17 01:54:17,814 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-17 01:54:17,815 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-17 01:54:17,815 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-17 01:54:17,815 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-17 01:54:17,815 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-17 01:54:17,815 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-17 01:54:17,815 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-17 01:54:17,815 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-17 01:54:17,816 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-17 01:54:17,816 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-17 01:54:17,816 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-17 01:54:17,816 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-17 01:54:17,817 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-17 01:54:17,817 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-17 01:54:17,817 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-17 01:54:17,817 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-17 01:54:17,818 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 14cb0b0179e79f0e2d385464cbe440f1c78ee76831b4c47fbbc7c2a57322304c [2021-11-17 01:54:17,990 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-17 01:54:18,004 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-17 01:54:18,006 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-17 01:54:18,007 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-17 01:54:18,008 INFO L275 PluginConnector]: CDTParser initialized [2021-11-17 01:54:18,009 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i [2021-11-17 01:54:18,069 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/9fc5283d0/13ceeac62a304e49acfff684acae991f/FLAG825301bc7 [2021-11-17 01:54:18,488 INFO L306 CDTParser]: Found 1 translation units. [2021-11-17 01:54:18,488 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i [2021-11-17 01:54:18,509 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/9fc5283d0/13ceeac62a304e49acfff684acae991f/FLAG825301bc7 [2021-11-17 01:54:18,517 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/9fc5283d0/13ceeac62a304e49acfff684acae991f [2021-11-17 01:54:18,518 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-17 01:54:18,519 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-17 01:54:18,521 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-17 01:54:18,521 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-17 01:54:18,523 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-17 01:54:18,524 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.11 01:54:18" (1/1) ... [2021-11-17 01:54:18,525 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6de8069f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:54:18, skipping insertion in model container [2021-11-17 01:54:18,525 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.11 01:54:18" (1/1) ... [2021-11-17 01:54:18,529 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-17 01:54:18,563 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-17 01:54:18,781 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i[24075,24088] [2021-11-17 01:54:18,830 INFO L207 PostProcessor]: Analyzing one entry point: main [2021-11-17 01:54:18,839 INFO L203 MainTranslator]: Completed pre-run [2021-11-17 01:54:18,865 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i[24075,24088] [2021-11-17 01:54:18,908 INFO L207 PostProcessor]: Analyzing one entry point: main [2021-11-17 01:54:18,926 INFO L208 MainTranslator]: Completed translation [2021-11-17 01:54:18,927 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:54:18 WrapperNode [2021-11-17 01:54:18,928 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-17 01:54:18,928 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-17 01:54:18,929 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-17 01:54:18,929 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-17 01:54:18,933 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:54:18" (1/1) ... [2021-11-17 01:54:18,949 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:54:18" (1/1) ... [2021-11-17 01:54:18,978 INFO L137 Inliner]: procedures = 78, calls = 165, calls flagged for inlining = 30, calls inlined = 26, statements flattened = 506 [2021-11-17 01:54:18,979 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-17 01:54:18,979 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-17 01:54:18,979 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-17 01:54:18,980 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-17 01:54:18,985 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:54:18" (1/1) ... [2021-11-17 01:54:18,985 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:54:18" (1/1) ... [2021-11-17 01:54:18,990 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:54:18" (1/1) ... [2021-11-17 01:54:18,990 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:54:18" (1/1) ... [2021-11-17 01:54:19,001 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:54:18" (1/1) ... [2021-11-17 01:54:19,003 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:54:18" (1/1) ... [2021-11-17 01:54:19,005 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:54:18" (1/1) ... [2021-11-17 01:54:19,009 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-17 01:54:19,009 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-17 01:54:19,009 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-17 01:54:19,010 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-17 01:54:19,031 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:54:18" (1/1) ... [2021-11-17 01:54:19,042 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-17 01:54:19,051 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-17 01:54:19,061 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-17 01:54:19,066 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-17 01:54:19,086 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_hwmon_remove_raw [2021-11-17 01:54:19,086 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_hwmon_remove_raw [2021-11-17 01:54:19,086 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-17 01:54:19,086 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-17 01:54:19,086 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-17 01:54:19,086 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-11-17 01:54:19,087 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-11-17 01:54:19,087 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-11-17 01:54:19,087 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-17 01:54:19,087 INFO L130 BoogieDeclarations]: Found specification of procedure PTR_ERR [2021-11-17 01:54:19,087 INFO L138 BoogieDeclarations]: Found implementation of procedure PTR_ERR [2021-11-17 01:54:19,088 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err [2021-11-17 01:54:19,088 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err [2021-11-17 01:54:19,088 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-11-17 01:54:19,088 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-11-17 01:54:19,088 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_hwmon_remove_attr [2021-11-17 01:54:19,088 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_hwmon_remove_attr [2021-11-17 01:54:19,088 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-17 01:54:19,089 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-17 01:54:19,089 INFO L130 BoogieDeclarations]: Found specification of procedure platform_get_drvdata [2021-11-17 01:54:19,089 INFO L138 BoogieDeclarations]: Found implementation of procedure platform_get_drvdata [2021-11-17 01:54:19,089 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_device_create_file_dev_attr_of_sensor_device_attribute [2021-11-17 01:54:19,089 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_device_create_file_dev_attr_of_sensor_device_attribute [2021-11-17 01:54:19,089 INFO L130 BoogieDeclarations]: Found specification of procedure hwmon_device_unregister [2021-11-17 01:54:19,089 INFO L138 BoogieDeclarations]: Found implementation of procedure hwmon_device_unregister [2021-11-17 01:54:19,089 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-11-17 01:54:19,090 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-11-17 01:54:19,090 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-11-17 01:54:19,090 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_adc_release [2021-11-17 01:54:19,090 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_adc_release [2021-11-17 01:54:19,090 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-11-17 01:54:19,090 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-11-17 01:54:19,090 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-17 01:54:19,091 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-17 01:54:19,091 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-11-17 01:54:19,091 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-11-17 01:54:19,091 INFO L130 BoogieDeclarations]: Found specification of procedure device_remove_file [2021-11-17 01:54:19,091 INFO L138 BoogieDeclarations]: Found implementation of procedure device_remove_file [2021-11-17 01:54:19,091 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-17 01:54:19,092 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-17 01:54:19,092 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2021-11-17 01:54:19,092 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2021-11-17 01:54:19,296 INFO L236 CfgBuilder]: Building ICFG [2021-11-17 01:54:19,297 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-17 01:54:19,376 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-11-17 01:54:19,610 INFO L277 CfgBuilder]: Performing block encoding [2021-11-17 01:54:19,617 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-17 01:54:19,617 INFO L301 CfgBuilder]: Removed 0 assume(true) statements. [2021-11-17 01:54:19,618 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.11 01:54:19 BoogieIcfgContainer [2021-11-17 01:54:19,619 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-17 01:54:19,620 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-17 01:54:19,620 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-17 01:54:19,622 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-17 01:54:19,622 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.11 01:54:18" (1/3) ... [2021-11-17 01:54:19,623 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@17a6e4f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.11 01:54:19, skipping insertion in model container [2021-11-17 01:54:19,623 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:54:18" (2/3) ... [2021-11-17 01:54:19,623 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@17a6e4f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.11 01:54:19, skipping insertion in model container [2021-11-17 01:54:19,623 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.11 01:54:19" (3/3) ... [2021-11-17 01:54:19,624 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i [2021-11-17 01:54:19,628 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-17 01:54:19,629 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-17 01:54:19,658 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-17 01:54:19,661 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-17 01:54:19,662 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-17 01:54:19,673 INFO L276 IsEmpty]: Start isEmpty. Operand has 183 states, 133 states have (on average 1.2932330827067668) internal successors, (172), 139 states have internal predecessors, (172), 34 states have call successors, (34), 15 states have call predecessors, (34), 14 states have return successors, (31), 31 states have call predecessors, (31), 31 states have call successors, (31) [2021-11-17 01:54:19,680 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2021-11-17 01:54:19,680 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:54:19,681 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:54:19,681 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:54:19,684 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:54:19,684 INFO L85 PathProgramCache]: Analyzing trace with hash -630996910, now seen corresponding path program 1 times [2021-11-17 01:54:19,689 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 01:54:19,689 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2031936149] [2021-11-17 01:54:19,689 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:54:19,690 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 01:54:19,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:54:19,887 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2021-11-17 01:54:19,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:54:19,917 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-17 01:54:19,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:54:19,925 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-11-17 01:54:19,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:54:19,938 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:54:19,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:54:19,945 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2021-11-17 01:54:19,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:54:19,952 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2021-11-17 01:54:19,955 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:54:19,961 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:54:19,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:54:19,968 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-17 01:54:19,968 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 01:54:19,969 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2031936149] [2021-11-17 01:54:19,969 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2031936149] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 01:54:19,969 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 01:54:19,969 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-17 01:54:19,971 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [628088749] [2021-11-17 01:54:19,971 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 01:54:19,974 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-17 01:54:19,974 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 01:54:19,988 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-17 01:54:19,989 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2021-11-17 01:54:19,991 INFO L87 Difference]: Start difference. First operand has 183 states, 133 states have (on average 1.2932330827067668) internal successors, (172), 139 states have internal predecessors, (172), 34 states have call successors, (34), 15 states have call predecessors, (34), 14 states have return successors, (31), 31 states have call predecessors, (31), 31 states have call successors, (31) Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 4 states have call predecessors, (8), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-11-17 01:54:20,220 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:54:20,221 INFO L93 Difference]: Finished difference Result 396 states and 531 transitions. [2021-11-17 01:54:20,222 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-17 01:54:20,223 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 4 states have call predecessors, (8), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 70 [2021-11-17 01:54:20,225 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:54:20,238 INFO L225 Difference]: With dead ends: 396 [2021-11-17 01:54:20,239 INFO L226 Difference]: Without dead ends: 195 [2021-11-17 01:54:20,244 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2021-11-17 01:54:20,248 INFO L933 BasicCegarLoop]: 226 mSDtfsCounter, 119 mSDsluCounter, 300 mSDsCounter, 0 mSdLazyCounter, 96 mSolverCounterSat, 79 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 122 SdHoareTripleChecker+Valid, 526 SdHoareTripleChecker+Invalid, 175 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 79 IncrementalHoareTripleChecker+Valid, 96 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-17 01:54:20,252 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [122 Valid, 526 Invalid, 175 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [79 Valid, 96 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-17 01:54:20,264 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 195 states. [2021-11-17 01:54:20,306 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 195 to 187. [2021-11-17 01:54:20,309 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 187 states, 142 states have (on average 1.2746478873239437) internal successors, (181), 143 states have internal predecessors, (181), 31 states have call successors, (31), 14 states have call predecessors, (31), 13 states have return successors, (30), 30 states have call predecessors, (30), 30 states have call successors, (30) [2021-11-17 01:54:20,314 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 187 states to 187 states and 242 transitions. [2021-11-17 01:54:20,316 INFO L78 Accepts]: Start accepts. Automaton has 187 states and 242 transitions. Word has length 70 [2021-11-17 01:54:20,316 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:54:20,318 INFO L470 AbstractCegarLoop]: Abstraction has 187 states and 242 transitions. [2021-11-17 01:54:20,318 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 4 states have call predecessors, (8), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-11-17 01:54:20,319 INFO L276 IsEmpty]: Start isEmpty. Operand 187 states and 242 transitions. [2021-11-17 01:54:20,327 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 89 [2021-11-17 01:54:20,327 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:54:20,328 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:54:20,328 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-17 01:54:20,328 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:54:20,329 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:54:20,332 INFO L85 PathProgramCache]: Analyzing trace with hash -733290133, now seen corresponding path program 1 times [2021-11-17 01:54:20,332 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 01:54:20,333 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [193627944] [2021-11-17 01:54:20,333 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:54:20,333 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 01:54:20,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:54:20,669 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-11-17 01:54:20,670 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:54:20,676 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-11-17 01:54:20,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:54:20,714 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2021-11-17 01:54:20,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:54:20,721 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-11-17 01:54:20,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:54:20,729 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:54:20,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:54:20,740 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2021-11-17 01:54:20,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:54:20,747 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2021-11-17 01:54:20,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:54:20,757 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:54:20,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:54:20,761 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2021-11-17 01:54:20,762 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 01:54:20,762 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [193627944] [2021-11-17 01:54:20,763 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [193627944] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 01:54:20,763 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 01:54:20,763 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-17 01:54:20,764 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [424534701] [2021-11-17 01:54:20,764 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 01:54:20,765 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-17 01:54:20,766 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 01:54:20,767 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-17 01:54:20,767 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2021-11-17 01:54:20,767 INFO L87 Difference]: Start difference. First operand 187 states and 242 transitions. Second operand has 8 states, 8 states have (on average 7.5) internal successors, (60), 5 states have internal predecessors, (60), 2 states have call successors, (9), 4 states have call predecessors, (9), 2 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2021-11-17 01:54:21,069 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:54:21,069 INFO L93 Difference]: Finished difference Result 497 states and 670 transitions. [2021-11-17 01:54:21,070 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-17 01:54:21,070 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 7.5) internal successors, (60), 5 states have internal predecessors, (60), 2 states have call successors, (9), 4 states have call predecessors, (9), 2 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 88 [2021-11-17 01:54:21,070 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:54:21,072 INFO L225 Difference]: With dead ends: 497 [2021-11-17 01:54:21,073 INFO L226 Difference]: Without dead ends: 313 [2021-11-17 01:54:21,073 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=23, Invalid=67, Unknown=0, NotChecked=0, Total=90 [2021-11-17 01:54:21,074 INFO L933 BasicCegarLoop]: 279 mSDtfsCounter, 225 mSDsluCounter, 1041 mSDsCounter, 0 mSdLazyCounter, 261 mSolverCounterSat, 81 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 236 SdHoareTripleChecker+Valid, 1320 SdHoareTripleChecker+Invalid, 342 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 81 IncrementalHoareTripleChecker+Valid, 261 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-17 01:54:21,075 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [236 Valid, 1320 Invalid, 342 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [81 Valid, 261 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-17 01:54:21,076 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 313 states. [2021-11-17 01:54:21,086 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 313 to 192. [2021-11-17 01:54:21,087 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 192 states, 146 states have (on average 1.2671232876712328) internal successors, (185), 147 states have internal predecessors, (185), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (32), 31 states have call predecessors, (32), 30 states have call successors, (32) [2021-11-17 01:54:21,088 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 192 states to 192 states and 248 transitions. [2021-11-17 01:54:21,088 INFO L78 Accepts]: Start accepts. Automaton has 192 states and 248 transitions. Word has length 88 [2021-11-17 01:54:21,088 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:54:21,089 INFO L470 AbstractCegarLoop]: Abstraction has 192 states and 248 transitions. [2021-11-17 01:54:21,089 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 7.5) internal successors, (60), 5 states have internal predecessors, (60), 2 states have call successors, (9), 4 states have call predecessors, (9), 2 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2021-11-17 01:54:21,089 INFO L276 IsEmpty]: Start isEmpty. Operand 192 states and 248 transitions. [2021-11-17 01:54:21,091 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 106 [2021-11-17 01:54:21,091 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:54:21,091 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:54:21,091 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-17 01:54:21,092 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:54:21,092 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:54:21,092 INFO L85 PathProgramCache]: Analyzing trace with hash -1622073071, now seen corresponding path program 1 times [2021-11-17 01:54:21,092 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 01:54:21,092 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1371680308] [2021-11-17 01:54:21,093 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:54:21,093 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 01:54:21,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-17 01:54:21,168 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-17 01:54:21,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-17 01:54:21,307 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-17 01:54:21,308 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-11-17 01:54:21,308 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-17 01:54:21,310 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-17 01:54:21,312 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1] [2021-11-17 01:54:21,315 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-17 01:54:21,337 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:54:21,339 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:54:21,340 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:54:21,340 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:54:21,340 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:54:21,340 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:54:21,341 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:54:21,341 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:54:21,341 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:54:21,341 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:54:21,342 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:54:21,342 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:54:21,342 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:54:21,342 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:54:21,343 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:54:21,343 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:54:21,403 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.11 01:54:21 BoogieIcfgContainer [2021-11-17 01:54:21,403 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-17 01:54:21,404 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-17 01:54:21,404 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-17 01:54:21,405 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-17 01:54:21,405 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.11 01:54:19" (3/4) ... [2021-11-17 01:54:21,407 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-11-17 01:54:21,407 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-17 01:54:21,408 INFO L158 Benchmark]: Toolchain (without parser) took 2888.70ms. Allocated memory was 146.8MB in the beginning and 186.6MB in the end (delta: 39.8MB). Free memory was 114.0MB in the beginning and 120.0MB in the end (delta: -6.0MB). Peak memory consumption was 33.2MB. Max. memory is 16.1GB. [2021-11-17 01:54:21,411 INFO L158 Benchmark]: CDTParser took 0.09ms. Allocated memory is still 83.9MB. Free memory was 41.8MB in the beginning and 41.7MB in the end (delta: 43.7kB). There was no memory consumed. Max. memory is 16.1GB. [2021-11-17 01:54:21,412 INFO L158 Benchmark]: CACSL2BoogieTranslator took 406.77ms. Allocated memory is still 146.8MB. Free memory was 114.0MB in the beginning and 103.4MB in the end (delta: 10.6MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2021-11-17 01:54:21,414 INFO L158 Benchmark]: Boogie Procedure Inliner took 50.50ms. Allocated memory is still 146.8MB. Free memory was 103.4MB in the beginning and 99.2MB in the end (delta: 4.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2021-11-17 01:54:21,414 INFO L158 Benchmark]: Boogie Preprocessor took 29.46ms. Allocated memory is still 146.8MB. Free memory was 99.2MB in the beginning and 95.7MB in the end (delta: 3.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2021-11-17 01:54:21,414 INFO L158 Benchmark]: RCFGBuilder took 609.33ms. Allocated memory is still 146.8MB. Free memory was 95.7MB in the beginning and 99.0MB in the end (delta: -3.3MB). Peak memory consumption was 20.2MB. Max. memory is 16.1GB. [2021-11-17 01:54:21,414 INFO L158 Benchmark]: TraceAbstraction took 1783.58ms. Allocated memory was 146.8MB in the beginning and 186.6MB in the end (delta: 39.8MB). Free memory was 99.0MB in the beginning and 120.0MB in the end (delta: -21.0MB). Peak memory consumption was 17.7MB. Max. memory is 16.1GB. [2021-11-17 01:54:21,415 INFO L158 Benchmark]: Witness Printer took 3.65ms. Allocated memory is still 186.6MB. Free memory is still 120.0MB. There was no memory consumed. Max. memory is 16.1GB. [2021-11-17 01:54:21,416 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.09ms. Allocated memory is still 83.9MB. Free memory was 41.8MB in the beginning and 41.7MB in the end (delta: 43.7kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 406.77ms. Allocated memory is still 146.8MB. Free memory was 114.0MB in the beginning and 103.4MB in the end (delta: 10.6MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 50.50ms. Allocated memory is still 146.8MB. Free memory was 103.4MB in the beginning and 99.2MB in the end (delta: 4.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 29.46ms. Allocated memory is still 146.8MB. Free memory was 99.2MB in the beginning and 95.7MB in the end (delta: 3.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * RCFGBuilder took 609.33ms. Allocated memory is still 146.8MB. Free memory was 95.7MB in the beginning and 99.0MB in the end (delta: -3.3MB). Peak memory consumption was 20.2MB. Max. memory is 16.1GB. * TraceAbstraction took 1783.58ms. Allocated memory was 146.8MB in the beginning and 186.6MB in the end (delta: 39.8MB). Free memory was 99.0MB in the beginning and 120.0MB in the end (delta: -21.0MB). Peak memory consumption was 17.7MB. Max. memory is 16.1GB. * Witness Printer took 3.65ms. Allocated memory is still 186.6MB. Free memory is still 120.0MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 860]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 1170. Possible FailurePath: [L883] int ldv_state_variable_1 ; [L884] struct platform_device *s3c_hwmon_driver_group0 ; [L885] int LDV_IN_INTERRUPT = 1; [L886] int ref_cnt ; [L887] int ldv_state_variable_0 ; [L1170-L1172] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1188] int ldv_retval_0 ; [L1189] int ldv_retval_1 ; [L1366] int ldv_count_1 = 0; [L1367] int ldv_count_2 = 0; [L1375] int ldv_call_dev_attr_of_sensor_device_attribute = 0; VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1203] int tmp ; [L1204] int tmp___0 ; [L1205] int tmp___1 ; [L1207] FCALL ldv_initialize() [L1208] ldv_state_variable_1 = 0 [L1209] ref_cnt = 0 [L1210] ldv_state_variable_0 = 1 VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1212] tmp = __VERIFIER_nondet_int() [L1214] case 0: [L1244] case 1: VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp=1] [L1245] COND TRUE ldv_state_variable_0 != 0 [L1246] tmp___1 = __VERIFIER_nondet_int() [L1248] case 0: [L1256] case 1: VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp=1, tmp___1=1] [L1257] COND TRUE ldv_state_variable_0 == 1 [L1258] CALL, EXPR s3c_hwmon_init() [L1175] int tmp ; [L1177] CALL, EXPR platform_driver_register(& s3c_hwmon_driver) [L1441] return __VERIFIER_nondet_int(); [L1177] RET, EXPR platform_driver_register(& s3c_hwmon_driver) [L1177] tmp = platform_driver_register(& s3c_hwmon_driver) [L1178] return (tmp); VAL [\result=0, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp=0] [L1258] RET, EXPR s3c_hwmon_init() [L1258] ldv_retval_1 = s3c_hwmon_init() [L1259] COND TRUE ldv_retval_1 == 0 [L1260] ldv_state_variable_0 = 3 [L1261] ldv_state_variable_1 = 1 [L1262] CALL ldv_initialize_platform_driver_1() [L1194] void *tmp ; VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1196] CALL, EXPR ldv_zalloc(624U) VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L824] void *p ; [L825] void *tmp ; [L826] int tmp___0 ; [L828] tmp___0 = __VERIFIER_nondet_int() [L829] COND TRUE tmp___0 != 0 [L830] return (0); VAL [\old(size)=624, \result={0:0}, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, size=624, tmp___0=1] [L1196] RET, EXPR ldv_zalloc(624U) VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_zalloc(624U)={0:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1196] tmp = ldv_zalloc(624U) [L1197] s3c_hwmon_driver_group0 = (struct platform_device *)tmp VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp={0:0}] [L1262] RET ldv_initialize_platform_driver_1() [L1265] COND FALSE !(ldv_retval_1 != 0) VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp=1, tmp___1=1] [L1212] tmp = __VERIFIER_nondet_int() [L1214] case 0: VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp=0, tmp___1=1] [L1215] COND TRUE ldv_state_variable_1 != 0 [L1216] tmp___0 = __VERIFIER_nondet_int() [L1218] case 0: VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp=0, tmp___0=0, tmp___1=1] [L1219] COND TRUE ldv_state_variable_1 == 1 [L1220] CALL s3c_hwmon_probe(s3c_hwmon_driver_group0) [L1040] struct s3c_hwmon_pdata *pdata ; [L1041] struct s3c_hwmon *hwmon ; [L1042] int ret ; [L1043] int i ; [L1044] void *tmp ; [L1045] struct lock_class_key __key ; [L1046] long tmp___0 ; [L1047] long tmp___1 ; [L1048] long tmp___2 ; [L1049] long tmp___3 ; [L1050] struct s3c_hwmon_chcfg *cfg ; [L1052] EXPR dev->dev.platform_data [L1052] pdata = (struct s3c_hwmon_pdata *)dev->dev.platform_data [L1053] ret = 0 VAL [__key={22:0}, __this_module={4294967303:4294967300}, dev={0:0}, dev={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={26:-25}, ref_cnt=0, ret=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1054] COND FALSE !((unsigned long )pdata == (unsigned long )((struct s3c_hwmon_pdata *)0)) [L1059] CALL, EXPR ldv_kzalloc_9(800U, 208U) [L1324] void *tmp ; VAL [\old(flags)=208, \old(size)=800, __this_module={4294967303:4294967300}, flags=208, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, size=800] [L1326] CALL, EXPR ldv_zalloc(size) VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L824] void *p ; [L825] void *tmp ; [L826] int tmp___0 ; [L828] tmp___0 = __VERIFIER_nondet_int() [L829] COND FALSE !(tmp___0 != 0) [L832] EXPR, FCALL calloc(1U, size) [L832] tmp = calloc(1U, size) [L833] p = tmp VAL [\old(size)=800, __this_module={4294967303:4294967300}, calloc(1U, size)={-18446744073709551615:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, p={-18446744073709551615:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, size=800, tmp={-18446744073709551615:0}, tmp___0=0] [L834] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L801] COND FALSE !(!cond) VAL [\old(cond)=1, __this_module={4294967303:4294967300}, cond=1, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L834] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(size)=800, __this_module={4294967303:4294967300}, calloc(1U, size)={-18446744073709551615:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, p={-18446744073709551615:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, size=800, tmp={-18446744073709551615:0}, tmp___0=0] [L835] CALL, EXPR ldv_is_err(p) VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={-18446744073709551615:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1333] return ((unsigned long )ptr > 2012UL); VAL [\result=0, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={-18446744073709551615:0}, ptr={-18446744073709551615:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L835] RET, EXPR ldv_is_err(p) VAL [\old(size)=800, __this_module={4294967303:4294967300}, calloc(1U, size)={-18446744073709551615:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_is_err(p)=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, p={-18446744073709551615:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, size=800, tmp={-18446744073709551615:0}, tmp___0=0] [L835] CALL assume_abort_if_not(ldv_is_err(p) == 0) VAL [\old(cond)=1, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L801] COND FALSE !(!cond) VAL [\old(cond)=1, __this_module={4294967303:4294967300}, cond=1, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L835] RET assume_abort_if_not(ldv_is_err(p) == 0) VAL [\old(size)=800, __this_module={4294967303:4294967300}, calloc(1U, size)={-18446744073709551615:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_is_err(p)=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, p={-18446744073709551615:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, size=800, tmp={-18446744073709551615:0}, tmp___0=0] [L836] return (p); VAL [\old(size)=800, \result={-18446744073709551615:0}, __this_module={4294967303:4294967300}, calloc(1U, size)={-18446744073709551615:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, p={-18446744073709551615:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, size=800, tmp={-18446744073709551615:0}, tmp___0=0] [L1326] RET, EXPR ldv_zalloc(size) VAL [\old(flags)=208, \old(size)=800, __this_module={4294967303:4294967300}, flags=208, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_zalloc(size)={-18446744073709551615:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, size=800] [L1326] tmp = ldv_zalloc(size) [L1327] return (tmp); VAL [\old(flags)=208, \old(size)=800, \result={-18446744073709551615:0}, __this_module={4294967303:4294967300}, flags=208, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, size=800, tmp={-18446744073709551615:0}] [L1059] RET, EXPR ldv_kzalloc_9(800U, 208U) [L1059] tmp = ldv_kzalloc_9(800U, 208U) [L1060] hwmon = (struct s3c_hwmon *)tmp VAL [__key={22:0}, __this_module={4294967303:4294967300}, dev={0:0}, dev={0:0}, hwmon={-18446744073709551615:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={26:-25}, ref_cnt=0, ret=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp={-18446744073709551615:0}] [L1061] COND FALSE !((unsigned long )hwmon == (unsigned long )((struct s3c_hwmon *)0)) [L1066] CALL platform_set_drvdata(dev, (void *)hwmon) [L904] FCALL dev_set_drvdata(& pdev->dev, data) [L1066] RET platform_set_drvdata(dev, (void *)hwmon) [L1067] FCALL __mutex_init(& hwmon->lock, "&hwmon->lock", & __key) [L1068] CALL, EXPR s3c_adc_register(dev, 0, 0, 0U) [L1451] CALL, EXPR ldv_malloc(0UL) VAL [\old(size)=0, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L806] void *p ; [L807] void *tmp ; [L808] int tmp___0 ; [L810] tmp___0 = __VERIFIER_nondet_int() [L811] COND TRUE tmp___0 != 0 [L812] return (0); VAL [\old(size)=0, \result={0:0}, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, size=0, tmp___0=-2] [L1451] RET, EXPR ldv_malloc(0UL) VAL [\old(arg3)=0, __this_module={4294967303:4294967300}, arg0={0:0}, arg0={0:0}, arg1={0:0}, arg1={0:0}, arg2={0:0}, arg2={0:0}, arg3=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_malloc(0UL)={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1451] return ldv_malloc(0UL); [L1068] RET, EXPR s3c_adc_register(dev, 0, 0, 0U) [L1068] hwmon->client = s3c_adc_register(dev, 0, 0, 0U) [L1069] EXPR hwmon->client VAL [__key={22:0}, __this_module={4294967303:4294967300}, dev={0:0}, dev={0:0}, hwmon={-18446744073709551615:0}, hwmon->client={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={26:-25}, ref_cnt=0, ret=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp={-18446744073709551615:0}] [L1069] CALL, EXPR IS_ERR((void const *)hwmon->client) VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1300] long tmp ; VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1302] CALL, EXPR ldv_is_err(ptr) VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1333] return ((unsigned long )ptr > 2012UL); VAL [\result=0, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1302] RET, EXPR ldv_is_err(ptr) VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1302] tmp = ldv_is_err(ptr) [L1303] return (tmp); VAL [\result=0, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp=0] [L1069] RET, EXPR IS_ERR((void const *)hwmon->client) VAL [__key={22:0}, __this_module={4294967303:4294967300}, dev={0:0}, dev={0:0}, hwmon={-18446744073709551615:0}, hwmon->client={0:0}, IS_ERR((void const *)hwmon->client)=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={26:-25}, ref_cnt=0, ret=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp={-18446744073709551615:0}] [L1069] tmp___1 = IS_ERR((void const *)hwmon->client) [L1070] COND FALSE !(tmp___1 != 0L) [L1077] CALL, EXPR s3c_hwmon_add_raw(& dev->dev) [L935] return (0); VAL [\result=0, __this_module={4294967303:4294967300}, dev={0:12}, dev={0:12}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1077] RET, EXPR s3c_hwmon_add_raw(& dev->dev) [L1077] ret = s3c_hwmon_add_raw(& dev->dev) [L1078] COND FALSE !(ret != 0) [L1082] CALL, EXPR hwmon_device_register(& dev->dev) [L1424] CALL, EXPR ldv_malloc(sizeof(struct device)) VAL [\old(size)=1003, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L806] void *p ; [L807] void *tmp ; [L808] int tmp___0 ; [L810] tmp___0 = __VERIFIER_nondet_int() [L811] COND TRUE tmp___0 != 0 [L812] return (0); VAL [\old(size)=1003, \result={0:0}, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, size=1003, tmp___0=-3] [L1424] RET, EXPR ldv_malloc(sizeof(struct device)) VAL [__this_module={4294967303:4294967300}, arg0={0:12}, arg0={0:12}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct device))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1424] return ldv_malloc(sizeof(struct device)); [L1082] RET, EXPR hwmon_device_register(& dev->dev) [L1082] hwmon->hwmon_dev = hwmon_device_register(& dev->dev) [L1083] EXPR hwmon->hwmon_dev VAL [__key={22:0}, __this_module={4294967303:4294967300}, dev={0:0}, dev={0:0}, hwmon={-18446744073709551615:0}, hwmon->hwmon_dev={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={26:-25}, ref_cnt=0, ret=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp={-18446744073709551615:0}, tmp___1=0] [L1083] CALL, EXPR IS_ERR((void const *)hwmon->hwmon_dev) VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1300] long tmp ; VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1302] CALL, EXPR ldv_is_err(ptr) VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1333] return ((unsigned long )ptr > 2012UL); VAL [\result=0, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1302] RET, EXPR ldv_is_err(ptr) VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1302] tmp = ldv_is_err(ptr) [L1303] return (tmp); VAL [\result=0, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp=0] [L1083] RET, EXPR IS_ERR((void const *)hwmon->hwmon_dev) VAL [__key={22:0}, __this_module={4294967303:4294967300}, dev={0:0}, dev={0:0}, hwmon={-18446744073709551615:0}, hwmon->hwmon_dev={0:0}, IS_ERR((void const *)hwmon->hwmon_dev)=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={26:-25}, ref_cnt=0, ret=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp={-18446744073709551615:0}, tmp___1=0] [L1083] tmp___3 = IS_ERR((void const *)hwmon->hwmon_dev) [L1084] COND FALSE !(tmp___3 != 0L) [L1091] i = 0 VAL [__key={22:0}, __this_module={4294967303:4294967300}, dev={0:0}, dev={0:0}, hwmon={-18446744073709551615:0}, i=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={26:-25}, ref_cnt=0, ret=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp={-18446744073709551615:0}, tmp___1=0, tmp___3=0] [L1130] COND TRUE (unsigned int )i <= 7U VAL [__key={22:0}, __this_module={4294967303:4294967300}, dev={0:0}, dev={0:0}, hwmon={-18446744073709551615:0}, i=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={26:-25}, ref_cnt=0, ret=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp={-18446744073709551615:0}, tmp___1=0, tmp___3=0] [L1094] EXPR pdata->in[i] [L1094] cfg = pdata->in[i] [L1095] COND FALSE !((unsigned long )cfg == (unsigned long )((struct s3c_hwmon_chcfg *)0)) [L1099] EXPR cfg->mult VAL [__key={22:0}, __this_module={4294967303:4294967300}, cfg={28:-27}, cfg->mult=65536, dev={0:0}, dev={0:0}, hwmon={-18446744073709551615:0}, i=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={26:-25}, ref_cnt=0, ret=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp={-18446744073709551615:0}, tmp___1=0, tmp___3=0] [L1099] COND TRUE cfg->mult > 65535U [L1104] EXPR cfg->div VAL [__key={22:0}, __this_module={4294967303:4294967300}, cfg={28:-27}, cfg->div=4294967297, dev={0:0}, dev={0:0}, hwmon={-18446744073709551615:0}, i=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={26:-25}, ref_cnt=0, ret=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp={-18446744073709551615:0}, tmp___1=0, tmp___3=0] [L1104] COND FALSE !(cfg->div == 0U) [L1109] EXPR pdata->in[i] [L1109-L1110] CALL s3c_hwmon_create_attr(& dev->dev, pdata->in[i], (struct s3c_hwmon_attr *)(& hwmon->attrs) + (unsigned int )i, i) [L997] struct sensor_device_attribute *attr ; [L998] int ret ; [L1001] attr = & attrs->in [L1002] attr->index = channel [L1003] attr->dev_attr.attr.name = (char const *)(& attrs->in_name) [L1004] attr->dev_attr.attr.mode = 292U [L1005] attr->dev_attr.show = & s3c_hwmon_ch_show [L1006] CALL ldv_device_create_file_7(dev, (struct device_attribute const *)(& attr->dev_attr)) [L1308] int tmp ; VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_func_arg1={0:12}, ldv_func_arg1={0:12}, ldv_func_arg2={-18446744073709551615:168}, ldv_func_arg2={-18446744073709551615:168}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1310] CALL ldv_device_create_file_dev_attr_of_sensor_device_attribute() VAL [\old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1378] int tmp ; VAL [\old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1380] COND TRUE ldv_call_dev_attr_of_sensor_device_attribute == 0 [L1381] ldv_count_2 = ldv_count_2 + 1 [L1382] ldv_call_dev_attr_of_sensor_device_attribute = 1 VAL [\old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=1, ldv_count_1=0, ldv_count_2=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1383] COND FALSE !(ldv_count_1 >= ldv_count_2) VAL [\old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=1, ldv_count_1=0, ldv_count_2=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1385] CALL ldv_error() VAL [\old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=1, ldv_count_1=0, ldv_count_2=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L860] reach_error() VAL [\old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=1, ldv_count_1=0, ldv_count_2=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 16 procedures, 184 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 1.7s, OverallIterations: 3, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 358 SdHoareTripleChecker+Valid, 0.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 344 mSDsluCounter, 1846 SdHoareTripleChecker+Invalid, 0.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1341 mSDsCounter, 160 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 357 IncrementalHoareTripleChecker+Invalid, 517 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 160 mSolverCounterUnsat, 505 mSDtfsCounter, 357 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 44 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=192occurred in iteration=2, InterpolantAutomatonStates: 12, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 2 MinimizatonAttempts, 129 StatesRemovedByMinimization, 2 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 0.5s InterpolantComputationTime, 263 NumberOfCodeBlocks, 263 NumberOfCodeBlocksAsserted, 3 NumberOfCheckSat, 156 ConstructedInterpolants, 0 QuantifiedInterpolants, 255 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 2 InterpolantComputations, 2 PerfectInterpolantSequences, 30/30 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-11-17 01:54:21,468 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 14cb0b0179e79f0e2d385464cbe440f1c78ee76831b4c47fbbc7c2a57322304c --- Real Ultimate output --- This is Ultimate 0.2.1-dev-0f8a17c [2021-11-17 01:54:23,106 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-17 01:54:23,108 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-17 01:54:23,135 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-17 01:54:23,137 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-17 01:54:23,140 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-17 01:54:23,142 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-17 01:54:23,147 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-17 01:54:23,148 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-17 01:54:23,153 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-17 01:54:23,154 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-17 01:54:23,158 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-17 01:54:23,159 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-17 01:54:23,161 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-17 01:54:23,162 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-17 01:54:23,163 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-17 01:54:23,165 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-17 01:54:23,166 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-17 01:54:23,167 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-17 01:54:23,171 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-17 01:54:23,174 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-17 01:54:23,175 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-17 01:54:23,176 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-17 01:54:23,177 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-17 01:54:23,179 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-17 01:54:23,182 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-17 01:54:23,182 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-17 01:54:23,183 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-17 01:54:23,184 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-17 01:54:23,184 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-17 01:54:23,185 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-17 01:54:23,185 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-17 01:54:23,186 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-17 01:54:23,187 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-17 01:54:23,188 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-17 01:54:23,188 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-17 01:54:23,188 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-17 01:54:23,188 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-17 01:54:23,189 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-17 01:54:23,190 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-17 01:54:23,190 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-17 01:54:23,194 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2021-11-17 01:54:23,216 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-17 01:54:23,217 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-17 01:54:23,217 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-17 01:54:23,218 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-17 01:54:23,218 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-17 01:54:23,218 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-17 01:54:23,219 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-17 01:54:23,220 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-17 01:54:23,220 INFO L138 SettingsManager]: * Use SBE=true [2021-11-17 01:54:23,220 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-17 01:54:23,221 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-17 01:54:23,221 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-17 01:54:23,221 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-17 01:54:23,221 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-17 01:54:23,221 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2021-11-17 01:54:23,221 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2021-11-17 01:54:23,222 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-17 01:54:23,222 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-17 01:54:23,222 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-17 01:54:23,222 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-17 01:54:23,222 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-17 01:54:23,222 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-17 01:54:23,222 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-17 01:54:23,223 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-17 01:54:23,223 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-17 01:54:23,223 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-17 01:54:23,223 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2021-11-17 01:54:23,223 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2021-11-17 01:54:23,224 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-17 01:54:23,224 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-17 01:54:23,224 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-17 01:54:23,224 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-17 01:54:23,224 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-11-17 01:54:23,224 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 14cb0b0179e79f0e2d385464cbe440f1c78ee76831b4c47fbbc7c2a57322304c [2021-11-17 01:54:23,502 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-17 01:54:23,518 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-17 01:54:23,520 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-17 01:54:23,521 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-17 01:54:23,523 INFO L275 PluginConnector]: CDTParser initialized [2021-11-17 01:54:23,524 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i [2021-11-17 01:54:23,565 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/bb9c0a2a5/9a65410af2104ded95166a4e62992d96/FLAG831920edc [2021-11-17 01:54:24,031 INFO L306 CDTParser]: Found 1 translation units. [2021-11-17 01:54:24,032 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i [2021-11-17 01:54:24,045 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/bb9c0a2a5/9a65410af2104ded95166a4e62992d96/FLAG831920edc [2021-11-17 01:54:24,056 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/bb9c0a2a5/9a65410af2104ded95166a4e62992d96 [2021-11-17 01:54:24,058 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-17 01:54:24,061 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-17 01:54:24,061 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-17 01:54:24,061 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-17 01:54:24,064 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-17 01:54:24,065 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.11 01:54:24" (1/1) ... [2021-11-17 01:54:24,066 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@32b8b8f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:54:24, skipping insertion in model container [2021-11-17 01:54:24,066 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.11 01:54:24" (1/1) ... [2021-11-17 01:54:24,071 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-17 01:54:24,120 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-17 01:54:24,392 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i[24075,24088] [2021-11-17 01:54:24,494 INFO L207 PostProcessor]: Analyzing one entry point: main [2021-11-17 01:54:24,510 INFO L203 MainTranslator]: Completed pre-run [2021-11-17 01:54:24,533 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i[24075,24088] [2021-11-17 01:54:24,561 INFO L207 PostProcessor]: Analyzing one entry point: main [2021-11-17 01:54:24,585 INFO L208 MainTranslator]: Completed translation [2021-11-17 01:54:24,585 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:54:24 WrapperNode [2021-11-17 01:54:24,585 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-17 01:54:24,586 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-17 01:54:24,586 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-17 01:54:24,586 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-17 01:54:24,591 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:54:24" (1/1) ... [2021-11-17 01:54:24,607 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:54:24" (1/1) ... [2021-11-17 01:54:24,670 INFO L137 Inliner]: procedures = 80, calls = 165, calls flagged for inlining = 30, calls inlined = 26, statements flattened = 483 [2021-11-17 01:54:24,671 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-17 01:54:24,671 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-17 01:54:24,671 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-17 01:54:24,671 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-17 01:54:24,677 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:54:24" (1/1) ... [2021-11-17 01:54:24,678 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:54:24" (1/1) ... [2021-11-17 01:54:24,683 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:54:24" (1/1) ... [2021-11-17 01:54:24,683 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:54:24" (1/1) ... [2021-11-17 01:54:24,704 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:54:24" (1/1) ... [2021-11-17 01:54:24,707 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:54:24" (1/1) ... [2021-11-17 01:54:24,709 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:54:24" (1/1) ... [2021-11-17 01:54:24,713 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-17 01:54:24,727 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-17 01:54:24,727 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-17 01:54:24,727 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-17 01:54:24,727 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:54:24" (1/1) ... [2021-11-17 01:54:24,732 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-17 01:54:24,740 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-17 01:54:24,749 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-17 01:54:24,760 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-17 01:54:24,794 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_hwmon_remove_raw [2021-11-17 01:54:24,794 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_hwmon_remove_raw [2021-11-17 01:54:24,794 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-17 01:54:24,795 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-17 01:54:24,795 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-17 01:54:24,795 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2021-11-17 01:54:24,795 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-11-17 01:54:24,795 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-11-17 01:54:24,796 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-17 01:54:24,797 INFO L130 BoogieDeclarations]: Found specification of procedure PTR_ERR [2021-11-17 01:54:24,797 INFO L138 BoogieDeclarations]: Found implementation of procedure PTR_ERR [2021-11-17 01:54:24,797 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err [2021-11-17 01:54:24,797 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err [2021-11-17 01:54:24,797 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-11-17 01:54:24,798 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-11-17 01:54:24,798 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_hwmon_remove_attr [2021-11-17 01:54:24,798 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_hwmon_remove_attr [2021-11-17 01:54:24,798 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-17 01:54:24,798 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2021-11-17 01:54:24,798 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-17 01:54:24,798 INFO L130 BoogieDeclarations]: Found specification of procedure platform_get_drvdata [2021-11-17 01:54:24,798 INFO L138 BoogieDeclarations]: Found implementation of procedure platform_get_drvdata [2021-11-17 01:54:24,799 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_device_create_file_dev_attr_of_sensor_device_attribute [2021-11-17 01:54:24,799 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_device_create_file_dev_attr_of_sensor_device_attribute [2021-11-17 01:54:24,799 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2021-11-17 01:54:24,799 INFO L130 BoogieDeclarations]: Found specification of procedure hwmon_device_unregister [2021-11-17 01:54:24,799 INFO L138 BoogieDeclarations]: Found implementation of procedure hwmon_device_unregister [2021-11-17 01:54:24,799 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-11-17 01:54:24,799 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-11-17 01:54:24,800 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_adc_release [2021-11-17 01:54:24,800 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_adc_release [2021-11-17 01:54:24,800 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-11-17 01:54:24,800 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-11-17 01:54:24,800 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-17 01:54:24,800 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-11-17 01:54:24,801 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-11-17 01:54:24,801 INFO L130 BoogieDeclarations]: Found specification of procedure device_remove_file [2021-11-17 01:54:24,801 INFO L138 BoogieDeclarations]: Found implementation of procedure device_remove_file [2021-11-17 01:54:24,801 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-17 01:54:24,801 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-17 01:54:24,802 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2021-11-17 01:54:24,802 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2021-11-17 01:54:24,932 INFO L236 CfgBuilder]: Building ICFG [2021-11-17 01:54:24,933 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-17 01:54:24,998 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-11-17 01:54:25,683 INFO L277 CfgBuilder]: Performing block encoding [2021-11-17 01:54:25,693 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-17 01:54:25,694 INFO L301 CfgBuilder]: Removed 0 assume(true) statements. [2021-11-17 01:54:25,696 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.11 01:54:25 BoogieIcfgContainer [2021-11-17 01:54:25,696 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-17 01:54:25,697 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-17 01:54:25,698 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-17 01:54:25,700 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-17 01:54:25,700 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.11 01:54:24" (1/3) ... [2021-11-17 01:54:25,700 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@61309c34 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.11 01:54:25, skipping insertion in model container [2021-11-17 01:54:25,701 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:54:24" (2/3) ... [2021-11-17 01:54:25,701 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@61309c34 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.11 01:54:25, skipping insertion in model container [2021-11-17 01:54:25,702 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.11 01:54:25" (3/3) ... [2021-11-17 01:54:25,703 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i [2021-11-17 01:54:25,706 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-17 01:54:25,706 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-17 01:54:25,743 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-17 01:54:25,750 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-17 01:54:25,750 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-17 01:54:25,766 INFO L276 IsEmpty]: Start isEmpty. Operand has 181 states, 131 states have (on average 1.297709923664122) internal successors, (170), 137 states have internal predecessors, (170), 34 states have call successors, (34), 15 states have call predecessors, (34), 14 states have return successors, (31), 31 states have call predecessors, (31), 31 states have call successors, (31) [2021-11-17 01:54:25,776 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2021-11-17 01:54:25,776 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:54:25,777 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:54:25,777 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:54:25,781 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:54:25,781 INFO L85 PathProgramCache]: Analyzing trace with hash 366241272, now seen corresponding path program 1 times [2021-11-17 01:54:25,790 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 01:54:25,790 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [398548172] [2021-11-17 01:54:25,791 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:54:25,791 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 01:54:25,791 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 01:54:25,793 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 01:54:25,796 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2021-11-17 01:54:26,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:54:26,047 INFO L263 TraceCheckSpWp]: Trace formula consists of 361 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-17 01:54:26,052 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 01:54:26,310 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-17 01:54:26,310 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 01:54:26,456 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-17 01:54:26,457 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 01:54:26,457 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [398548172] [2021-11-17 01:54:26,457 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [398548172] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 01:54:26,457 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 01:54:26,457 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2021-11-17 01:54:26,459 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [431920285] [2021-11-17 01:54:26,459 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 01:54:26,462 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-17 01:54:26,462 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 01:54:26,477 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-17 01:54:26,477 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 01:54:26,479 INFO L87 Difference]: Start difference. First operand has 181 states, 131 states have (on average 1.297709923664122) internal successors, (170), 137 states have internal predecessors, (170), 34 states have call successors, (34), 15 states have call predecessors, (34), 14 states have return successors, (31), 31 states have call predecessors, (31), 31 states have call successors, (31) Second operand has 3 states, 3 states have (on average 19.0) internal successors, (57), 3 states have internal predecessors, (57), 2 states have call successors, (14), 2 states have call predecessors, (14), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-11-17 01:54:26,534 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:54:26,535 INFO L93 Difference]: Finished difference Result 384 states and 516 transitions. [2021-11-17 01:54:26,536 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-17 01:54:26,537 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 19.0) internal successors, (57), 3 states have internal predecessors, (57), 2 states have call successors, (14), 2 states have call predecessors, (14), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 70 [2021-11-17 01:54:26,537 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:54:26,543 INFO L225 Difference]: With dead ends: 384 [2021-11-17 01:54:26,543 INFO L226 Difference]: Without dead ends: 185 [2021-11-17 01:54:26,546 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 138 GetRequests, 137 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 01:54:26,548 INFO L933 BasicCegarLoop]: 230 mSDtfsCounter, 35 mSDsluCounter, 219 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 35 SdHoareTripleChecker+Valid, 449 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-17 01:54:26,549 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [35 Valid, 449 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-17 01:54:26,558 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185 states. [2021-11-17 01:54:26,576 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185 to 185. [2021-11-17 01:54:26,577 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 185 states, 140 states have (on average 1.2785714285714285) internal successors, (179), 141 states have internal predecessors, (179), 31 states have call successors, (31), 14 states have call predecessors, (31), 13 states have return successors, (30), 30 states have call predecessors, (30), 30 states have call successors, (30) [2021-11-17 01:54:26,579 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 185 states to 185 states and 240 transitions. [2021-11-17 01:54:26,579 INFO L78 Accepts]: Start accepts. Automaton has 185 states and 240 transitions. Word has length 70 [2021-11-17 01:54:26,588 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:54:26,588 INFO L470 AbstractCegarLoop]: Abstraction has 185 states and 240 transitions. [2021-11-17 01:54:26,588 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 19.0) internal successors, (57), 3 states have internal predecessors, (57), 2 states have call successors, (14), 2 states have call predecessors, (14), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-11-17 01:54:26,589 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 240 transitions. [2021-11-17 01:54:26,592 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 89 [2021-11-17 01:54:26,593 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:54:26,594 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:54:26,622 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2021-11-17 01:54:26,805 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 01:54:26,806 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:54:26,807 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:54:26,808 INFO L85 PathProgramCache]: Analyzing trace with hash -540846863, now seen corresponding path program 1 times [2021-11-17 01:54:26,808 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 01:54:26,809 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1266767869] [2021-11-17 01:54:26,809 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:54:26,809 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 01:54:26,810 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 01:54:26,825 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 01:54:26,843 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2021-11-17 01:54:27,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:54:27,070 INFO L263 TraceCheckSpWp]: Trace formula consists of 404 conjuncts, 13 conjunts are in the unsatisfiable core [2021-11-17 01:54:27,074 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 01:54:27,306 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2021-11-17 01:54:27,307 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 01:54:27,575 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2021-11-17 01:54:27,575 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 01:54:27,576 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1266767869] [2021-11-17 01:54:27,576 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1266767869] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 01:54:27,576 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 01:54:27,576 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6, 6] imperfect sequences [] total 10 [2021-11-17 01:54:27,576 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [403585999] [2021-11-17 01:54:27,576 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 01:54:27,577 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-11-17 01:54:27,577 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 01:54:27,578 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-11-17 01:54:27,578 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=69, Unknown=0, NotChecked=0, Total=90 [2021-11-17 01:54:27,578 INFO L87 Difference]: Start difference. First operand 185 states and 240 transitions. Second operand has 10 states, 10 states have (on average 7.3) internal successors, (73), 8 states have internal predecessors, (73), 2 states have call successors, (14), 2 states have call predecessors, (14), 4 states have return successors, (13), 4 states have call predecessors, (13), 2 states have call successors, (13) [2021-11-17 01:54:28,142 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:54:28,143 INFO L93 Difference]: Finished difference Result 544 states and 741 transitions. [2021-11-17 01:54:28,146 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-17 01:54:28,146 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 7.3) internal successors, (73), 8 states have internal predecessors, (73), 2 states have call successors, (14), 2 states have call predecessors, (14), 4 states have return successors, (13), 4 states have call predecessors, (13), 2 states have call successors, (13) Word has length 88 [2021-11-17 01:54:28,146 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:54:28,149 INFO L225 Difference]: With dead ends: 544 [2021-11-17 01:54:28,149 INFO L226 Difference]: Without dead ends: 362 [2021-11-17 01:54:28,153 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 176 GetRequests, 167 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=83, Unknown=0, NotChecked=0, Total=110 [2021-11-17 01:54:28,156 INFO L933 BasicCegarLoop]: 294 mSDtfsCounter, 281 mSDsluCounter, 1725 mSDsCounter, 0 mSdLazyCounter, 55 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 295 SdHoareTripleChecker+Valid, 2019 SdHoareTripleChecker+Invalid, 84 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 55 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-11-17 01:54:28,157 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [295 Valid, 2019 Invalid, 84 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 55 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-11-17 01:54:28,159 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 362 states. [2021-11-17 01:54:28,171 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 362 to 190. [2021-11-17 01:54:28,172 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 190 states, 144 states have (on average 1.2708333333333333) internal successors, (183), 145 states have internal predecessors, (183), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (32), 31 states have call predecessors, (32), 30 states have call successors, (32) [2021-11-17 01:54:28,173 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 190 states to 190 states and 246 transitions. [2021-11-17 01:54:28,173 INFO L78 Accepts]: Start accepts. Automaton has 190 states and 246 transitions. Word has length 88 [2021-11-17 01:54:28,173 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:54:28,174 INFO L470 AbstractCegarLoop]: Abstraction has 190 states and 246 transitions. [2021-11-17 01:54:28,174 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 7.3) internal successors, (73), 8 states have internal predecessors, (73), 2 states have call successors, (14), 2 states have call predecessors, (14), 4 states have return successors, (13), 4 states have call predecessors, (13), 2 states have call successors, (13) [2021-11-17 01:54:28,174 INFO L276 IsEmpty]: Start isEmpty. Operand 190 states and 246 transitions. [2021-11-17 01:54:28,176 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2021-11-17 01:54:28,176 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:54:28,177 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:54:28,188 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Ended with exit code 0 [2021-11-17 01:54:28,387 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 01:54:28,388 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:54:28,388 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:54:28,388 INFO L85 PathProgramCache]: Analyzing trace with hash 1386514478, now seen corresponding path program 1 times [2021-11-17 01:54:28,389 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 01:54:28,389 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1022584881] [2021-11-17 01:54:28,390 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:54:28,390 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 01:54:28,390 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 01:54:28,391 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 01:54:28,393 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2021-11-17 01:54:29,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-17 01:54:29,518 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-17 01:54:30,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-17 01:54:30,255 INFO L133 FreeRefinementEngine]: Strategy WOLF found a feasible trace [2021-11-17 01:54:30,255 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-11-17 01:54:30,256 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-17 01:54:30,297 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Ended with exit code 0 [2021-11-17 01:54:30,471 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 01:54:30,475 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1] [2021-11-17 01:54:30,477 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-17 01:54:30,497 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:54:30,498 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:54:30,498 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:54:30,499 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:54:30,499 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:54:30,499 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:54:30,500 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:54:30,500 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:54:30,500 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:54:30,501 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:54:30,501 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:54:30,501 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:54:30,501 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:54:30,502 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-17 01:54:30,577 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.11 01:54:30 BoogieIcfgContainer [2021-11-17 01:54:30,577 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-17 01:54:30,578 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-17 01:54:30,578 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-17 01:54:30,578 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-17 01:54:30,578 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.11 01:54:25" (3/4) ... [2021-11-17 01:54:30,580 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-11-17 01:54:30,580 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-17 01:54:30,581 INFO L158 Benchmark]: Toolchain (without parser) took 6519.98ms. Allocated memory was 71.3MB in the beginning and 153.1MB in the end (delta: 81.8MB). Free memory was 52.3MB in the beginning and 57.3MB in the end (delta: -5.0MB). Peak memory consumption was 75.3MB. Max. memory is 16.1GB. [2021-11-17 01:54:30,581 INFO L158 Benchmark]: CDTParser took 0.24ms. Allocated memory is still 71.3MB. Free memory is still 53.7MB. There was no memory consumed. Max. memory is 16.1GB. [2021-11-17 01:54:30,581 INFO L158 Benchmark]: CACSL2BoogieTranslator took 524.31ms. Allocated memory is still 71.3MB. Free memory was 52.2MB in the beginning and 34.1MB in the end (delta: 18.1MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2021-11-17 01:54:30,582 INFO L158 Benchmark]: Boogie Procedure Inliner took 84.47ms. Allocated memory was 71.3MB in the beginning and 102.8MB in the end (delta: 31.5MB). Free memory was 34.1MB in the beginning and 82.1MB in the end (delta: -48.0MB). Peak memory consumption was 7.0MB. Max. memory is 16.1GB. [2021-11-17 01:54:30,582 INFO L158 Benchmark]: Boogie Preprocessor took 42.15ms. Allocated memory is still 102.8MB. Free memory was 82.1MB in the beginning and 78.3MB in the end (delta: 3.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-17 01:54:30,582 INFO L158 Benchmark]: RCFGBuilder took 969.94ms. Allocated memory is still 102.8MB. Free memory was 78.3MB in the beginning and 71.6MB in the end (delta: 6.7MB). Peak memory consumption was 30.8MB. Max. memory is 16.1GB. [2021-11-17 01:54:30,583 INFO L158 Benchmark]: TraceAbstraction took 4879.65ms. Allocated memory was 102.8MB in the beginning and 153.1MB in the end (delta: 50.3MB). Free memory was 71.1MB in the beginning and 57.3MB in the end (delta: 13.8MB). Peak memory consumption was 63.6MB. Max. memory is 16.1GB. [2021-11-17 01:54:30,583 INFO L158 Benchmark]: Witness Printer took 2.63ms. Allocated memory is still 153.1MB. Free memory is still 57.3MB. There was no memory consumed. Max. memory is 16.1GB. [2021-11-17 01:54:30,585 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.24ms. Allocated memory is still 71.3MB. Free memory is still 53.7MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 524.31ms. Allocated memory is still 71.3MB. Free memory was 52.2MB in the beginning and 34.1MB in the end (delta: 18.1MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 84.47ms. Allocated memory was 71.3MB in the beginning and 102.8MB in the end (delta: 31.5MB). Free memory was 34.1MB in the beginning and 82.1MB in the end (delta: -48.0MB). Peak memory consumption was 7.0MB. Max. memory is 16.1GB. * Boogie Preprocessor took 42.15ms. Allocated memory is still 102.8MB. Free memory was 82.1MB in the beginning and 78.3MB in the end (delta: 3.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 969.94ms. Allocated memory is still 102.8MB. Free memory was 78.3MB in the beginning and 71.6MB in the end (delta: 6.7MB). Peak memory consumption was 30.8MB. Max. memory is 16.1GB. * TraceAbstraction took 4879.65ms. Allocated memory was 102.8MB in the beginning and 153.1MB in the end (delta: 50.3MB). Free memory was 71.1MB in the beginning and 57.3MB in the end (delta: 13.8MB). Peak memory consumption was 63.6MB. Max. memory is 16.1GB. * Witness Printer took 2.63ms. Allocated memory is still 153.1MB. Free memory is still 57.3MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 860]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 1170. Possible FailurePath: [L883] int ldv_state_variable_1 ; [L884] struct platform_device *s3c_hwmon_driver_group0 ; [L885] int LDV_IN_INTERRUPT = 1; [L886] int ref_cnt ; [L887] int ldv_state_variable_0 ; [L1170-L1172] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1188] int ldv_retval_0 ; [L1189] int ldv_retval_1 ; [L1366] int ldv_count_1 = 0; [L1367] int ldv_count_2 = 0; [L1375] int ldv_call_dev_attr_of_sensor_device_attribute = 0; VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1203] int tmp ; [L1204] int tmp___0 ; [L1205] int tmp___1 ; [L1207] FCALL ldv_initialize() [L1208] ldv_state_variable_1 = 0 [L1209] ref_cnt = 0 [L1210] ldv_state_variable_0 = 1 VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1212] tmp = __VERIFIER_nondet_int() [L1214] case 0: [L1244] case 1: VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp=1] [L1245] COND TRUE ldv_state_variable_0 != 0 [L1246] tmp___1 = __VERIFIER_nondet_int() [L1248] case 0: [L1256] case 1: VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp=1, tmp___1=1] [L1257] COND TRUE ldv_state_variable_0 == 1 [L1258] CALL, EXPR s3c_hwmon_init() [L1175] int tmp ; [L1177] CALL, EXPR platform_driver_register(& s3c_hwmon_driver) [L1441] return __VERIFIER_nondet_int(); [L1177] RET, EXPR platform_driver_register(& s3c_hwmon_driver) [L1177] tmp = platform_driver_register(& s3c_hwmon_driver) [L1178] return (tmp); VAL [\result=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp=0] [L1258] RET, EXPR s3c_hwmon_init() [L1258] ldv_retval_1 = s3c_hwmon_init() [L1259] COND TRUE ldv_retval_1 == 0 [L1260] ldv_state_variable_0 = 3 [L1261] ldv_state_variable_1 = 1 [L1262] CALL ldv_initialize_platform_driver_1() [L1194] void *tmp ; VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1196] CALL, EXPR ldv_zalloc(624U) VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L824] void *p ; [L825] void *tmp ; [L826] int tmp___0 ; [L828] tmp___0 = __VERIFIER_nondet_int() [L829] COND TRUE tmp___0 != 0 [L830] return (0); VAL [\old(size)=624, \result={0:0}, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, size=624, tmp___0=2147483648] [L1196] RET, EXPR ldv_zalloc(624U) VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_zalloc(624U)={0:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1196] tmp = ldv_zalloc(624U) [L1197] s3c_hwmon_driver_group0 = (struct platform_device *)tmp VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp={0:0}] [L1262] RET ldv_initialize_platform_driver_1() [L1265] COND FALSE !(ldv_retval_1 != 0) VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp=1, tmp___1=1] [L1212] tmp = __VERIFIER_nondet_int() [L1214] case 0: VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp=0, tmp___1=1] [L1215] COND TRUE ldv_state_variable_1 != 0 [L1216] tmp___0 = __VERIFIER_nondet_int() [L1218] case 0: VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp=0, tmp___0=0, tmp___1=1] [L1219] COND TRUE ldv_state_variable_1 == 1 [L1220] CALL s3c_hwmon_probe(s3c_hwmon_driver_group0) [L1040] struct s3c_hwmon_pdata *pdata ; [L1041] struct s3c_hwmon *hwmon ; [L1042] int ret ; [L1043] int i ; [L1044] void *tmp ; [L1045] struct lock_class_key __key ; [L1046] long tmp___0 ; [L1047] long tmp___1 ; [L1048] long tmp___2 ; [L1049] long tmp___3 ; [L1050] struct s3c_hwmon_chcfg *cfg ; [L1052] EXPR dev->dev.platform_data [L1052] pdata = (struct s3c_hwmon_pdata *)dev->dev.platform_data [L1053] ret = 0 VAL [__key={532:0}, __this_module={0:0}, dev={0:0}, dev={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={-9223372036854775808:0}, ref_cnt=0, ret=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1054] COND FALSE !((unsigned long )pdata == (unsigned long )((struct s3c_hwmon_pdata *)0)) [L1059] CALL, EXPR ldv_kzalloc_9(800U, 208U) [L1324] void *tmp ; VAL [\old(flags)=208, \old(size)=800, __this_module={0:0}, flags=208, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, size=800] [L1326] CALL, EXPR ldv_zalloc(size) VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L824] void *p ; [L825] void *tmp ; [L826] int tmp___0 ; [L828] tmp___0 = __VERIFIER_nondet_int() [L829] COND FALSE !(tmp___0 != 0) [L832] EXPR, FCALL calloc(1U, size) [L832] tmp = calloc(1U, size) [L833] p = tmp VAL [\old(size)=800, __this_module={0:0}, calloc(1U, size)={517:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, p={517:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, size=800, tmp={517:0}, tmp___0=0] [L834] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L801] COND FALSE !(!cond) VAL [\old(cond)=1, __this_module={0:0}, cond=1, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L834] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(size)=800, __this_module={0:0}, calloc(1U, size)={517:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, p={517:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, size=800, tmp={517:0}, tmp___0=0] [L835] CALL, EXPR ldv_is_err(p) VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={517:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1333] return ((unsigned long )ptr > 2012UL); VAL [\result=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={517:0}, ptr={517:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L835] RET, EXPR ldv_is_err(p) VAL [\old(size)=800, __this_module={0:0}, calloc(1U, size)={517:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_is_err(p)=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, p={517:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, size=800, tmp={517:0}, tmp___0=0] [L835] CALL assume_abort_if_not(ldv_is_err(p) == 0) VAL [\old(cond)=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L801] COND FALSE !(!cond) VAL [\old(cond)=1, __this_module={0:0}, cond=1, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L835] RET assume_abort_if_not(ldv_is_err(p) == 0) VAL [\old(size)=800, __this_module={0:0}, calloc(1U, size)={517:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_is_err(p)=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, p={517:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, size=800, tmp={517:0}, tmp___0=0] [L836] return (p); VAL [\old(size)=800, \result={517:0}, __this_module={0:0}, calloc(1U, size)={517:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, p={517:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, size=800, tmp={517:0}, tmp___0=0] [L1326] RET, EXPR ldv_zalloc(size) VAL [\old(flags)=208, \old(size)=800, __this_module={0:0}, flags=208, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_zalloc(size)={517:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, size=800] [L1326] tmp = ldv_zalloc(size) [L1327] return (tmp); VAL [\old(flags)=208, \old(size)=800, \result={517:0}, __this_module={0:0}, flags=208, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, size=800, tmp={517:0}] [L1059] RET, EXPR ldv_kzalloc_9(800U, 208U) [L1059] tmp = ldv_kzalloc_9(800U, 208U) [L1060] hwmon = (struct s3c_hwmon *)tmp VAL [__key={532:0}, __this_module={0:0}, dev={0:0}, dev={0:0}, hwmon={517:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={-9223372036854775808:0}, ref_cnt=0, ret=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp={517:0}] [L1061] COND FALSE !((unsigned long )hwmon == (unsigned long )((struct s3c_hwmon *)0)) [L1066] CALL platform_set_drvdata(dev, (void *)hwmon) [L904] FCALL dev_set_drvdata(& pdev->dev, data) [L1066] RET platform_set_drvdata(dev, (void *)hwmon) [L1067] FCALL __mutex_init(& hwmon->lock, "&hwmon->lock", & __key) [L1068] CALL, EXPR s3c_adc_register(dev, 0, 0, 0U) [L1451] CALL, EXPR ldv_malloc(0UL) VAL [\old(size)=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L806] void *p ; [L807] void *tmp ; [L808] int tmp___0 ; [L810] tmp___0 = __VERIFIER_nondet_int() [L811] COND TRUE tmp___0 != 0 [L812] return (0); VAL [\old(size)=0, \result={0:0}, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, size=0, tmp___0=2147483648] [L1451] RET, EXPR ldv_malloc(0UL) VAL [\old(arg3)=0, __this_module={0:0}, arg0={0:0}, arg0={0:0}, arg1={0:0}, arg1={0:0}, arg2={0:0}, arg2={0:0}, arg3=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_malloc(0UL)={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1451] return ldv_malloc(0UL); [L1068] RET, EXPR s3c_adc_register(dev, 0, 0, 0U) [L1068] hwmon->client = s3c_adc_register(dev, 0, 0, 0U) [L1069] EXPR hwmon->client VAL [__key={532:0}, __this_module={0:0}, dev={0:0}, dev={0:0}, hwmon={517:0}, hwmon->client={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={-9223372036854775808:0}, ref_cnt=0, ret=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp={517:0}] [L1069] CALL, EXPR IS_ERR((void const *)hwmon->client) VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1300] long tmp ; VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1302] CALL, EXPR ldv_is_err(ptr) VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1333] return ((unsigned long )ptr > 2012UL); VAL [\result=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1302] RET, EXPR ldv_is_err(ptr) VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1302] tmp = ldv_is_err(ptr) [L1303] return (tmp); VAL [\result=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp=0] [L1069] RET, EXPR IS_ERR((void const *)hwmon->client) VAL [__key={532:0}, __this_module={0:0}, dev={0:0}, dev={0:0}, hwmon={517:0}, hwmon->client={0:0}, IS_ERR((void const *)hwmon->client)=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={-9223372036854775808:0}, ref_cnt=0, ret=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp={517:0}] [L1069] tmp___1 = IS_ERR((void const *)hwmon->client) [L1070] COND FALSE !(tmp___1 != 0L) [L1077] CALL, EXPR s3c_hwmon_add_raw(& dev->dev) [L935] return (0); VAL [\result=0, __this_module={0:0}, dev={0:12}, dev={0:12}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1077] RET, EXPR s3c_hwmon_add_raw(& dev->dev) [L1077] ret = s3c_hwmon_add_raw(& dev->dev) [L1078] COND FALSE !(ret != 0) [L1082] CALL, EXPR hwmon_device_register(& dev->dev) [L1424] CALL, EXPR ldv_malloc(sizeof(struct device)) VAL [\old(size)=1003, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L806] void *p ; [L807] void *tmp ; [L808] int tmp___0 ; [L810] tmp___0 = __VERIFIER_nondet_int() [L811] COND TRUE tmp___0 != 0 [L812] return (0); VAL [\old(size)=1003, \result={0:0}, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, size=1003, tmp___0=2147483648] [L1424] RET, EXPR ldv_malloc(sizeof(struct device)) VAL [__this_module={0:0}, arg0={0:12}, arg0={0:12}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct device))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1424] return ldv_malloc(sizeof(struct device)); [L1082] RET, EXPR hwmon_device_register(& dev->dev) [L1082] hwmon->hwmon_dev = hwmon_device_register(& dev->dev) [L1083] EXPR hwmon->hwmon_dev VAL [__key={532:0}, __this_module={0:0}, dev={0:0}, dev={0:0}, hwmon={517:0}, hwmon->hwmon_dev={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={-9223372036854775808:0}, ref_cnt=0, ret=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp={517:0}, tmp___1=0] [L1083] CALL, EXPR IS_ERR((void const *)hwmon->hwmon_dev) VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1300] long tmp ; VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1302] CALL, EXPR ldv_is_err(ptr) VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1333] return ((unsigned long )ptr > 2012UL); VAL [\result=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1302] RET, EXPR ldv_is_err(ptr) VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1302] tmp = ldv_is_err(ptr) [L1303] return (tmp); VAL [\result=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp=0] [L1083] RET, EXPR IS_ERR((void const *)hwmon->hwmon_dev) VAL [__key={532:0}, __this_module={0:0}, dev={0:0}, dev={0:0}, hwmon={517:0}, hwmon->hwmon_dev={0:0}, IS_ERR((void const *)hwmon->hwmon_dev)=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={-9223372036854775808:0}, ref_cnt=0, ret=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp={517:0}, tmp___1=0] [L1083] tmp___3 = IS_ERR((void const *)hwmon->hwmon_dev) [L1084] COND FALSE !(tmp___3 != 0L) [L1091] i = 0 VAL [__key={532:0}, __this_module={0:0}, dev={0:0}, dev={0:0}, hwmon={517:0}, i=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={-9223372036854775808:0}, ref_cnt=0, ret=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp={517:0}, tmp___1=0, tmp___3=0] [L1130] COND TRUE (unsigned int )i <= 7U VAL [__key={532:0}, __this_module={0:0}, dev={0:0}, dev={0:0}, hwmon={517:0}, i=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={-9223372036854775808:0}, ref_cnt=0, ret=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp={517:0}, tmp___1=0, tmp___3=0] [L1094] EXPR pdata->in[i] [L1094] cfg = pdata->in[i] [L1095] COND FALSE !((unsigned long )cfg == (unsigned long )((struct s3c_hwmon_chcfg *)0)) [L1099] EXPR cfg->mult VAL [__key={532:0}, __this_module={0:0}, cfg={-9223372036854775808:0}, cfg->mult=-2147483648, dev={0:0}, dev={0:0}, hwmon={517:0}, i=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={-9223372036854775808:0}, ref_cnt=0, ret=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp={517:0}, tmp___1=0, tmp___3=0] [L1099] COND TRUE cfg->mult > 65535U [L1104] EXPR cfg->div VAL [__key={532:0}, __this_module={0:0}, cfg={-9223372036854775808:0}, cfg->div=-2147483648, dev={0:0}, dev={0:0}, hwmon={517:0}, i=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={-9223372036854775808:0}, ref_cnt=0, ret=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp={517:0}, tmp___1=0, tmp___3=0] [L1104] COND FALSE !(cfg->div == 0U) [L1109] EXPR pdata->in[i] [L1109-L1110] CALL s3c_hwmon_create_attr(& dev->dev, pdata->in[i], (struct s3c_hwmon_attr *)(& hwmon->attrs) + (unsigned int )i, i) [L997] struct sensor_device_attribute *attr ; [L998] int ret ; [L1001] attr = & attrs->in [L1002] attr->index = channel [L1003] attr->dev_attr.attr.name = (char const *)(& attrs->in_name) [L1004] attr->dev_attr.attr.mode = 292U [L1005] attr->dev_attr.show = & s3c_hwmon_ch_show [L1006] CALL ldv_device_create_file_7(dev, (struct device_attribute const *)(& attr->dev_attr)) [L1308] int tmp ; VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_func_arg1={0:12}, ldv_func_arg1={0:12}, ldv_func_arg2={517:168}, ldv_func_arg2={517:168}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1310] CALL ldv_device_create_file_dev_attr_of_sensor_device_attribute() VAL [\old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1378] int tmp ; VAL [\old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1380] COND TRUE ldv_call_dev_attr_of_sensor_device_attribute == 0 [L1381] ldv_count_2 = ldv_count_2 + 1 [L1382] ldv_call_dev_attr_of_sensor_device_attribute = 1 VAL [\old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=1, ldv_count_1=0, ldv_count_2=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1383] COND FALSE !(ldv_count_1 >= ldv_count_2) VAL [\old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=1, ldv_count_1=0, ldv_count_2=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1385] CALL ldv_error() VAL [\old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=1, ldv_count_1=0, ldv_count_2=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L860] reach_error() VAL [\old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=1, ldv_count_1=0, ldv_count_2=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 16 procedures, 182 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 4.7s, OverallIterations: 3, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 330 SdHoareTripleChecker+Valid, 0.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 316 mSDsluCounter, 2468 SdHoareTripleChecker+Invalid, 0.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1944 mSDsCounter, 31 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 64 IncrementalHoareTripleChecker+Invalid, 95 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 31 mSolverCounterUnsat, 524 mSDtfsCounter, 64 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 314 GetRequests, 304 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=190occurred in iteration=2, InterpolantAutomatonStates: 10, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.0s AutomataMinimizationTime, 2 MinimizatonAttempts, 172 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 1.3s SatisfiabilityAnalysisTime, 0.9s InterpolantComputationTime, 262 NumberOfCodeBlocks, 262 NumberOfCodeBlocksAsserted, 3 NumberOfCheckSat, 312 ConstructedInterpolants, 0 QuantifiedInterpolants, 374 SizeOfPredicates, 8 NumberOfNonLiveVariables, 765 ConjunctsInSsa, 15 ConjunctsInUnsatCore, 4 InterpolantComputations, 4 PerfectInterpolantSequences, 60/60 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-11-17 01:54:30,632 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: UNKNOWN: Overapproximated counterexample