./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0f8a17c6 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 14cb0b0179e79f0e2d385464cbe440f1c78ee76831b4c47fbbc7c2a57322304c --- Real Ultimate output --- This is Ultimate 0.2.1-dev-0f8a17c [2021-11-19 05:19:58,753 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-19 05:19:58,757 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-19 05:19:58,829 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-19 05:19:58,830 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-19 05:19:58,837 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-19 05:19:58,839 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-19 05:19:58,845 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-19 05:19:58,848 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-19 05:19:58,858 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-19 05:19:58,859 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-19 05:19:58,861 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-19 05:19:58,862 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-19 05:19:58,863 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-19 05:19:58,865 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-19 05:19:58,867 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-19 05:19:58,869 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-19 05:19:58,870 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-19 05:19:58,877 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-19 05:19:58,890 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-19 05:19:58,893 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-19 05:19:58,895 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-19 05:19:58,902 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-19 05:19:58,903 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-19 05:19:58,908 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-19 05:19:58,908 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-19 05:19:58,909 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-19 05:19:58,911 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-19 05:19:58,912 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-19 05:19:58,914 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-19 05:19:58,914 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-19 05:19:58,915 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-19 05:19:58,918 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-19 05:19:58,919 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-19 05:19:58,921 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-19 05:19:58,922 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-19 05:19:58,922 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-19 05:19:58,923 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-19 05:19:58,923 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-19 05:19:58,924 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-19 05:19:58,925 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-19 05:19:58,926 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/config/svcomp-Reach-64bit-Automizer_Default.epf [2021-11-19 05:19:58,984 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-19 05:19:58,985 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-19 05:19:58,985 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-19 05:19:58,986 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-19 05:19:58,987 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-19 05:19:58,987 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-19 05:19:58,989 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-19 05:19:58,989 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-19 05:19:58,989 INFO L138 SettingsManager]: * Use SBE=true [2021-11-19 05:19:58,990 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-19 05:19:58,991 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-19 05:19:58,991 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-19 05:19:58,992 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-19 05:19:58,992 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-19 05:19:58,992 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-19 05:19:58,993 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-19 05:19:58,993 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-19 05:19:58,993 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-19 05:19:58,994 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-19 05:19:58,994 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-19 05:19:58,994 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-19 05:19:58,994 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-19 05:19:58,995 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-19 05:19:58,995 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-19 05:19:58,995 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-19 05:19:58,996 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-19 05:19:58,996 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-19 05:19:58,996 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-19 05:19:58,997 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-19 05:19:58,999 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-19 05:19:58,999 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-19 05:19:58,999 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 14cb0b0179e79f0e2d385464cbe440f1c78ee76831b4c47fbbc7c2a57322304c [2021-11-19 05:19:59,398 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-19 05:19:59,442 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-19 05:19:59,446 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-19 05:19:59,447 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-19 05:19:59,448 INFO L275 PluginConnector]: CDTParser initialized [2021-11-19 05:19:59,450 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/../../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i [2021-11-19 05:19:59,548 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/data/612cffe21/8df19bd6dc8b4bba8591264f6abae750/FLAG2fa464fea [2021-11-19 05:20:00,280 INFO L306 CDTParser]: Found 1 translation units. [2021-11-19 05:20:00,284 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i [2021-11-19 05:20:00,305 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/data/612cffe21/8df19bd6dc8b4bba8591264f6abae750/FLAG2fa464fea [2021-11-19 05:20:00,490 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/data/612cffe21/8df19bd6dc8b4bba8591264f6abae750 [2021-11-19 05:20:00,493 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-19 05:20:00,497 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-19 05:20:00,500 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-19 05:20:00,500 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-19 05:20:00,504 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-19 05:20:00,505 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 05:20:00" (1/1) ... [2021-11-19 05:20:00,507 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5ded26a6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 05:20:00, skipping insertion in model container [2021-11-19 05:20:00,507 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 05:20:00" (1/1) ... [2021-11-19 05:20:00,534 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-19 05:20:00,622 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-19 05:20:01,056 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i[24075,24088] [2021-11-19 05:20:01,261 INFO L207 PostProcessor]: Analyzing one entry point: main [2021-11-19 05:20:01,287 INFO L203 MainTranslator]: Completed pre-run [2021-11-19 05:20:01,340 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i[24075,24088] [2021-11-19 05:20:01,425 INFO L207 PostProcessor]: Analyzing one entry point: main [2021-11-19 05:20:01,454 INFO L208 MainTranslator]: Completed translation [2021-11-19 05:20:01,455 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 05:20:01 WrapperNode [2021-11-19 05:20:01,455 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-19 05:20:01,457 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-19 05:20:01,457 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-19 05:20:01,457 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-19 05:20:01,467 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 05:20:01" (1/1) ... [2021-11-19 05:20:01,492 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 05:20:01" (1/1) ... [2021-11-19 05:20:01,544 INFO L137 Inliner]: procedures = 78, calls = 165, calls flagged for inlining = 30, calls inlined = 26, statements flattened = 506 [2021-11-19 05:20:01,545 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-19 05:20:01,546 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-19 05:20:01,551 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-19 05:20:01,551 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-19 05:20:01,561 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 05:20:01" (1/1) ... [2021-11-19 05:20:01,562 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 05:20:01" (1/1) ... [2021-11-19 05:20:01,590 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 05:20:01" (1/1) ... [2021-11-19 05:20:01,599 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 05:20:01" (1/1) ... [2021-11-19 05:20:01,633 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 05:20:01" (1/1) ... [2021-11-19 05:20:01,651 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 05:20:01" (1/1) ... [2021-11-19 05:20:01,655 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 05:20:01" (1/1) ... [2021-11-19 05:20:01,662 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-19 05:20:01,663 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-19 05:20:01,663 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-19 05:20:01,663 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-19 05:20:01,678 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 05:20:01" (1/1) ... [2021-11-19 05:20:01,686 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-19 05:20:01,703 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/z3 [2021-11-19 05:20:01,722 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-19 05:20:01,736 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-19 05:20:01,791 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_hwmon_remove_raw [2021-11-19 05:20:01,791 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_hwmon_remove_raw [2021-11-19 05:20:01,791 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-19 05:20:01,792 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-19 05:20:01,792 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-19 05:20:01,792 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-11-19 05:20:01,792 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-11-19 05:20:01,793 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-11-19 05:20:01,793 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-19 05:20:01,793 INFO L130 BoogieDeclarations]: Found specification of procedure PTR_ERR [2021-11-19 05:20:01,793 INFO L138 BoogieDeclarations]: Found implementation of procedure PTR_ERR [2021-11-19 05:20:01,793 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err [2021-11-19 05:20:01,794 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err [2021-11-19 05:20:01,794 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-11-19 05:20:01,794 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-11-19 05:20:01,794 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_hwmon_remove_attr [2021-11-19 05:20:01,794 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_hwmon_remove_attr [2021-11-19 05:20:01,795 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-19 05:20:01,795 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-19 05:20:01,795 INFO L130 BoogieDeclarations]: Found specification of procedure platform_get_drvdata [2021-11-19 05:20:01,795 INFO L138 BoogieDeclarations]: Found implementation of procedure platform_get_drvdata [2021-11-19 05:20:01,795 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_device_create_file_dev_attr_of_sensor_device_attribute [2021-11-19 05:20:01,796 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_device_create_file_dev_attr_of_sensor_device_attribute [2021-11-19 05:20:01,796 INFO L130 BoogieDeclarations]: Found specification of procedure hwmon_device_unregister [2021-11-19 05:20:01,796 INFO L138 BoogieDeclarations]: Found implementation of procedure hwmon_device_unregister [2021-11-19 05:20:01,796 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-11-19 05:20:01,797 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-11-19 05:20:01,797 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-11-19 05:20:01,797 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_adc_release [2021-11-19 05:20:01,797 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_adc_release [2021-11-19 05:20:01,797 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-11-19 05:20:01,797 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-11-19 05:20:01,811 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-19 05:20:01,811 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-19 05:20:01,811 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-11-19 05:20:01,811 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-11-19 05:20:01,812 INFO L130 BoogieDeclarations]: Found specification of procedure device_remove_file [2021-11-19 05:20:01,812 INFO L138 BoogieDeclarations]: Found implementation of procedure device_remove_file [2021-11-19 05:20:01,813 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-19 05:20:01,813 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-19 05:20:01,813 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2021-11-19 05:20:01,813 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2021-11-19 05:20:02,123 INFO L236 CfgBuilder]: Building ICFG [2021-11-19 05:20:02,133 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-19 05:20:02,267 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-11-19 05:20:02,798 INFO L277 CfgBuilder]: Performing block encoding [2021-11-19 05:20:02,808 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-19 05:20:02,809 INFO L301 CfgBuilder]: Removed 0 assume(true) statements. [2021-11-19 05:20:02,811 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 05:20:02 BoogieIcfgContainer [2021-11-19 05:20:02,812 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-19 05:20:02,814 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-19 05:20:02,816 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-19 05:20:02,819 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-19 05:20:02,820 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 19.11 05:20:00" (1/3) ... [2021-11-19 05:20:02,821 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1cac6b6a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 05:20:02, skipping insertion in model container [2021-11-19 05:20:02,823 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 05:20:01" (2/3) ... [2021-11-19 05:20:02,823 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1cac6b6a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 05:20:02, skipping insertion in model container [2021-11-19 05:20:02,824 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 05:20:02" (3/3) ... [2021-11-19 05:20:02,826 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i [2021-11-19 05:20:02,834 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-19 05:20:02,835 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-19 05:20:02,893 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-19 05:20:02,902 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-19 05:20:02,902 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-19 05:20:02,932 INFO L276 IsEmpty]: Start isEmpty. Operand has 183 states, 133 states have (on average 1.2932330827067668) internal successors, (172), 139 states have internal predecessors, (172), 34 states have call successors, (34), 15 states have call predecessors, (34), 14 states have return successors, (31), 31 states have call predecessors, (31), 31 states have call successors, (31) [2021-11-19 05:20:02,945 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2021-11-19 05:20:02,945 INFO L506 BasicCegarLoop]: Found error trace [2021-11-19 05:20:02,946 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-19 05:20:02,947 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-19 05:20:02,953 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-19 05:20:02,954 INFO L85 PathProgramCache]: Analyzing trace with hash -630996910, now seen corresponding path program 1 times [2021-11-19 05:20:02,965 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-19 05:20:02,966 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1270784489] [2021-11-19 05:20:02,966 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-19 05:20:02,967 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-19 05:20:03,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-19 05:20:03,376 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2021-11-19 05:20:03,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-19 05:20:03,399 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2021-11-19 05:20:03,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-19 05:20:03,414 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-11-19 05:20:03,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-19 05:20:03,451 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-19 05:20:03,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-19 05:20:03,468 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2021-11-19 05:20:03,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-19 05:20:03,492 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2021-11-19 05:20:03,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-19 05:20:03,520 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-19 05:20:03,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-19 05:20:03,530 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-19 05:20:03,531 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-19 05:20:03,531 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1270784489] [2021-11-19 05:20:03,532 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1270784489] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-19 05:20:03,533 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-19 05:20:03,533 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-19 05:20:03,535 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1512102787] [2021-11-19 05:20:03,536 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-19 05:20:03,541 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-19 05:20:03,541 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-19 05:20:03,572 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-19 05:20:03,573 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2021-11-19 05:20:03,576 INFO L87 Difference]: Start difference. First operand has 183 states, 133 states have (on average 1.2932330827067668) internal successors, (172), 139 states have internal predecessors, (172), 34 states have call successors, (34), 15 states have call predecessors, (34), 14 states have return successors, (31), 31 states have call predecessors, (31), 31 states have call successors, (31) Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 4 states have call predecessors, (8), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-11-19 05:20:04,006 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-19 05:20:04,007 INFO L93 Difference]: Finished difference Result 396 states and 531 transitions. [2021-11-19 05:20:04,009 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-19 05:20:04,011 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 4 states have call predecessors, (8), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 70 [2021-11-19 05:20:04,013 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-19 05:20:04,032 INFO L225 Difference]: With dead ends: 396 [2021-11-19 05:20:04,032 INFO L226 Difference]: Without dead ends: 195 [2021-11-19 05:20:04,042 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2021-11-19 05:20:04,050 INFO L933 BasicCegarLoop]: 226 mSDtfsCounter, 119 mSDsluCounter, 300 mSDsCounter, 0 mSdLazyCounter, 96 mSolverCounterSat, 79 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 122 SdHoareTripleChecker+Valid, 526 SdHoareTripleChecker+Invalid, 175 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 79 IncrementalHoareTripleChecker+Valid, 96 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-11-19 05:20:04,057 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [122 Valid, 526 Invalid, 175 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [79 Valid, 96 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-11-19 05:20:04,076 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 195 states. [2021-11-19 05:20:04,125 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 195 to 187. [2021-11-19 05:20:04,133 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 187 states, 142 states have (on average 1.2746478873239437) internal successors, (181), 143 states have internal predecessors, (181), 31 states have call successors, (31), 14 states have call predecessors, (31), 13 states have return successors, (30), 30 states have call predecessors, (30), 30 states have call successors, (30) [2021-11-19 05:20:04,139 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 187 states to 187 states and 242 transitions. [2021-11-19 05:20:04,143 INFO L78 Accepts]: Start accepts. Automaton has 187 states and 242 transitions. Word has length 70 [2021-11-19 05:20:04,144 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-19 05:20:04,145 INFO L470 AbstractCegarLoop]: Abstraction has 187 states and 242 transitions. [2021-11-19 05:20:04,146 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (8), 4 states have call predecessors, (8), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2021-11-19 05:20:04,147 INFO L276 IsEmpty]: Start isEmpty. Operand 187 states and 242 transitions. [2021-11-19 05:20:04,153 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 89 [2021-11-19 05:20:04,157 INFO L506 BasicCegarLoop]: Found error trace [2021-11-19 05:20:04,159 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-19 05:20:04,159 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-19 05:20:04,160 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-19 05:20:04,161 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-19 05:20:04,167 INFO L85 PathProgramCache]: Analyzing trace with hash -733290133, now seen corresponding path program 1 times [2021-11-19 05:20:04,167 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-19 05:20:04,167 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [169137979] [2021-11-19 05:20:04,168 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-19 05:20:04,168 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-19 05:20:04,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-19 05:20:04,558 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2021-11-19 05:20:04,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-19 05:20:04,566 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2021-11-19 05:20:04,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-19 05:20:04,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2021-11-19 05:20:04,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-19 05:20:04,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2021-11-19 05:20:04,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-19 05:20:04,661 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-19 05:20:04,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-19 05:20:04,667 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2021-11-19 05:20:04,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-19 05:20:04,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2021-11-19 05:20:04,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-19 05:20:04,681 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-19 05:20:04,682 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-19 05:20:04,687 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2021-11-19 05:20:04,687 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-19 05:20:04,687 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [169137979] [2021-11-19 05:20:04,688 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [169137979] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-19 05:20:04,688 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-19 05:20:04,688 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-19 05:20:04,688 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1436133388] [2021-11-19 05:20:04,689 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-19 05:20:04,690 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-19 05:20:04,691 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-19 05:20:04,691 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-19 05:20:04,691 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2021-11-19 05:20:04,692 INFO L87 Difference]: Start difference. First operand 187 states and 242 transitions. Second operand has 8 states, 8 states have (on average 7.5) internal successors, (60), 5 states have internal predecessors, (60), 2 states have call successors, (9), 4 states have call predecessors, (9), 2 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2021-11-19 05:20:05,210 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-19 05:20:05,210 INFO L93 Difference]: Finished difference Result 497 states and 670 transitions. [2021-11-19 05:20:05,211 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-19 05:20:05,211 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 7.5) internal successors, (60), 5 states have internal predecessors, (60), 2 states have call successors, (9), 4 states have call predecessors, (9), 2 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 88 [2021-11-19 05:20:05,212 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-19 05:20:05,220 INFO L225 Difference]: With dead ends: 497 [2021-11-19 05:20:05,221 INFO L226 Difference]: Without dead ends: 313 [2021-11-19 05:20:05,223 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=23, Invalid=67, Unknown=0, NotChecked=0, Total=90 [2021-11-19 05:20:05,226 INFO L933 BasicCegarLoop]: 279 mSDtfsCounter, 225 mSDsluCounter, 1041 mSDsCounter, 0 mSdLazyCounter, 261 mSolverCounterSat, 81 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 236 SdHoareTripleChecker+Valid, 1320 SdHoareTripleChecker+Invalid, 342 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 81 IncrementalHoareTripleChecker+Valid, 261 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-11-19 05:20:05,232 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [236 Valid, 1320 Invalid, 342 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [81 Valid, 261 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-11-19 05:20:05,236 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 313 states. [2021-11-19 05:20:05,305 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 313 to 192. [2021-11-19 05:20:05,306 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 192 states, 146 states have (on average 1.2671232876712328) internal successors, (185), 147 states have internal predecessors, (185), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (32), 31 states have call predecessors, (32), 30 states have call successors, (32) [2021-11-19 05:20:05,308 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 192 states to 192 states and 248 transitions. [2021-11-19 05:20:05,308 INFO L78 Accepts]: Start accepts. Automaton has 192 states and 248 transitions. Word has length 88 [2021-11-19 05:20:05,309 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-19 05:20:05,309 INFO L470 AbstractCegarLoop]: Abstraction has 192 states and 248 transitions. [2021-11-19 05:20:05,309 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 7.5) internal successors, (60), 5 states have internal predecessors, (60), 2 states have call successors, (9), 4 states have call predecessors, (9), 2 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2021-11-19 05:20:05,309 INFO L276 IsEmpty]: Start isEmpty. Operand 192 states and 248 transitions. [2021-11-19 05:20:05,315 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 106 [2021-11-19 05:20:05,315 INFO L506 BasicCegarLoop]: Found error trace [2021-11-19 05:20:05,316 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-19 05:20:05,316 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-19 05:20:05,316 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-19 05:20:05,317 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-19 05:20:05,317 INFO L85 PathProgramCache]: Analyzing trace with hash -1622073071, now seen corresponding path program 1 times [2021-11-19 05:20:05,317 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-19 05:20:05,318 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [199026655] [2021-11-19 05:20:05,318 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-19 05:20:05,318 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-19 05:20:05,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-19 05:20:05,466 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-19 05:20:05,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-19 05:20:05,642 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-19 05:20:05,642 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-11-19 05:20:05,643 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-19 05:20:05,645 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-19 05:20:05,649 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1] [2021-11-19 05:20:05,653 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-19 05:20:05,677 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 05:20:05,678 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 05:20:05,678 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 05:20:05,678 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 05:20:05,679 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 05:20:05,679 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 05:20:05,680 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 05:20:05,681 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 05:20:05,681 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 05:20:05,681 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 05:20:05,682 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 05:20:05,682 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 05:20:05,682 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 05:20:05,683 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 05:20:05,683 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 05:20:05,683 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 05:20:05,787 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 19.11 05:20:05 BoogieIcfgContainer [2021-11-19 05:20:05,787 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-19 05:20:05,787 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-19 05:20:05,788 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-19 05:20:05,788 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-19 05:20:05,788 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 05:20:02" (3/4) ... [2021-11-19 05:20:05,792 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-11-19 05:20:05,792 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-19 05:20:05,793 INFO L158 Benchmark]: Toolchain (without parser) took 5298.74ms. Allocated memory was 92.3MB in the beginning and 146.8MB in the end (delta: 54.5MB). Free memory was 50.6MB in the beginning and 58.3MB in the end (delta: -7.7MB). Peak memory consumption was 46.3MB. Max. memory is 16.1GB. [2021-11-19 05:20:05,794 INFO L158 Benchmark]: CDTParser took 0.37ms. Allocated memory is still 92.3MB. Free memory was 69.2MB in the beginning and 69.2MB in the end (delta: 47.3kB). There was no memory consumed. Max. memory is 16.1GB. [2021-11-19 05:20:05,794 INFO L158 Benchmark]: CACSL2BoogieTranslator took 955.76ms. Allocated memory is still 92.3MB. Free memory was 50.4MB in the beginning and 47.1MB in the end (delta: 3.3MB). Peak memory consumption was 4.6MB. Max. memory is 16.1GB. [2021-11-19 05:20:05,795 INFO L158 Benchmark]: Boogie Procedure Inliner took 88.31ms. Allocated memory is still 92.3MB. Free memory was 47.1MB in the beginning and 42.9MB in the end (delta: 4.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2021-11-19 05:20:05,795 INFO L158 Benchmark]: Boogie Preprocessor took 116.51ms. Allocated memory is still 92.3MB. Free memory was 42.9MB in the beginning and 39.5MB in the end (delta: 3.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-19 05:20:05,796 INFO L158 Benchmark]: RCFGBuilder took 1148.89ms. Allocated memory was 92.3MB in the beginning and 121.6MB in the end (delta: 29.4MB). Free memory was 39.3MB in the beginning and 64.4MB in the end (delta: -25.2MB). Peak memory consumption was 15.9MB. Max. memory is 16.1GB. [2021-11-19 05:20:05,797 INFO L158 Benchmark]: TraceAbstraction took 2973.34ms. Allocated memory was 121.6MB in the beginning and 146.8MB in the end (delta: 25.2MB). Free memory was 63.8MB in the beginning and 59.3MB in the end (delta: 4.5MB). Peak memory consumption was 29.9MB. Max. memory is 16.1GB. [2021-11-19 05:20:05,797 INFO L158 Benchmark]: Witness Printer took 4.95ms. Allocated memory is still 146.8MB. Free memory is still 58.3MB. There was no memory consumed. Max. memory is 16.1GB. [2021-11-19 05:20:05,800 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.37ms. Allocated memory is still 92.3MB. Free memory was 69.2MB in the beginning and 69.2MB in the end (delta: 47.3kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 955.76ms. Allocated memory is still 92.3MB. Free memory was 50.4MB in the beginning and 47.1MB in the end (delta: 3.3MB). Peak memory consumption was 4.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 88.31ms. Allocated memory is still 92.3MB. Free memory was 47.1MB in the beginning and 42.9MB in the end (delta: 4.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 116.51ms. Allocated memory is still 92.3MB. Free memory was 42.9MB in the beginning and 39.5MB in the end (delta: 3.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 1148.89ms. Allocated memory was 92.3MB in the beginning and 121.6MB in the end (delta: 29.4MB). Free memory was 39.3MB in the beginning and 64.4MB in the end (delta: -25.2MB). Peak memory consumption was 15.9MB. Max. memory is 16.1GB. * TraceAbstraction took 2973.34ms. Allocated memory was 121.6MB in the beginning and 146.8MB in the end (delta: 25.2MB). Free memory was 63.8MB in the beginning and 59.3MB in the end (delta: 4.5MB). Peak memory consumption was 29.9MB. Max. memory is 16.1GB. * Witness Printer took 4.95ms. Allocated memory is still 146.8MB. Free memory is still 58.3MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 860]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 1170. Possible FailurePath: [L883] int ldv_state_variable_1 ; [L884] struct platform_device *s3c_hwmon_driver_group0 ; [L885] int LDV_IN_INTERRUPT = 1; [L886] int ref_cnt ; [L887] int ldv_state_variable_0 ; [L1170-L1172] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1188] int ldv_retval_0 ; [L1189] int ldv_retval_1 ; [L1366] int ldv_count_1 = 0; [L1367] int ldv_count_2 = 0; [L1375] int ldv_call_dev_attr_of_sensor_device_attribute = 0; VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1203] int tmp ; [L1204] int tmp___0 ; [L1205] int tmp___1 ; [L1207] FCALL ldv_initialize() [L1208] ldv_state_variable_1 = 0 [L1209] ref_cnt = 0 [L1210] ldv_state_variable_0 = 1 VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1212] tmp = __VERIFIER_nondet_int() [L1214] case 0: [L1244] case 1: VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp=1] [L1245] COND TRUE ldv_state_variable_0 != 0 [L1246] tmp___1 = __VERIFIER_nondet_int() [L1248] case 0: [L1256] case 1: VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp=1, tmp___1=1] [L1257] COND TRUE ldv_state_variable_0 == 1 [L1258] CALL, EXPR s3c_hwmon_init() [L1175] int tmp ; [L1177] CALL, EXPR platform_driver_register(& s3c_hwmon_driver) [L1441] return __VERIFIER_nondet_int(); [L1177] RET, EXPR platform_driver_register(& s3c_hwmon_driver) [L1177] tmp = platform_driver_register(& s3c_hwmon_driver) [L1178] return (tmp); VAL [\result=0, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp=0] [L1258] RET, EXPR s3c_hwmon_init() [L1258] ldv_retval_1 = s3c_hwmon_init() [L1259] COND TRUE ldv_retval_1 == 0 [L1260] ldv_state_variable_0 = 3 [L1261] ldv_state_variable_1 = 1 [L1262] CALL ldv_initialize_platform_driver_1() [L1194] void *tmp ; VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1196] CALL, EXPR ldv_zalloc(624U) VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L824] void *p ; [L825] void *tmp ; [L826] int tmp___0 ; [L828] tmp___0 = __VERIFIER_nondet_int() [L829] COND TRUE tmp___0 != 0 [L830] return (0); VAL [\old(size)=624, \result={0:0}, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, size=624, tmp___0=1] [L1196] RET, EXPR ldv_zalloc(624U) VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_zalloc(624U)={0:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1196] tmp = ldv_zalloc(624U) [L1197] s3c_hwmon_driver_group0 = (struct platform_device *)tmp VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp={0:0}] [L1262] RET ldv_initialize_platform_driver_1() [L1265] COND FALSE !(ldv_retval_1 != 0) VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp=1, tmp___1=1] [L1212] tmp = __VERIFIER_nondet_int() [L1214] case 0: VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp=0, tmp___1=1] [L1215] COND TRUE ldv_state_variable_1 != 0 [L1216] tmp___0 = __VERIFIER_nondet_int() [L1218] case 0: VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp=0, tmp___0=0, tmp___1=1] [L1219] COND TRUE ldv_state_variable_1 == 1 [L1220] CALL s3c_hwmon_probe(s3c_hwmon_driver_group0) [L1040] struct s3c_hwmon_pdata *pdata ; [L1041] struct s3c_hwmon *hwmon ; [L1042] int ret ; [L1043] int i ; [L1044] void *tmp ; [L1045] struct lock_class_key __key ; [L1046] long tmp___0 ; [L1047] long tmp___1 ; [L1048] long tmp___2 ; [L1049] long tmp___3 ; [L1050] struct s3c_hwmon_chcfg *cfg ; [L1052] EXPR dev->dev.platform_data [L1052] pdata = (struct s3c_hwmon_pdata *)dev->dev.platform_data [L1053] ret = 0 VAL [__key={22:0}, __this_module={4294967303:4294967300}, dev={0:0}, dev={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={26:-25}, ref_cnt=0, ret=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1054] COND FALSE !((unsigned long )pdata == (unsigned long )((struct s3c_hwmon_pdata *)0)) [L1059] CALL, EXPR ldv_kzalloc_9(800U, 208U) [L1324] void *tmp ; VAL [\old(flags)=208, \old(size)=800, __this_module={4294967303:4294967300}, flags=208, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, size=800] [L1326] CALL, EXPR ldv_zalloc(size) VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L824] void *p ; [L825] void *tmp ; [L826] int tmp___0 ; [L828] tmp___0 = __VERIFIER_nondet_int() [L829] COND FALSE !(tmp___0 != 0) [L832] EXPR, FCALL calloc(1U, size) [L832] tmp = calloc(1U, size) [L833] p = tmp VAL [\old(size)=800, __this_module={4294967303:4294967300}, calloc(1U, size)={-18446744073709551615:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, p={-18446744073709551615:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, size=800, tmp={-18446744073709551615:0}, tmp___0=0] [L834] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L801] COND FALSE !(!cond) VAL [\old(cond)=1, __this_module={4294967303:4294967300}, cond=1, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L834] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(size)=800, __this_module={4294967303:4294967300}, calloc(1U, size)={-18446744073709551615:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, p={-18446744073709551615:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, size=800, tmp={-18446744073709551615:0}, tmp___0=0] [L835] CALL, EXPR ldv_is_err(p) VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={-18446744073709551615:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1333] return ((unsigned long )ptr > 2012UL); VAL [\result=0, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={-18446744073709551615:0}, ptr={-18446744073709551615:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L835] RET, EXPR ldv_is_err(p) VAL [\old(size)=800, __this_module={4294967303:4294967300}, calloc(1U, size)={-18446744073709551615:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_is_err(p)=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, p={-18446744073709551615:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, size=800, tmp={-18446744073709551615:0}, tmp___0=0] [L835] CALL assume_abort_if_not(ldv_is_err(p) == 0) VAL [\old(cond)=1, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L801] COND FALSE !(!cond) VAL [\old(cond)=1, __this_module={4294967303:4294967300}, cond=1, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L835] RET assume_abort_if_not(ldv_is_err(p) == 0) VAL [\old(size)=800, __this_module={4294967303:4294967300}, calloc(1U, size)={-18446744073709551615:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_is_err(p)=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, p={-18446744073709551615:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, size=800, tmp={-18446744073709551615:0}, tmp___0=0] [L836] return (p); VAL [\old(size)=800, \result={-18446744073709551615:0}, __this_module={4294967303:4294967300}, calloc(1U, size)={-18446744073709551615:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, p={-18446744073709551615:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, size=800, tmp={-18446744073709551615:0}, tmp___0=0] [L1326] RET, EXPR ldv_zalloc(size) VAL [\old(flags)=208, \old(size)=800, __this_module={4294967303:4294967300}, flags=208, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_zalloc(size)={-18446744073709551615:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, size=800] [L1326] tmp = ldv_zalloc(size) [L1327] return (tmp); VAL [\old(flags)=208, \old(size)=800, \result={-18446744073709551615:0}, __this_module={4294967303:4294967300}, flags=208, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, size=800, tmp={-18446744073709551615:0}] [L1059] RET, EXPR ldv_kzalloc_9(800U, 208U) [L1059] tmp = ldv_kzalloc_9(800U, 208U) [L1060] hwmon = (struct s3c_hwmon *)tmp VAL [__key={22:0}, __this_module={4294967303:4294967300}, dev={0:0}, dev={0:0}, hwmon={-18446744073709551615:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={26:-25}, ref_cnt=0, ret=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp={-18446744073709551615:0}] [L1061] COND FALSE !((unsigned long )hwmon == (unsigned long )((struct s3c_hwmon *)0)) [L1066] CALL platform_set_drvdata(dev, (void *)hwmon) [L904] FCALL dev_set_drvdata(& pdev->dev, data) [L1066] RET platform_set_drvdata(dev, (void *)hwmon) [L1067] FCALL __mutex_init(& hwmon->lock, "&hwmon->lock", & __key) [L1068] CALL, EXPR s3c_adc_register(dev, 0, 0, 0U) [L1451] CALL, EXPR ldv_malloc(0UL) VAL [\old(size)=0, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L806] void *p ; [L807] void *tmp ; [L808] int tmp___0 ; [L810] tmp___0 = __VERIFIER_nondet_int() [L811] COND TRUE tmp___0 != 0 [L812] return (0); VAL [\old(size)=0, \result={0:0}, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, size=0, tmp___0=-2] [L1451] RET, EXPR ldv_malloc(0UL) VAL [\old(arg3)=0, __this_module={4294967303:4294967300}, arg0={0:0}, arg0={0:0}, arg1={0:0}, arg1={0:0}, arg2={0:0}, arg2={0:0}, arg3=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_malloc(0UL)={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1451] return ldv_malloc(0UL); [L1068] RET, EXPR s3c_adc_register(dev, 0, 0, 0U) [L1068] hwmon->client = s3c_adc_register(dev, 0, 0, 0U) [L1069] EXPR hwmon->client VAL [__key={22:0}, __this_module={4294967303:4294967300}, dev={0:0}, dev={0:0}, hwmon={-18446744073709551615:0}, hwmon->client={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={26:-25}, ref_cnt=0, ret=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp={-18446744073709551615:0}] [L1069] CALL, EXPR IS_ERR((void const *)hwmon->client) VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1300] long tmp ; VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1302] CALL, EXPR ldv_is_err(ptr) VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1333] return ((unsigned long )ptr > 2012UL); VAL [\result=0, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1302] RET, EXPR ldv_is_err(ptr) VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1302] tmp = ldv_is_err(ptr) [L1303] return (tmp); VAL [\result=0, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp=0] [L1069] RET, EXPR IS_ERR((void const *)hwmon->client) VAL [__key={22:0}, __this_module={4294967303:4294967300}, dev={0:0}, dev={0:0}, hwmon={-18446744073709551615:0}, hwmon->client={0:0}, IS_ERR((void const *)hwmon->client)=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={26:-25}, ref_cnt=0, ret=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp={-18446744073709551615:0}] [L1069] tmp___1 = IS_ERR((void const *)hwmon->client) [L1070] COND FALSE !(tmp___1 != 0L) [L1077] CALL, EXPR s3c_hwmon_add_raw(& dev->dev) [L935] return (0); VAL [\result=0, __this_module={4294967303:4294967300}, dev={0:12}, dev={0:12}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1077] RET, EXPR s3c_hwmon_add_raw(& dev->dev) [L1077] ret = s3c_hwmon_add_raw(& dev->dev) [L1078] COND FALSE !(ret != 0) [L1082] CALL, EXPR hwmon_device_register(& dev->dev) [L1424] CALL, EXPR ldv_malloc(sizeof(struct device)) VAL [\old(size)=1003, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L806] void *p ; [L807] void *tmp ; [L808] int tmp___0 ; [L810] tmp___0 = __VERIFIER_nondet_int() [L811] COND TRUE tmp___0 != 0 [L812] return (0); VAL [\old(size)=1003, \result={0:0}, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, size=1003, tmp___0=-3] [L1424] RET, EXPR ldv_malloc(sizeof(struct device)) VAL [__this_module={4294967303:4294967300}, arg0={0:12}, arg0={0:12}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct device))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1424] return ldv_malloc(sizeof(struct device)); [L1082] RET, EXPR hwmon_device_register(& dev->dev) [L1082] hwmon->hwmon_dev = hwmon_device_register(& dev->dev) [L1083] EXPR hwmon->hwmon_dev VAL [__key={22:0}, __this_module={4294967303:4294967300}, dev={0:0}, dev={0:0}, hwmon={-18446744073709551615:0}, hwmon->hwmon_dev={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={26:-25}, ref_cnt=0, ret=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp={-18446744073709551615:0}, tmp___1=0] [L1083] CALL, EXPR IS_ERR((void const *)hwmon->hwmon_dev) VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1300] long tmp ; VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1302] CALL, EXPR ldv_is_err(ptr) VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1333] return ((unsigned long )ptr > 2012UL); VAL [\result=0, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1302] RET, EXPR ldv_is_err(ptr) VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1302] tmp = ldv_is_err(ptr) [L1303] return (tmp); VAL [\result=0, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp=0] [L1083] RET, EXPR IS_ERR((void const *)hwmon->hwmon_dev) VAL [__key={22:0}, __this_module={4294967303:4294967300}, dev={0:0}, dev={0:0}, hwmon={-18446744073709551615:0}, hwmon->hwmon_dev={0:0}, IS_ERR((void const *)hwmon->hwmon_dev)=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={26:-25}, ref_cnt=0, ret=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp={-18446744073709551615:0}, tmp___1=0] [L1083] tmp___3 = IS_ERR((void const *)hwmon->hwmon_dev) [L1084] COND FALSE !(tmp___3 != 0L) [L1091] i = 0 VAL [__key={22:0}, __this_module={4294967303:4294967300}, dev={0:0}, dev={0:0}, hwmon={-18446744073709551615:0}, i=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={26:-25}, ref_cnt=0, ret=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp={-18446744073709551615:0}, tmp___1=0, tmp___3=0] [L1130] COND TRUE (unsigned int )i <= 7U VAL [__key={22:0}, __this_module={4294967303:4294967300}, dev={0:0}, dev={0:0}, hwmon={-18446744073709551615:0}, i=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={26:-25}, ref_cnt=0, ret=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp={-18446744073709551615:0}, tmp___1=0, tmp___3=0] [L1094] EXPR pdata->in[i] [L1094] cfg = pdata->in[i] [L1095] COND FALSE !((unsigned long )cfg == (unsigned long )((struct s3c_hwmon_chcfg *)0)) [L1099] EXPR cfg->mult VAL [__key={22:0}, __this_module={4294967303:4294967300}, cfg={28:-27}, cfg->mult=65536, dev={0:0}, dev={0:0}, hwmon={-18446744073709551615:0}, i=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={26:-25}, ref_cnt=0, ret=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp={-18446744073709551615:0}, tmp___1=0, tmp___3=0] [L1099] COND TRUE cfg->mult > 65535U [L1104] EXPR cfg->div VAL [__key={22:0}, __this_module={4294967303:4294967300}, cfg={28:-27}, cfg->div=4294967297, dev={0:0}, dev={0:0}, hwmon={-18446744073709551615:0}, i=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={26:-25}, ref_cnt=0, ret=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}, tmp={-18446744073709551615:0}, tmp___1=0, tmp___3=0] [L1104] COND FALSE !(cfg->div == 0U) [L1109] EXPR pdata->in[i] [L1109-L1110] CALL s3c_hwmon_create_attr(& dev->dev, pdata->in[i], (struct s3c_hwmon_attr *)(& hwmon->attrs) + (unsigned int )i, i) [L997] struct sensor_device_attribute *attr ; [L998] int ret ; [L1001] attr = & attrs->in [L1002] attr->index = channel [L1003] attr->dev_attr.attr.name = (char const *)(& attrs->in_name) [L1004] attr->dev_attr.attr.mode = 292U [L1005] attr->dev_attr.show = & s3c_hwmon_ch_show [L1006] CALL ldv_device_create_file_7(dev, (struct device_attribute const *)(& attr->dev_attr)) [L1308] int tmp ; VAL [__this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_func_arg1={0:12}, ldv_func_arg1={0:12}, ldv_func_arg2={-18446744073709551615:168}, ldv_func_arg2={-18446744073709551615:168}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1310] CALL ldv_device_create_file_dev_attr_of_sensor_device_attribute() VAL [\old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1378] int tmp ; VAL [\old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1380] COND TRUE ldv_call_dev_attr_of_sensor_device_attribute == 0 [L1381] ldv_count_2 = ldv_count_2 + 1 [L1382] ldv_call_dev_attr_of_sensor_device_attribute = 1 VAL [\old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=1, ldv_count_1=0, ldv_count_2=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1383] COND FALSE !(ldv_count_1 >= ldv_count_2) VAL [\old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=1, ldv_count_1=0, ldv_count_2=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L1385] CALL ldv_error() VAL [\old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=1, ldv_count_1=0, ldv_count_2=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] [L860] reach_error() VAL [\old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={4294967303:4294967300}, ldv_call_dev_attr_of_sensor_device_attribute=1, ldv_count_1=0, ldv_count_2=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={23:0}, s3c_hwmon_driver_group0={0:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 16 procedures, 184 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 2.8s, OverallIterations: 3, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 358 SdHoareTripleChecker+Valid, 0.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 344 mSDsluCounter, 1846 SdHoareTripleChecker+Invalid, 0.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1341 mSDsCounter, 160 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 357 IncrementalHoareTripleChecker+Invalid, 517 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 160 mSolverCounterUnsat, 505 mSDtfsCounter, 357 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 44 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=192occurred in iteration=2, InterpolantAutomatonStates: 12, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 2 MinimizatonAttempts, 129 StatesRemovedByMinimization, 2 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 0.7s InterpolantComputationTime, 263 NumberOfCodeBlocks, 263 NumberOfCodeBlocksAsserted, 3 NumberOfCheckSat, 156 ConstructedInterpolants, 0 QuantifiedInterpolants, 255 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 2 InterpolantComputations, 2 PerfectInterpolantSequences, 30/30 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-11-19 05:20:05,896 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 14cb0b0179e79f0e2d385464cbe440f1c78ee76831b4c47fbbc7c2a57322304c --- Real Ultimate output --- This is Ultimate 0.2.1-dev-0f8a17c [2021-11-19 05:20:08,595 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-19 05:20:08,597 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-19 05:20:08,640 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-19 05:20:08,640 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-19 05:20:08,642 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-19 05:20:08,644 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-19 05:20:08,647 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-19 05:20:08,650 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-19 05:20:08,651 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-19 05:20:08,653 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-19 05:20:08,654 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-19 05:20:08,655 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-19 05:20:08,656 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-19 05:20:08,659 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-19 05:20:08,660 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-19 05:20:08,662 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-19 05:20:08,663 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-19 05:20:08,666 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-19 05:20:08,669 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-19 05:20:08,671 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-19 05:20:08,673 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-19 05:20:08,675 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-19 05:20:08,676 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-19 05:20:08,680 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-19 05:20:08,681 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-19 05:20:08,681 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-19 05:20:08,683 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-19 05:20:08,684 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-19 05:20:08,685 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-19 05:20:08,685 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-19 05:20:08,687 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-19 05:20:08,688 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-19 05:20:08,689 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-19 05:20:08,691 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-19 05:20:08,691 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-19 05:20:08,692 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-19 05:20:08,692 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-19 05:20:08,692 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-19 05:20:08,694 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-19 05:20:08,695 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-19 05:20:08,696 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2021-11-19 05:20:08,726 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-19 05:20:08,726 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-19 05:20:08,727 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-19 05:20:08,727 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-19 05:20:08,728 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-19 05:20:08,728 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-19 05:20:08,729 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-19 05:20:08,729 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-19 05:20:08,729 INFO L138 SettingsManager]: * Use SBE=true [2021-11-19 05:20:08,730 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-19 05:20:08,730 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-19 05:20:08,730 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-19 05:20:08,730 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-19 05:20:08,730 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-19 05:20:08,731 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2021-11-19 05:20:08,731 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2021-11-19 05:20:08,731 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-19 05:20:08,731 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-19 05:20:08,731 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-19 05:20:08,732 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-19 05:20:08,732 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-19 05:20:08,732 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-19 05:20:08,732 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-19 05:20:08,733 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-19 05:20:08,733 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-19 05:20:08,733 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-19 05:20:08,733 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2021-11-19 05:20:08,733 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2021-11-19 05:20:08,734 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-19 05:20:08,734 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-19 05:20:08,734 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-19 05:20:08,734 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-19 05:20:08,734 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-11-19 05:20:08,735 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 14cb0b0179e79f0e2d385464cbe440f1c78ee76831b4c47fbbc7c2a57322304c [2021-11-19 05:20:09,110 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-19 05:20:09,149 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-19 05:20:09,154 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-19 05:20:09,155 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-19 05:20:09,156 INFO L275 PluginConnector]: CDTParser initialized [2021-11-19 05:20:09,158 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/../../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i [2021-11-19 05:20:09,245 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/data/0f1511ae8/34c23a239f444533a835eebe0130e044/FLAG215c9fdf8 [2021-11-19 05:20:09,990 INFO L306 CDTParser]: Found 1 translation units. [2021-11-19 05:20:09,991 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i [2021-11-19 05:20:10,012 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/data/0f1511ae8/34c23a239f444533a835eebe0130e044/FLAG215c9fdf8 [2021-11-19 05:20:10,200 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/data/0f1511ae8/34c23a239f444533a835eebe0130e044 [2021-11-19 05:20:10,203 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-19 05:20:10,207 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-19 05:20:10,213 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-19 05:20:10,213 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-19 05:20:10,223 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-19 05:20:10,224 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 05:20:10" (1/1) ... [2021-11-19 05:20:10,225 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@335cec0a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 05:20:10, skipping insertion in model container [2021-11-19 05:20:10,225 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 19.11 05:20:10" (1/1) ... [2021-11-19 05:20:10,240 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-19 05:20:10,312 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-19 05:20:10,767 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i[24075,24088] [2021-11-19 05:20:10,954 INFO L207 PostProcessor]: Analyzing one entry point: main [2021-11-19 05:20:10,974 INFO L203 MainTranslator]: Completed pre-run [2021-11-19 05:20:11,055 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i[24075,24088] [2021-11-19 05:20:11,187 INFO L207 PostProcessor]: Analyzing one entry point: main [2021-11-19 05:20:11,230 INFO L208 MainTranslator]: Completed translation [2021-11-19 05:20:11,231 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 05:20:11 WrapperNode [2021-11-19 05:20:11,231 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-19 05:20:11,233 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-19 05:20:11,234 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-19 05:20:11,234 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-19 05:20:11,245 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 05:20:11" (1/1) ... [2021-11-19 05:20:11,293 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 05:20:11" (1/1) ... [2021-11-19 05:20:11,367 INFO L137 Inliner]: procedures = 80, calls = 165, calls flagged for inlining = 30, calls inlined = 26, statements flattened = 483 [2021-11-19 05:20:11,372 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-19 05:20:11,373 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-19 05:20:11,373 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-19 05:20:11,373 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-19 05:20:11,385 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 05:20:11" (1/1) ... [2021-11-19 05:20:11,385 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 05:20:11" (1/1) ... [2021-11-19 05:20:11,407 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 05:20:11" (1/1) ... [2021-11-19 05:20:11,407 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 05:20:11" (1/1) ... [2021-11-19 05:20:11,471 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 05:20:11" (1/1) ... [2021-11-19 05:20:11,476 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 05:20:11" (1/1) ... [2021-11-19 05:20:11,495 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 05:20:11" (1/1) ... [2021-11-19 05:20:11,503 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-19 05:20:11,504 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-19 05:20:11,505 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-19 05:20:11,505 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-19 05:20:11,506 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 05:20:11" (1/1) ... [2021-11-19 05:20:11,525 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-19 05:20:11,542 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/z3 [2021-11-19 05:20:11,563 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-19 05:20:11,600 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-19 05:20:11,633 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_hwmon_remove_raw [2021-11-19 05:20:11,634 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_hwmon_remove_raw [2021-11-19 05:20:11,634 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-19 05:20:11,634 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-19 05:20:11,634 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-19 05:20:11,635 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2021-11-19 05:20:11,635 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-11-19 05:20:11,635 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-11-19 05:20:11,635 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-19 05:20:11,636 INFO L130 BoogieDeclarations]: Found specification of procedure PTR_ERR [2021-11-19 05:20:11,636 INFO L138 BoogieDeclarations]: Found implementation of procedure PTR_ERR [2021-11-19 05:20:11,637 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err [2021-11-19 05:20:11,637 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err [2021-11-19 05:20:11,637 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-11-19 05:20:11,637 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-11-19 05:20:11,637 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_hwmon_remove_attr [2021-11-19 05:20:11,638 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_hwmon_remove_attr [2021-11-19 05:20:11,638 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-19 05:20:11,638 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2021-11-19 05:20:11,638 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-19 05:20:11,638 INFO L130 BoogieDeclarations]: Found specification of procedure platform_get_drvdata [2021-11-19 05:20:11,639 INFO L138 BoogieDeclarations]: Found implementation of procedure platform_get_drvdata [2021-11-19 05:20:11,639 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_device_create_file_dev_attr_of_sensor_device_attribute [2021-11-19 05:20:11,639 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_device_create_file_dev_attr_of_sensor_device_attribute [2021-11-19 05:20:11,640 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2021-11-19 05:20:11,640 INFO L130 BoogieDeclarations]: Found specification of procedure hwmon_device_unregister [2021-11-19 05:20:11,640 INFO L138 BoogieDeclarations]: Found implementation of procedure hwmon_device_unregister [2021-11-19 05:20:11,640 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-11-19 05:20:11,640 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-11-19 05:20:11,641 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_adc_release [2021-11-19 05:20:11,641 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_adc_release [2021-11-19 05:20:11,641 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-11-19 05:20:11,641 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-11-19 05:20:11,641 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-19 05:20:11,641 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2021-11-19 05:20:11,642 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2021-11-19 05:20:11,642 INFO L130 BoogieDeclarations]: Found specification of procedure device_remove_file [2021-11-19 05:20:11,642 INFO L138 BoogieDeclarations]: Found implementation of procedure device_remove_file [2021-11-19 05:20:11,643 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-19 05:20:11,643 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-19 05:20:11,643 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2021-11-19 05:20:11,643 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2021-11-19 05:20:11,950 INFO L236 CfgBuilder]: Building ICFG [2021-11-19 05:20:11,953 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-19 05:20:12,135 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-11-19 05:20:13,207 INFO L277 CfgBuilder]: Performing block encoding [2021-11-19 05:20:13,224 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-19 05:20:13,224 INFO L301 CfgBuilder]: Removed 0 assume(true) statements. [2021-11-19 05:20:13,227 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 05:20:13 BoogieIcfgContainer [2021-11-19 05:20:13,227 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-19 05:20:13,230 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-19 05:20:13,231 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-19 05:20:13,234 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-19 05:20:13,235 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 19.11 05:20:10" (1/3) ... [2021-11-19 05:20:13,236 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@56b658c6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 05:20:13, skipping insertion in model container [2021-11-19 05:20:13,237 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 19.11 05:20:11" (2/3) ... [2021-11-19 05:20:13,238 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@56b658c6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 19.11 05:20:13, skipping insertion in model container [2021-11-19 05:20:13,238 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 05:20:13" (3/3) ... [2021-11-19 05:20:13,241 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-stable-af3071a-1-130_7a-drivers--hwmon--s3c-hwmon.ko-entry_point.cil.out.i [2021-11-19 05:20:13,248 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-19 05:20:13,248 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-19 05:20:13,304 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-19 05:20:13,313 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-19 05:20:13,313 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-19 05:20:13,342 INFO L276 IsEmpty]: Start isEmpty. Operand has 181 states, 131 states have (on average 1.297709923664122) internal successors, (170), 137 states have internal predecessors, (170), 34 states have call successors, (34), 15 states have call predecessors, (34), 14 states have return successors, (31), 31 states have call predecessors, (31), 31 states have call successors, (31) [2021-11-19 05:20:13,357 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2021-11-19 05:20:13,357 INFO L506 BasicCegarLoop]: Found error trace [2021-11-19 05:20:13,358 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-19 05:20:13,359 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-19 05:20:13,365 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-19 05:20:13,366 INFO L85 PathProgramCache]: Analyzing trace with hash 366241272, now seen corresponding path program 1 times [2021-11-19 05:20:13,383 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-19 05:20:13,384 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [237390132] [2021-11-19 05:20:13,384 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-19 05:20:13,385 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-19 05:20:13,386 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/mathsat [2021-11-19 05:20:13,392 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-19 05:20:13,426 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2021-11-19 05:20:13,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-19 05:20:13,805 INFO L263 TraceCheckSpWp]: Trace formula consists of 361 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-19 05:20:13,815 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-19 05:20:14,059 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-19 05:20:14,059 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-19 05:20:14,261 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2021-11-19 05:20:14,262 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-19 05:20:14,262 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [237390132] [2021-11-19 05:20:14,263 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [237390132] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-19 05:20:14,264 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-19 05:20:14,264 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2021-11-19 05:20:14,266 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1564347859] [2021-11-19 05:20:14,267 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-19 05:20:14,273 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-19 05:20:14,274 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-19 05:20:14,314 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-19 05:20:14,316 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-19 05:20:14,323 INFO L87 Difference]: Start difference. First operand has 181 states, 131 states have (on average 1.297709923664122) internal successors, (170), 137 states have internal predecessors, (170), 34 states have call successors, (34), 15 states have call predecessors, (34), 14 states have return successors, (31), 31 states have call predecessors, (31), 31 states have call successors, (31) Second operand has 3 states, 3 states have (on average 19.0) internal successors, (57), 3 states have internal predecessors, (57), 2 states have call successors, (14), 2 states have call predecessors, (14), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-11-19 05:20:14,466 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-19 05:20:14,467 INFO L93 Difference]: Finished difference Result 384 states and 516 transitions. [2021-11-19 05:20:14,470 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-19 05:20:14,472 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 19.0) internal successors, (57), 3 states have internal predecessors, (57), 2 states have call successors, (14), 2 states have call predecessors, (14), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 70 [2021-11-19 05:20:14,473 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-19 05:20:14,483 INFO L225 Difference]: With dead ends: 384 [2021-11-19 05:20:14,483 INFO L226 Difference]: Without dead ends: 185 [2021-11-19 05:20:14,489 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 138 GetRequests, 137 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-19 05:20:14,493 INFO L933 BasicCegarLoop]: 230 mSDtfsCounter, 35 mSDsluCounter, 219 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 35 SdHoareTripleChecker+Valid, 449 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-19 05:20:14,495 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [35 Valid, 449 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-19 05:20:14,515 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185 states. [2021-11-19 05:20:14,571 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185 to 185. [2021-11-19 05:20:14,574 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 185 states, 140 states have (on average 1.2785714285714285) internal successors, (179), 141 states have internal predecessors, (179), 31 states have call successors, (31), 14 states have call predecessors, (31), 13 states have return successors, (30), 30 states have call predecessors, (30), 30 states have call successors, (30) [2021-11-19 05:20:14,588 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 185 states to 185 states and 240 transitions. [2021-11-19 05:20:14,591 INFO L78 Accepts]: Start accepts. Automaton has 185 states and 240 transitions. Word has length 70 [2021-11-19 05:20:14,592 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-19 05:20:14,593 INFO L470 AbstractCegarLoop]: Abstraction has 185 states and 240 transitions. [2021-11-19 05:20:14,593 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 19.0) internal successors, (57), 3 states have internal predecessors, (57), 2 states have call successors, (14), 2 states have call predecessors, (14), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-11-19 05:20:14,595 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 240 transitions. [2021-11-19 05:20:14,601 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 89 [2021-11-19 05:20:14,604 INFO L506 BasicCegarLoop]: Found error trace [2021-11-19 05:20:14,607 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-19 05:20:14,629 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/mathsat -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2021-11-19 05:20:14,824 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/mathsat -unsat_core_generation=3 [2021-11-19 05:20:14,824 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-19 05:20:14,825 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-19 05:20:14,826 INFO L85 PathProgramCache]: Analyzing trace with hash -540846863, now seen corresponding path program 1 times [2021-11-19 05:20:14,827 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-19 05:20:14,827 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1254385878] [2021-11-19 05:20:14,828 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-19 05:20:14,828 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-19 05:20:14,828 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/mathsat [2021-11-19 05:20:14,835 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-19 05:20:14,837 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2021-11-19 05:20:15,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-19 05:20:15,146 INFO L263 TraceCheckSpWp]: Trace formula consists of 404 conjuncts, 13 conjunts are in the unsatisfiable core [2021-11-19 05:20:15,153 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-19 05:20:15,543 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2021-11-19 05:20:15,552 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-19 05:20:16,044 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2021-11-19 05:20:16,044 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-19 05:20:16,044 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1254385878] [2021-11-19 05:20:16,044 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1254385878] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-19 05:20:16,045 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-19 05:20:16,045 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6, 6] imperfect sequences [] total 10 [2021-11-19 05:20:16,045 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [375790723] [2021-11-19 05:20:16,045 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-19 05:20:16,047 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2021-11-19 05:20:16,047 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-19 05:20:16,048 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2021-11-19 05:20:16,048 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=69, Unknown=0, NotChecked=0, Total=90 [2021-11-19 05:20:16,048 INFO L87 Difference]: Start difference. First operand 185 states and 240 transitions. Second operand has 10 states, 10 states have (on average 7.3) internal successors, (73), 8 states have internal predecessors, (73), 2 states have call successors, (14), 2 states have call predecessors, (14), 4 states have return successors, (13), 4 states have call predecessors, (13), 2 states have call successors, (13) [2021-11-19 05:20:16,922 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-19 05:20:16,923 INFO L93 Difference]: Finished difference Result 544 states and 741 transitions. [2021-11-19 05:20:16,924 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-19 05:20:16,924 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 7.3) internal successors, (73), 8 states have internal predecessors, (73), 2 states have call successors, (14), 2 states have call predecessors, (14), 4 states have return successors, (13), 4 states have call predecessors, (13), 2 states have call successors, (13) Word has length 88 [2021-11-19 05:20:16,924 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-19 05:20:16,930 INFO L225 Difference]: With dead ends: 544 [2021-11-19 05:20:16,930 INFO L226 Difference]: Without dead ends: 362 [2021-11-19 05:20:16,933 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 176 GetRequests, 167 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=27, Invalid=83, Unknown=0, NotChecked=0, Total=110 [2021-11-19 05:20:16,934 INFO L933 BasicCegarLoop]: 294 mSDtfsCounter, 281 mSDsluCounter, 1725 mSDsCounter, 0 mSdLazyCounter, 55 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 295 SdHoareTripleChecker+Valid, 2019 SdHoareTripleChecker+Invalid, 84 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 55 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2021-11-19 05:20:16,935 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [295 Valid, 2019 Invalid, 84 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 55 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2021-11-19 05:20:16,937 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 362 states. [2021-11-19 05:20:16,963 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 362 to 190. [2021-11-19 05:20:16,963 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 190 states, 144 states have (on average 1.2708333333333333) internal successors, (183), 145 states have internal predecessors, (183), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (32), 31 states have call predecessors, (32), 30 states have call successors, (32) [2021-11-19 05:20:16,966 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 190 states to 190 states and 246 transitions. [2021-11-19 05:20:16,966 INFO L78 Accepts]: Start accepts. Automaton has 190 states and 246 transitions. Word has length 88 [2021-11-19 05:20:16,967 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-19 05:20:16,967 INFO L470 AbstractCegarLoop]: Abstraction has 190 states and 246 transitions. [2021-11-19 05:20:16,967 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 7.3) internal successors, (73), 8 states have internal predecessors, (73), 2 states have call successors, (14), 2 states have call predecessors, (14), 4 states have return successors, (13), 4 states have call predecessors, (13), 2 states have call successors, (13) [2021-11-19 05:20:16,967 INFO L276 IsEmpty]: Start isEmpty. Operand 190 states and 246 transitions. [2021-11-19 05:20:16,972 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2021-11-19 05:20:16,973 INFO L506 BasicCegarLoop]: Found error trace [2021-11-19 05:20:16,973 INFO L514 BasicCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-19 05:20:16,991 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/mathsat -unsat_core_generation=3 (3)] Ended with exit code 0 [2021-11-19 05:20:17,189 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/mathsat -unsat_core_generation=3 [2021-11-19 05:20:17,189 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-19 05:20:17,190 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-19 05:20:17,190 INFO L85 PathProgramCache]: Analyzing trace with hash 1386514478, now seen corresponding path program 1 times [2021-11-19 05:20:17,191 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-19 05:20:17,191 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [899079922] [2021-11-19 05:20:17,191 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-19 05:20:17,191 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-19 05:20:17,192 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/mathsat [2021-11-19 05:20:17,193 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-19 05:20:17,194 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2021-11-19 05:20:18,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-19 05:20:18,438 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-19 05:20:19,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-19 05:20:19,580 INFO L133 FreeRefinementEngine]: Strategy WOLF found a feasible trace [2021-11-19 05:20:19,580 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-11-19 05:20:19,582 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-19 05:20:19,609 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2021-11-19 05:20:19,805 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/mathsat -unsat_core_generation=3 [2021-11-19 05:20:19,809 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1] [2021-11-19 05:20:19,814 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-19 05:20:19,855 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 05:20:19,865 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 05:20:19,866 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 05:20:19,866 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 05:20:19,869 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 05:20:19,870 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 05:20:19,870 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 05:20:19,871 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 05:20:19,872 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 05:20:19,872 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 05:20:19,872 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 05:20:19,873 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 05:20:19,873 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 05:20:19,873 WARN L418 cessorBacktranslator]: Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled [2021-11-19 05:20:20,025 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 19.11 05:20:20 BoogieIcfgContainer [2021-11-19 05:20:20,025 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-19 05:20:20,026 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-19 05:20:20,026 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-19 05:20:20,026 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-19 05:20:20,027 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 19.11 05:20:13" (3/4) ... [2021-11-19 05:20:20,030 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-11-19 05:20:20,030 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-19 05:20:20,032 INFO L158 Benchmark]: Toolchain (without parser) took 9824.31ms. Allocated memory was 60.8MB in the beginning and 100.7MB in the end (delta: 39.8MB). Free memory was 36.5MB in the beginning and 52.5MB in the end (delta: -16.1MB). Peak memory consumption was 23.2MB. Max. memory is 16.1GB. [2021-11-19 05:20:20,032 INFO L158 Benchmark]: CDTParser took 0.36ms. Allocated memory is still 60.8MB. Free memory was 41.7MB in the beginning and 41.7MB in the end (delta: 43.8kB). There was no memory consumed. Max. memory is 16.1GB. [2021-11-19 05:20:20,033 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1019.69ms. Allocated memory was 60.8MB in the beginning and 75.5MB in the end (delta: 14.7MB). Free memory was 36.2MB in the beginning and 52.5MB in the end (delta: -16.3MB). Peak memory consumption was 18.1MB. Max. memory is 16.1GB. [2021-11-19 05:20:20,034 INFO L158 Benchmark]: Boogie Procedure Inliner took 138.62ms. Allocated memory is still 75.5MB. Free memory was 52.5MB in the beginning and 48.6MB in the end (delta: 3.9MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2021-11-19 05:20:20,034 INFO L158 Benchmark]: Boogie Preprocessor took 130.59ms. Allocated memory is still 75.5MB. Free memory was 48.6MB in the beginning and 44.8MB in the end (delta: 3.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-19 05:20:20,035 INFO L158 Benchmark]: RCFGBuilder took 1723.13ms. Allocated memory is still 75.5MB. Free memory was 44.8MB in the beginning and 46.3MB in the end (delta: -1.5MB). Peak memory consumption was 20.4MB. Max. memory is 16.1GB. [2021-11-19 05:20:20,036 INFO L158 Benchmark]: TraceAbstraction took 6794.66ms. Allocated memory was 75.5MB in the beginning and 100.7MB in the end (delta: 25.2MB). Free memory was 45.9MB in the beginning and 52.5MB in the end (delta: -6.6MB). Peak memory consumption was 41.4MB. Max. memory is 16.1GB. [2021-11-19 05:20:20,036 INFO L158 Benchmark]: Witness Printer took 5.07ms. Allocated memory is still 100.7MB. Free memory is still 52.5MB. There was no memory consumed. Max. memory is 16.1GB. [2021-11-19 05:20:20,040 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.36ms. Allocated memory is still 60.8MB. Free memory was 41.7MB in the beginning and 41.7MB in the end (delta: 43.8kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1019.69ms. Allocated memory was 60.8MB in the beginning and 75.5MB in the end (delta: 14.7MB). Free memory was 36.2MB in the beginning and 52.5MB in the end (delta: -16.3MB). Peak memory consumption was 18.1MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 138.62ms. Allocated memory is still 75.5MB. Free memory was 52.5MB in the beginning and 48.6MB in the end (delta: 3.9MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 130.59ms. Allocated memory is still 75.5MB. Free memory was 48.6MB in the beginning and 44.8MB in the end (delta: 3.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 1723.13ms. Allocated memory is still 75.5MB. Free memory was 44.8MB in the beginning and 46.3MB in the end (delta: -1.5MB). Peak memory consumption was 20.4MB. Max. memory is 16.1GB. * TraceAbstraction took 6794.66ms. Allocated memory was 75.5MB in the beginning and 100.7MB in the end (delta: 25.2MB). Free memory was 45.9MB in the beginning and 52.5MB in the end (delta: -6.6MB). Peak memory consumption was 41.4MB. Max. memory is 16.1GB. * Witness Printer took 5.07ms. Allocated memory is still 100.7MB. Free memory is still 52.5MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: Nested struct field access of VarList #Ultimate.meminit_#ptr#1 : $Pointer$ not handled * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 860]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 1170. Possible FailurePath: [L883] int ldv_state_variable_1 ; [L884] struct platform_device *s3c_hwmon_driver_group0 ; [L885] int LDV_IN_INTERRUPT = 1; [L886] int ref_cnt ; [L887] int ldv_state_variable_0 ; [L1170-L1172] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1188] int ldv_retval_0 ; [L1189] int ldv_retval_1 ; [L1366] int ldv_count_1 = 0; [L1367] int ldv_count_2 = 0; [L1375] int ldv_call_dev_attr_of_sensor_device_attribute = 0; VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1203] int tmp ; [L1204] int tmp___0 ; [L1205] int tmp___1 ; [L1207] FCALL ldv_initialize() [L1208] ldv_state_variable_1 = 0 [L1209] ref_cnt = 0 [L1210] ldv_state_variable_0 = 1 VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1212] tmp = __VERIFIER_nondet_int() [L1214] case 0: [L1244] case 1: VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp=1] [L1245] COND TRUE ldv_state_variable_0 != 0 [L1246] tmp___1 = __VERIFIER_nondet_int() [L1248] case 0: [L1256] case 1: VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp=1, tmp___1=1] [L1257] COND TRUE ldv_state_variable_0 == 1 [L1258] CALL, EXPR s3c_hwmon_init() [L1175] int tmp ; [L1177] CALL, EXPR platform_driver_register(& s3c_hwmon_driver) [L1441] return __VERIFIER_nondet_int(); [L1177] RET, EXPR platform_driver_register(& s3c_hwmon_driver) [L1177] tmp = platform_driver_register(& s3c_hwmon_driver) [L1178] return (tmp); VAL [\result=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp=0] [L1258] RET, EXPR s3c_hwmon_init() [L1258] ldv_retval_1 = s3c_hwmon_init() [L1259] COND TRUE ldv_retval_1 == 0 [L1260] ldv_state_variable_0 = 3 [L1261] ldv_state_variable_1 = 1 [L1262] CALL ldv_initialize_platform_driver_1() [L1194] void *tmp ; VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1196] CALL, EXPR ldv_zalloc(624U) VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L824] void *p ; [L825] void *tmp ; [L826] int tmp___0 ; [L828] tmp___0 = __VERIFIER_nondet_int() [L829] COND TRUE tmp___0 != 0 [L830] return (0); VAL [\old(size)=624, \result={0:0}, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, size=624, tmp___0=2147483648] [L1196] RET, EXPR ldv_zalloc(624U) VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_zalloc(624U)={0:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1196] tmp = ldv_zalloc(624U) [L1197] s3c_hwmon_driver_group0 = (struct platform_device *)tmp VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp={0:0}] [L1262] RET ldv_initialize_platform_driver_1() [L1265] COND FALSE !(ldv_retval_1 != 0) VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp=1, tmp___1=1] [L1212] tmp = __VERIFIER_nondet_int() [L1214] case 0: VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp=0, tmp___1=1] [L1215] COND TRUE ldv_state_variable_1 != 0 [L1216] tmp___0 = __VERIFIER_nondet_int() [L1218] case 0: VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp=0, tmp___0=0, tmp___1=1] [L1219] COND TRUE ldv_state_variable_1 == 1 [L1220] CALL s3c_hwmon_probe(s3c_hwmon_driver_group0) [L1040] struct s3c_hwmon_pdata *pdata ; [L1041] struct s3c_hwmon *hwmon ; [L1042] int ret ; [L1043] int i ; [L1044] void *tmp ; [L1045] struct lock_class_key __key ; [L1046] long tmp___0 ; [L1047] long tmp___1 ; [L1048] long tmp___2 ; [L1049] long tmp___3 ; [L1050] struct s3c_hwmon_chcfg *cfg ; [L1052] EXPR dev->dev.platform_data [L1052] pdata = (struct s3c_hwmon_pdata *)dev->dev.platform_data [L1053] ret = 0 VAL [__key={532:0}, __this_module={0:0}, dev={0:0}, dev={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={-9223372036854775808:0}, ref_cnt=0, ret=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1054] COND FALSE !((unsigned long )pdata == (unsigned long )((struct s3c_hwmon_pdata *)0)) [L1059] CALL, EXPR ldv_kzalloc_9(800U, 208U) [L1324] void *tmp ; VAL [\old(flags)=208, \old(size)=800, __this_module={0:0}, flags=208, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, size=800] [L1326] CALL, EXPR ldv_zalloc(size) VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L824] void *p ; [L825] void *tmp ; [L826] int tmp___0 ; [L828] tmp___0 = __VERIFIER_nondet_int() [L829] COND FALSE !(tmp___0 != 0) [L832] EXPR, FCALL calloc(1U, size) [L832] tmp = calloc(1U, size) [L833] p = tmp VAL [\old(size)=800, __this_module={0:0}, calloc(1U, size)={517:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, p={517:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, size=800, tmp={517:0}, tmp___0=0] [L834] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L801] COND FALSE !(!cond) VAL [\old(cond)=1, __this_module={0:0}, cond=1, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L834] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(size)=800, __this_module={0:0}, calloc(1U, size)={517:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, p={517:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, size=800, tmp={517:0}, tmp___0=0] [L835] CALL, EXPR ldv_is_err(p) VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={517:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1333] return ((unsigned long )ptr > 2012UL); VAL [\result=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={517:0}, ptr={517:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L835] RET, EXPR ldv_is_err(p) VAL [\old(size)=800, __this_module={0:0}, calloc(1U, size)={517:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_is_err(p)=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, p={517:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, size=800, tmp={517:0}, tmp___0=0] [L835] CALL assume_abort_if_not(ldv_is_err(p) == 0) VAL [\old(cond)=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L801] COND FALSE !(!cond) VAL [\old(cond)=1, __this_module={0:0}, cond=1, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L835] RET assume_abort_if_not(ldv_is_err(p) == 0) VAL [\old(size)=800, __this_module={0:0}, calloc(1U, size)={517:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_is_err(p)=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, p={517:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, size=800, tmp={517:0}, tmp___0=0] [L836] return (p); VAL [\old(size)=800, \result={517:0}, __this_module={0:0}, calloc(1U, size)={517:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, p={517:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, size=800, tmp={517:0}, tmp___0=0] [L1326] RET, EXPR ldv_zalloc(size) VAL [\old(flags)=208, \old(size)=800, __this_module={0:0}, flags=208, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_zalloc(size)={517:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, size=800] [L1326] tmp = ldv_zalloc(size) [L1327] return (tmp); VAL [\old(flags)=208, \old(size)=800, \result={517:0}, __this_module={0:0}, flags=208, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, size=800, tmp={517:0}] [L1059] RET, EXPR ldv_kzalloc_9(800U, 208U) [L1059] tmp = ldv_kzalloc_9(800U, 208U) [L1060] hwmon = (struct s3c_hwmon *)tmp VAL [__key={532:0}, __this_module={0:0}, dev={0:0}, dev={0:0}, hwmon={517:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={-9223372036854775808:0}, ref_cnt=0, ret=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp={517:0}] [L1061] COND FALSE !((unsigned long )hwmon == (unsigned long )((struct s3c_hwmon *)0)) [L1066] CALL platform_set_drvdata(dev, (void *)hwmon) [L904] FCALL dev_set_drvdata(& pdev->dev, data) [L1066] RET platform_set_drvdata(dev, (void *)hwmon) [L1067] FCALL __mutex_init(& hwmon->lock, "&hwmon->lock", & __key) [L1068] CALL, EXPR s3c_adc_register(dev, 0, 0, 0U) [L1451] CALL, EXPR ldv_malloc(0UL) VAL [\old(size)=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L806] void *p ; [L807] void *tmp ; [L808] int tmp___0 ; [L810] tmp___0 = __VERIFIER_nondet_int() [L811] COND TRUE tmp___0 != 0 [L812] return (0); VAL [\old(size)=0, \result={0:0}, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, size=0, tmp___0=2147483648] [L1451] RET, EXPR ldv_malloc(0UL) VAL [\old(arg3)=0, __this_module={0:0}, arg0={0:0}, arg0={0:0}, arg1={0:0}, arg1={0:0}, arg2={0:0}, arg2={0:0}, arg3=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_malloc(0UL)={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1451] return ldv_malloc(0UL); [L1068] RET, EXPR s3c_adc_register(dev, 0, 0, 0U) [L1068] hwmon->client = s3c_adc_register(dev, 0, 0, 0U) [L1069] EXPR hwmon->client VAL [__key={532:0}, __this_module={0:0}, dev={0:0}, dev={0:0}, hwmon={517:0}, hwmon->client={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={-9223372036854775808:0}, ref_cnt=0, ret=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp={517:0}] [L1069] CALL, EXPR IS_ERR((void const *)hwmon->client) VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1300] long tmp ; VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1302] CALL, EXPR ldv_is_err(ptr) VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1333] return ((unsigned long )ptr > 2012UL); VAL [\result=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1302] RET, EXPR ldv_is_err(ptr) VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1302] tmp = ldv_is_err(ptr) [L1303] return (tmp); VAL [\result=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp=0] [L1069] RET, EXPR IS_ERR((void const *)hwmon->client) VAL [__key={532:0}, __this_module={0:0}, dev={0:0}, dev={0:0}, hwmon={517:0}, hwmon->client={0:0}, IS_ERR((void const *)hwmon->client)=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={-9223372036854775808:0}, ref_cnt=0, ret=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp={517:0}] [L1069] tmp___1 = IS_ERR((void const *)hwmon->client) [L1070] COND FALSE !(tmp___1 != 0L) [L1077] CALL, EXPR s3c_hwmon_add_raw(& dev->dev) [L935] return (0); VAL [\result=0, __this_module={0:0}, dev={0:12}, dev={0:12}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1077] RET, EXPR s3c_hwmon_add_raw(& dev->dev) [L1077] ret = s3c_hwmon_add_raw(& dev->dev) [L1078] COND FALSE !(ret != 0) [L1082] CALL, EXPR hwmon_device_register(& dev->dev) [L1424] CALL, EXPR ldv_malloc(sizeof(struct device)) VAL [\old(size)=1003, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L806] void *p ; [L807] void *tmp ; [L808] int tmp___0 ; [L810] tmp___0 = __VERIFIER_nondet_int() [L811] COND TRUE tmp___0 != 0 [L812] return (0); VAL [\old(size)=1003, \result={0:0}, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, size=1003, tmp___0=2147483648] [L1424] RET, EXPR ldv_malloc(sizeof(struct device)) VAL [__this_module={0:0}, arg0={0:12}, arg0={0:12}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct device))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1424] return ldv_malloc(sizeof(struct device)); [L1082] RET, EXPR hwmon_device_register(& dev->dev) [L1082] hwmon->hwmon_dev = hwmon_device_register(& dev->dev) [L1083] EXPR hwmon->hwmon_dev VAL [__key={532:0}, __this_module={0:0}, dev={0:0}, dev={0:0}, hwmon={517:0}, hwmon->hwmon_dev={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={-9223372036854775808:0}, ref_cnt=0, ret=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp={517:0}, tmp___1=0] [L1083] CALL, EXPR IS_ERR((void const *)hwmon->hwmon_dev) VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1300] long tmp ; VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1302] CALL, EXPR ldv_is_err(ptr) VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1333] return ((unsigned long )ptr > 2012UL); VAL [\result=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1302] RET, EXPR ldv_is_err(ptr) VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_is_err(ptr)=0, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1302] tmp = ldv_is_err(ptr) [L1303] return (tmp); VAL [\result=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ptr={0:0}, ptr={0:0}, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp=0] [L1083] RET, EXPR IS_ERR((void const *)hwmon->hwmon_dev) VAL [__key={532:0}, __this_module={0:0}, dev={0:0}, dev={0:0}, hwmon={517:0}, hwmon->hwmon_dev={0:0}, IS_ERR((void const *)hwmon->hwmon_dev)=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={-9223372036854775808:0}, ref_cnt=0, ret=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp={517:0}, tmp___1=0] [L1083] tmp___3 = IS_ERR((void const *)hwmon->hwmon_dev) [L1084] COND FALSE !(tmp___3 != 0L) [L1091] i = 0 VAL [__key={532:0}, __this_module={0:0}, dev={0:0}, dev={0:0}, hwmon={517:0}, i=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={-9223372036854775808:0}, ref_cnt=0, ret=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp={517:0}, tmp___1=0, tmp___3=0] [L1130] COND TRUE (unsigned int )i <= 7U VAL [__key={532:0}, __this_module={0:0}, dev={0:0}, dev={0:0}, hwmon={517:0}, i=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={-9223372036854775808:0}, ref_cnt=0, ret=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp={517:0}, tmp___1=0, tmp___3=0] [L1094] EXPR pdata->in[i] [L1094] cfg = pdata->in[i] [L1095] COND FALSE !((unsigned long )cfg == (unsigned long )((struct s3c_hwmon_chcfg *)0)) [L1099] EXPR cfg->mult VAL [__key={532:0}, __this_module={0:0}, cfg={-9223372036854775808:0}, cfg->mult=-2147483648, dev={0:0}, dev={0:0}, hwmon={517:0}, i=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={-9223372036854775808:0}, ref_cnt=0, ret=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp={517:0}, tmp___1=0, tmp___3=0] [L1099] COND TRUE cfg->mult > 65535U [L1104] EXPR cfg->div VAL [__key={532:0}, __this_module={0:0}, cfg={-9223372036854775808:0}, cfg->div=-2147483648, dev={0:0}, dev={0:0}, hwmon={517:0}, i=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, pdata={-9223372036854775808:0}, ref_cnt=0, ret=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}, tmp={517:0}, tmp___1=0, tmp___3=0] [L1104] COND FALSE !(cfg->div == 0U) [L1109] EXPR pdata->in[i] [L1109-L1110] CALL s3c_hwmon_create_attr(& dev->dev, pdata->in[i], (struct s3c_hwmon_attr *)(& hwmon->attrs) + (unsigned int )i, i) [L997] struct sensor_device_attribute *attr ; [L998] int ret ; [L1001] attr = & attrs->in [L1002] attr->index = channel [L1003] attr->dev_attr.attr.name = (char const *)(& attrs->in_name) [L1004] attr->dev_attr.attr.mode = 292U [L1005] attr->dev_attr.show = & s3c_hwmon_ch_show [L1006] CALL ldv_device_create_file_7(dev, (struct device_attribute const *)(& attr->dev_attr)) [L1308] int tmp ; VAL [__this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_func_arg1={0:12}, ldv_func_arg1={0:12}, ldv_func_arg2={517:168}, ldv_func_arg2={517:168}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1310] CALL ldv_device_create_file_dev_attr_of_sensor_device_attribute() VAL [\old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1378] int tmp ; VAL [\old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1380] COND TRUE ldv_call_dev_attr_of_sensor_device_attribute == 0 [L1381] ldv_count_2 = ldv_count_2 + 1 [L1382] ldv_call_dev_attr_of_sensor_device_attribute = 1 VAL [\old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=1, ldv_count_1=0, ldv_count_2=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1383] COND FALSE !(ldv_count_1 >= ldv_count_2) VAL [\old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=1, ldv_count_1=0, ldv_count_2=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L1385] CALL ldv_error() VAL [\old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=1, ldv_count_1=0, ldv_count_2=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] [L860] reach_error() VAL [\old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=1, ldv_count_1=0, ldv_count_2=1, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ref_cnt=0, s3c_hwmon_driver={534:0}, s3c_hwmon_driver_group0={0:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 16 procedures, 182 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 6.5s, OverallIterations: 3, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 330 SdHoareTripleChecker+Valid, 0.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 316 mSDsluCounter, 2468 SdHoareTripleChecker+Invalid, 0.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1944 mSDsCounter, 31 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 64 IncrementalHoareTripleChecker+Invalid, 95 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 31 mSolverCounterUnsat, 524 mSDtfsCounter, 64 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 314 GetRequests, 304 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=190occurred in iteration=2, InterpolantAutomatonStates: 10, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 2 MinimizatonAttempts, 172 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 1.5s SatisfiabilityAnalysisTime, 1.4s InterpolantComputationTime, 262 NumberOfCodeBlocks, 262 NumberOfCodeBlocksAsserted, 3 NumberOfCheckSat, 312 ConstructedInterpolants, 0 QuantifiedInterpolants, 374 SizeOfPredicates, 8 NumberOfNonLiveVariables, 765 ConjunctsInSsa, 15 ConjunctsInUnsatCore, 4 InterpolantComputations, 4 PerfectInterpolantSequences, 60/60 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-11-19 05:20:20,092 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5853fe30-39a5-4fed-9c4e-ab2f65f7e351/bin/uautomizer-ZXIjhQolGL/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: UNKNOWN: Overapproximated counterexample