./Ultimate.py --spec /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/properties/unreach-call.prp --file /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-commit-tester/m0_drivers-hwmon-s3c-hwmon-ko--130_7a--af3071a-1.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 84cfde4a Calling Ultimate with: /root/.sdkman/candidates/java/current/bin/java -Dosgi.configuration.area=/storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-commit-tester/m0_drivers-hwmon-s3c-hwmon-ko--130_7a--af3071a-1.i -s /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 4083bfcd7db6f77d1df429f19c85907b2c08abb35764175570b1e2ec14e31561 --- Real Ultimate output --- This is Ultimate 0.2.5-dev-84cfde4 [2024-10-11 15:10:18,322 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-10-11 15:10:18,396 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2024-10-11 15:10:18,402 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-10-11 15:10:18,402 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-10-11 15:10:18,449 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-10-11 15:10:18,450 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-10-11 15:10:18,450 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-10-11 15:10:18,451 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-10-11 15:10:18,452 INFO L153 SettingsManager]: * Use memory slicer=true [2024-10-11 15:10:18,453 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-10-11 15:10:18,453 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-10-11 15:10:18,453 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-10-11 15:10:18,455 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-10-11 15:10:18,455 INFO L153 SettingsManager]: * Use SBE=true [2024-10-11 15:10:18,456 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-10-11 15:10:18,456 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-10-11 15:10:18,459 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-10-11 15:10:18,459 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-10-11 15:10:18,460 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-10-11 15:10:18,460 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-10-11 15:10:18,460 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-10-11 15:10:18,461 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-10-11 15:10:18,461 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-10-11 15:10:18,461 INFO L153 SettingsManager]: * Use constant arrays=true [2024-10-11 15:10:18,461 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-10-11 15:10:18,461 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-10-11 15:10:18,462 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-10-11 15:10:18,462 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-10-11 15:10:18,462 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-10-11 15:10:18,462 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-10-11 15:10:18,463 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-10-11 15:10:18,463 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-10-11 15:10:18,463 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-10-11 15:10:18,463 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-10-11 15:10:18,464 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-10-11 15:10:18,464 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-10-11 15:10:18,466 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-10-11 15:10:18,467 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-10-11 15:10:18,467 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4083bfcd7db6f77d1df429f19c85907b2c08abb35764175570b1e2ec14e31561 [2024-10-11 15:10:18,708 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-10-11 15:10:18,731 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-10-11 15:10:18,734 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-10-11 15:10:18,736 INFO L270 PluginConnector]: Initializing CDTParser... [2024-10-11 15:10:18,736 INFO L274 PluginConnector]: CDTParser initialized [2024-10-11 15:10:18,737 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-commit-tester/m0_drivers-hwmon-s3c-hwmon-ko--130_7a--af3071a-1.i [2024-10-11 15:10:20,207 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-10-11 15:10:20,473 INFO L384 CDTParser]: Found 1 translation units. [2024-10-11 15:10:20,474 INFO L180 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-commit-tester/m0_drivers-hwmon-s3c-hwmon-ko--130_7a--af3071a-1.i [2024-10-11 15:10:20,493 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/data/ca557c322/3682984ed16c49c1b60374266961cea4/FLAGc95bbb79f [2024-10-11 15:10:20,778 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/data/ca557c322/3682984ed16c49c1b60374266961cea4 [2024-10-11 15:10:20,781 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-10-11 15:10:20,782 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-10-11 15:10:20,784 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-10-11 15:10:20,785 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-10-11 15:10:20,791 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-10-11 15:10:20,791 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 11.10 03:10:20" (1/1) ... [2024-10-11 15:10:20,794 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@20fb3701 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.10 03:10:20, skipping insertion in model container [2024-10-11 15:10:20,794 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 11.10 03:10:20" (1/1) ... [2024-10-11 15:10:20,852 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-10-11 15:10:21,285 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-commit-tester/m0_drivers-hwmon-s3c-hwmon-ko--130_7a--af3071a-1.i[36117,36130] [2024-10-11 15:10:21,310 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-10-11 15:10:21,326 INFO L200 MainTranslator]: Completed pre-run [2024-10-11 15:10:21,421 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-commit-tester/m0_drivers-hwmon-s3c-hwmon-ko--130_7a--af3071a-1.i[36117,36130] [2024-10-11 15:10:21,427 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-10-11 15:10:21,461 INFO L204 MainTranslator]: Completed translation [2024-10-11 15:10:21,461 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.10 03:10:21 WrapperNode [2024-10-11 15:10:21,462 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-10-11 15:10:21,463 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-10-11 15:10:21,463 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-10-11 15:10:21,463 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-10-11 15:10:21,471 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.10 03:10:21" (1/1) ... [2024-10-11 15:10:21,497 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.10 03:10:21" (1/1) ... [2024-10-11 15:10:21,551 INFO L138 Inliner]: procedures = 75, calls = 161, calls flagged for inlining = 35, calls inlined = 30, statements flattened = 538 [2024-10-11 15:10:21,552 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-10-11 15:10:21,552 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-10-11 15:10:21,553 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-10-11 15:10:21,553 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-10-11 15:10:21,568 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.10 03:10:21" (1/1) ... [2024-10-11 15:10:21,568 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.10 03:10:21" (1/1) ... [2024-10-11 15:10:21,579 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.10 03:10:21" (1/1) ... [2024-10-11 15:10:21,640 INFO L175 MemorySlicer]: Split 52 memory accesses to 7 slices as follows [2, 4, 2, 20, 1, 3, 20]. 38 percent of accesses are in the largest equivalence class. The 26 initializations are split as follows [2, 4, 0, 0, 0, 0, 20]. The 12 writes are split as follows [0, 0, 0, 12, 0, 0, 0]. [2024-10-11 15:10:21,641 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.10 03:10:21" (1/1) ... [2024-10-11 15:10:21,641 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.10 03:10:21" (1/1) ... [2024-10-11 15:10:21,665 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.10 03:10:21" (1/1) ... [2024-10-11 15:10:21,669 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.10 03:10:21" (1/1) ... [2024-10-11 15:10:21,673 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.10 03:10:21" (1/1) ... [2024-10-11 15:10:21,677 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.10 03:10:21" (1/1) ... [2024-10-11 15:10:21,684 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-10-11 15:10:21,685 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-10-11 15:10:21,685 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-10-11 15:10:21,685 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-10-11 15:10:21,686 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.10 03:10:21" (1/1) ... [2024-10-11 15:10:21,696 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-10-11 15:10:21,717 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 [2024-10-11 15:10:21,733 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-10-11 15:10:21,736 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-10-11 15:10:21,817 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_hwmon_remove_raw [2024-10-11 15:10:21,817 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_hwmon_remove_raw [2024-10-11 15:10:21,817 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-10-11 15:10:21,817 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2024-10-11 15:10:21,818 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#0 [2024-10-11 15:10:21,818 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#1 [2024-10-11 15:10:21,819 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#2 [2024-10-11 15:10:21,819 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#3 [2024-10-11 15:10:21,819 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#4 [2024-10-11 15:10:21,819 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#5 [2024-10-11 15:10:21,819 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#6 [2024-10-11 15:10:21,820 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#0 [2024-10-11 15:10:21,821 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#1 [2024-10-11 15:10:21,821 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#2 [2024-10-11 15:10:21,821 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#3 [2024-10-11 15:10:21,822 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#4 [2024-10-11 15:10:21,822 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#5 [2024-10-11 15:10:21,822 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#6 [2024-10-11 15:10:21,822 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#0 [2024-10-11 15:10:21,822 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#1 [2024-10-11 15:10:21,822 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#2 [2024-10-11 15:10:21,823 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#3 [2024-10-11 15:10:21,823 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#4 [2024-10-11 15:10:21,823 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#5 [2024-10-11 15:10:21,823 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#6 [2024-10-11 15:10:21,824 INFO L130 BoogieDeclarations]: Found specification of procedure PTR_ERR [2024-10-11 15:10:21,824 INFO L138 BoogieDeclarations]: Found implementation of procedure PTR_ERR [2024-10-11 15:10:21,824 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err [2024-10-11 15:10:21,824 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err [2024-10-11 15:10:21,825 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2024-10-11 15:10:21,825 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2024-10-11 15:10:21,825 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_hwmon_remove_attr [2024-10-11 15:10:21,825 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_hwmon_remove_attr [2024-10-11 15:10:21,825 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2024-10-11 15:10:21,825 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#0 [2024-10-11 15:10:21,840 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#1 [2024-10-11 15:10:21,840 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#2 [2024-10-11 15:10:21,840 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#3 [2024-10-11 15:10:21,840 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#4 [2024-10-11 15:10:21,840 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#5 [2024-10-11 15:10:21,840 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#6 [2024-10-11 15:10:21,841 INFO L130 BoogieDeclarations]: Found specification of procedure platform_get_drvdata [2024-10-11 15:10:21,841 INFO L138 BoogieDeclarations]: Found implementation of procedure platform_get_drvdata [2024-10-11 15:10:21,841 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_device_create_file_dev_attr_of_sensor_device_attribute [2024-10-11 15:10:21,841 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_device_create_file_dev_attr_of_sensor_device_attribute [2024-10-11 15:10:21,841 INFO L130 BoogieDeclarations]: Found specification of procedure hwmon_device_unregister [2024-10-11 15:10:21,841 INFO L138 BoogieDeclarations]: Found implementation of procedure hwmon_device_unregister [2024-10-11 15:10:21,841 INFO L130 BoogieDeclarations]: Found specification of procedure dev_err [2024-10-11 15:10:21,841 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_err [2024-10-11 15:10:21,841 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#0 [2024-10-11 15:10:21,842 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#1 [2024-10-11 15:10:21,842 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#2 [2024-10-11 15:10:21,842 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#3 [2024-10-11 15:10:21,842 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#4 [2024-10-11 15:10:21,842 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#5 [2024-10-11 15:10:21,842 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#6 [2024-10-11 15:10:21,842 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_adc_release [2024-10-11 15:10:21,842 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_adc_release [2024-10-11 15:10:21,842 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-10-11 15:10:21,843 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-10-11 15:10:21,843 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-10-11 15:10:21,843 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2024-10-11 15:10:21,843 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2024-10-11 15:10:21,844 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2024-10-11 15:10:21,844 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2024-10-11 15:10:21,844 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_handler_precall [2024-10-11 15:10:21,845 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_handler_precall [2024-10-11 15:10:21,845 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2024-10-11 15:10:21,845 INFO L130 BoogieDeclarations]: Found specification of procedure device_remove_file [2024-10-11 15:10:21,845 INFO L138 BoogieDeclarations]: Found implementation of procedure device_remove_file [2024-10-11 15:10:21,846 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-10-11 15:10:21,846 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-10-11 15:10:21,846 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2024-10-11 15:10:21,846 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2024-10-11 15:10:22,064 INFO L238 CfgBuilder]: Building ICFG [2024-10-11 15:10:22,066 INFO L264 CfgBuilder]: Building CFG for each procedure with an implementation [2024-10-11 15:10:22,641 INFO L? ?]: Removed 245 outVars from TransFormulas that were not future-live. [2024-10-11 15:10:22,641 INFO L287 CfgBuilder]: Performing block encoding [2024-10-11 15:10:22,743 INFO L309 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-10-11 15:10:22,746 INFO L314 CfgBuilder]: Removed 2 assume(true) statements. [2024-10-11 15:10:22,747 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.10 03:10:22 BoogieIcfgContainer [2024-10-11 15:10:22,747 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-10-11 15:10:22,749 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-10-11 15:10:22,750 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-10-11 15:10:22,754 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-10-11 15:10:22,754 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 11.10 03:10:20" (1/3) ... [2024-10-11 15:10:22,755 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7e914170 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 11.10 03:10:22, skipping insertion in model container [2024-10-11 15:10:22,755 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.10 03:10:21" (2/3) ... [2024-10-11 15:10:22,756 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7e914170 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 11.10 03:10:22, skipping insertion in model container [2024-10-11 15:10:22,756 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.10 03:10:22" (3/3) ... [2024-10-11 15:10:22,757 INFO L112 eAbstractionObserver]: Analyzing ICFG m0_drivers-hwmon-s3c-hwmon-ko--130_7a--af3071a-1.i [2024-10-11 15:10:22,774 INFO L209 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-10-11 15:10:22,775 INFO L149 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2024-10-11 15:10:22,859 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-10-11 15:10:22,868 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@f8b8a10, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-10-11 15:10:22,869 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-10-11 15:10:22,874 INFO L276 IsEmpty]: Start isEmpty. Operand has 141 states, 91 states have (on average 1.3516483516483517) internal successors, (123), 95 states have internal predecessors, (123), 35 states have call successors, (35), 13 states have call predecessors, (35), 13 states have return successors, (35), 35 states have call predecessors, (35), 35 states have call successors, (35) [2024-10-11 15:10:22,888 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2024-10-11 15:10:22,889 INFO L207 NwaCegarLoop]: Found error trace [2024-10-11 15:10:22,890 INFO L215 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-11 15:10:22,890 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_device_create_file_dev_attr_of_sensor_device_attributeErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_device_create_file_dev_attr_of_sensor_device_attributeErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-10-11 15:10:22,896 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-11 15:10:22,896 INFO L85 PathProgramCache]: Analyzing trace with hash -604371323, now seen corresponding path program 1 times [2024-10-11 15:10:22,903 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-11 15:10:22,904 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1187367823] [2024-10-11 15:10:22,904 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-11 15:10:22,905 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-11 15:10:23,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-11 15:10:23,735 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2024-10-11 15:10:23,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-11 15:10:23,746 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2024-10-11 15:10:23,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-11 15:10:23,788 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2024-10-11 15:10:23,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-11 15:10:23,793 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2024-10-11 15:10:23,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-11 15:10:23,799 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2024-10-11 15:10:23,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-11 15:10:23,802 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2024-10-11 15:10:23,804 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-11 15:10:23,807 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2024-10-11 15:10:23,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-11 15:10:23,816 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2024-10-11 15:10:23,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-11 15:10:23,824 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2024-10-11 15:10:23,824 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-11 15:10:23,824 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1187367823] [2024-10-11 15:10:23,825 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1187367823] provided 0 perfect and 1 imperfect interpolant sequences [2024-10-11 15:10:23,825 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [953796159] [2024-10-11 15:10:23,825 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-11 15:10:23,825 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-10-11 15:10:23,826 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 [2024-10-11 15:10:23,828 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-10-11 15:10:23,830 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-10-11 15:10:24,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-11 15:10:24,113 INFO L255 TraceCheckSpWp]: Trace formula consists of 557 conjuncts, 5 conjuncts are in the unsatisfiable core [2024-10-11 15:10:24,122 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-10-11 15:10:24,171 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2024-10-11 15:10:24,175 INFO L307 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-10-11 15:10:24,176 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [953796159] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-11 15:10:24,176 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-10-11 15:10:24,177 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [6] total 7 [2024-10-11 15:10:24,179 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2118884807] [2024-10-11 15:10:24,180 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-11 15:10:24,185 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-10-11 15:10:24,186 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-11 15:10:24,209 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-10-11 15:10:24,211 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-10-11 15:10:24,214 INFO L87 Difference]: Start difference. First operand has 141 states, 91 states have (on average 1.3516483516483517) internal successors, (123), 95 states have internal predecessors, (123), 35 states have call successors, (35), 13 states have call predecessors, (35), 13 states have return successors, (35), 35 states have call predecessors, (35), 35 states have call successors, (35) Second operand has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2024-10-11 15:10:24,337 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-11 15:10:24,338 INFO L93 Difference]: Finished difference Result 278 states and 387 transitions. [2024-10-11 15:10:24,340 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-10-11 15:10:24,342 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 62 [2024-10-11 15:10:24,342 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-10-11 15:10:24,351 INFO L225 Difference]: With dead ends: 278 [2024-10-11 15:10:24,352 INFO L226 Difference]: Without dead ends: 137 [2024-10-11 15:10:24,357 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 83 GetRequests, 78 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-10-11 15:10:24,362 INFO L432 NwaCegarLoop]: 158 mSDtfsCounter, 2 mSDsluCounter, 156 mSDsCounter, 0 mSdLazyCounter, 61 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 314 SdHoareTripleChecker+Invalid, 61 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 61 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-10-11 15:10:24,364 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 314 Invalid, 61 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 61 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-10-11 15:10:24,380 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 137 states. [2024-10-11 15:10:24,415 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 137 to 137. [2024-10-11 15:10:24,417 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 137 states, 89 states have (on average 1.2808988764044944) internal successors, (114), 92 states have internal predecessors, (114), 34 states have call successors, (34), 13 states have call predecessors, (34), 13 states have return successors, (34), 34 states have call predecessors, (34), 34 states have call successors, (34) [2024-10-11 15:10:24,419 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 137 states to 137 states and 182 transitions. [2024-10-11 15:10:24,422 INFO L78 Accepts]: Start accepts. Automaton has 137 states and 182 transitions. Word has length 62 [2024-10-11 15:10:24,424 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-10-11 15:10:24,425 INFO L471 AbstractCegarLoop]: Abstraction has 137 states and 182 transitions. [2024-10-11 15:10:24,425 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2024-10-11 15:10:24,425 INFO L276 IsEmpty]: Start isEmpty. Operand 137 states and 182 transitions. [2024-10-11 15:10:24,428 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2024-10-11 15:10:24,428 INFO L207 NwaCegarLoop]: Found error trace [2024-10-11 15:10:24,428 INFO L215 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-11 15:10:24,442 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2024-10-11 15:10:24,630 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable0 [2024-10-11 15:10:24,630 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_device_create_file_dev_attr_of_sensor_device_attributeErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_device_create_file_dev_attr_of_sensor_device_attributeErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-10-11 15:10:24,631 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-11 15:10:24,631 INFO L85 PathProgramCache]: Analyzing trace with hash -2087274744, now seen corresponding path program 1 times [2024-10-11 15:10:24,631 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-11 15:10:24,631 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2027057495] [2024-10-11 15:10:24,631 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-11 15:10:24,632 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-11 15:10:24,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-11 15:10:25,025 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2024-10-11 15:10:25,028 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-11 15:10:25,038 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2024-10-11 15:10:25,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-11 15:10:25,078 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2024-10-11 15:10:25,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-11 15:10:25,085 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2024-10-11 15:10:25,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-11 15:10:25,091 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2024-10-11 15:10:25,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-11 15:10:25,101 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2024-10-11 15:10:25,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-11 15:10:25,105 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2024-10-11 15:10:25,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-11 15:10:25,113 INFO L368 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2024-10-11 15:10:25,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-11 15:10:25,118 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2024-10-11 15:10:25,119 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-11 15:10:25,120 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2027057495] [2024-10-11 15:10:25,120 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2027057495] provided 0 perfect and 1 imperfect interpolant sequences [2024-10-11 15:10:25,120 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [852716394] [2024-10-11 15:10:25,121 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-11 15:10:25,121 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-10-11 15:10:25,121 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 [2024-10-11 15:10:25,123 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-10-11 15:10:25,124 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-10-11 15:10:25,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-11 15:10:25,412 INFO L255 TraceCheckSpWp]: Trace formula consists of 560 conjuncts, 13 conjuncts are in the unsatisfiable core [2024-10-11 15:10:25,416 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-10-11 15:10:25,443 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2024-10-11 15:10:25,444 INFO L307 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-10-11 15:10:25,444 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [852716394] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-11 15:10:25,444 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-10-11 15:10:25,444 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [6] total 6 [2024-10-11 15:10:25,445 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [998795223] [2024-10-11 15:10:25,445 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-11 15:10:25,446 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-10-11 15:10:25,446 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-11 15:10:25,447 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-10-11 15:10:25,447 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-10-11 15:10:25,447 INFO L87 Difference]: Start difference. First operand 137 states and 182 transitions. Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2024-10-11 15:10:25,590 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-11 15:10:25,590 INFO L93 Difference]: Finished difference Result 274 states and 367 transitions. [2024-10-11 15:10:25,592 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-10-11 15:10:25,592 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.2) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 64 [2024-10-11 15:10:25,592 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-10-11 15:10:25,596 INFO L225 Difference]: With dead ends: 274 [2024-10-11 15:10:25,596 INFO L226 Difference]: Without dead ends: 141 [2024-10-11 15:10:25,599 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 85 GetRequests, 81 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-10-11 15:10:25,602 INFO L432 NwaCegarLoop]: 154 mSDtfsCounter, 0 mSDsluCounter, 454 mSDsCounter, 0 mSdLazyCounter, 119 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 608 SdHoareTripleChecker+Invalid, 119 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 119 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-10-11 15:10:25,602 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 608 Invalid, 119 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 119 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-10-11 15:10:25,604 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 141 states. [2024-10-11 15:10:25,625 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 141 to 141. [2024-10-11 15:10:25,626 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 141 states, 92 states have (on average 1.2717391304347827) internal successors, (117), 95 states have internal predecessors, (117), 34 states have call successors, (34), 13 states have call predecessors, (34), 14 states have return successors, (38), 35 states have call predecessors, (38), 34 states have call successors, (38) [2024-10-11 15:10:25,628 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 141 states to 141 states and 189 transitions. [2024-10-11 15:10:25,629 INFO L78 Accepts]: Start accepts. Automaton has 141 states and 189 transitions. Word has length 64 [2024-10-11 15:10:25,629 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-10-11 15:10:25,629 INFO L471 AbstractCegarLoop]: Abstraction has 141 states and 189 transitions. [2024-10-11 15:10:25,630 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.2) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2024-10-11 15:10:25,630 INFO L276 IsEmpty]: Start isEmpty. Operand 141 states and 189 transitions. [2024-10-11 15:10:25,632 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2024-10-11 15:10:25,632 INFO L207 NwaCegarLoop]: Found error trace [2024-10-11 15:10:25,633 INFO L215 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-11 15:10:25,652 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2024-10-11 15:10:25,833 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1,3 /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-10-11 15:10:25,834 INFO L396 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_device_create_file_dev_attr_of_sensor_device_attributeErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_device_create_file_dev_attr_of_sensor_device_attributeErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-10-11 15:10:25,834 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-11 15:10:25,835 INFO L85 PathProgramCache]: Analyzing trace with hash 2066570200, now seen corresponding path program 1 times [2024-10-11 15:10:25,835 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-11 15:10:25,835 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [354638934] [2024-10-11 15:10:25,835 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-11 15:10:25,835 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-11 15:10:25,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-11 15:10:25,943 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-10-11 15:10:26,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-11 15:10:26,084 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-10-11 15:10:26,085 INFO L325 BasicCegarLoop]: Counterexample is feasible [2024-10-11 15:10:26,086 INFO L782 garLoopResultBuilder]: Registering result UNSAFE for location ldv_device_create_file_dev_attr_of_sensor_device_attributeErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2024-10-11 15:10:26,087 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2024-10-11 15:10:26,091 INFO L407 BasicCegarLoop]: Path program histogram: [1, 1, 1] [2024-10-11 15:10:26,166 INFO L165 ceAbstractionStarter]: Computing trace abstraction results [2024-10-11 15:10:26,169 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 11.10 03:10:26 BoogieIcfgContainer [2024-10-11 15:10:26,170 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2024-10-11 15:10:26,170 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2024-10-11 15:10:26,170 INFO L270 PluginConnector]: Initializing Witness Printer... [2024-10-11 15:10:26,171 INFO L274 PluginConnector]: Witness Printer initialized [2024-10-11 15:10:26,171 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.10 03:10:22" (3/4) ... [2024-10-11 15:10:26,175 INFO L142 WitnessPrinter]: No result that supports witness generation found [2024-10-11 15:10:26,176 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2024-10-11 15:10:26,177 INFO L158 Benchmark]: Toolchain (without parser) took 5394.48ms. Allocated memory was 182.5MB in the beginning and 270.5MB in the end (delta: 88.1MB). Free memory was 120.1MB in the beginning and 118.0MB in the end (delta: 2.1MB). Peak memory consumption was 92.6MB. Max. memory is 16.1GB. [2024-10-11 15:10:26,177 INFO L158 Benchmark]: CDTParser took 0.19ms. Allocated memory is still 182.5MB. Free memory was 149.3MB in the beginning and 149.0MB in the end (delta: 302.1kB). There was no memory consumed. Max. memory is 16.1GB. [2024-10-11 15:10:26,177 INFO L158 Benchmark]: CACSL2BoogieTranslator took 677.80ms. Allocated memory is still 182.5MB. Free memory was 120.1MB in the beginning and 88.6MB in the end (delta: 31.6MB). Peak memory consumption was 31.5MB. Max. memory is 16.1GB. [2024-10-11 15:10:26,178 INFO L158 Benchmark]: Boogie Procedure Inliner took 89.21ms. Allocated memory is still 182.5MB. Free memory was 88.3MB in the beginning and 84.1MB in the end (delta: 4.1MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2024-10-11 15:10:26,178 INFO L158 Benchmark]: Boogie Preprocessor took 131.75ms. Allocated memory is still 182.5MB. Free memory was 83.8MB in the beginning and 75.1MB in the end (delta: 8.7MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2024-10-11 15:10:26,178 INFO L158 Benchmark]: RCFGBuilder took 1062.10ms. Allocated memory was 182.5MB in the beginning and 270.5MB in the end (delta: 88.1MB). Free memory was 75.1MB in the beginning and 175.8MB in the end (delta: -100.7MB). Peak memory consumption was 23.3MB. Max. memory is 16.1GB. [2024-10-11 15:10:26,179 INFO L158 Benchmark]: TraceAbstraction took 3420.29ms. Allocated memory is still 270.5MB. Free memory was 174.7MB in the beginning and 118.0MB in the end (delta: 56.7MB). Peak memory consumption was 56.7MB. Max. memory is 16.1GB. [2024-10-11 15:10:26,179 INFO L158 Benchmark]: Witness Printer took 5.80ms. Allocated memory is still 270.5MB. Free memory is still 118.0MB. There was no memory consumed. Max. memory is 16.1GB. [2024-10-11 15:10:26,181 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.19ms. Allocated memory is still 182.5MB. Free memory was 149.3MB in the beginning and 149.0MB in the end (delta: 302.1kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 677.80ms. Allocated memory is still 182.5MB. Free memory was 120.1MB in the beginning and 88.6MB in the end (delta: 31.6MB). Peak memory consumption was 31.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 89.21ms. Allocated memory is still 182.5MB. Free memory was 88.3MB in the beginning and 84.1MB in the end (delta: 4.1MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 131.75ms. Allocated memory is still 182.5MB. Free memory was 83.8MB in the beginning and 75.1MB in the end (delta: 8.7MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * RCFGBuilder took 1062.10ms. Allocated memory was 182.5MB in the beginning and 270.5MB in the end (delta: 88.1MB). Free memory was 75.1MB in the beginning and 175.8MB in the end (delta: -100.7MB). Peak memory consumption was 23.3MB. Max. memory is 16.1GB. * TraceAbstraction took 3420.29ms. Allocated memory is still 270.5MB. Free memory was 174.7MB in the beginning and 118.0MB in the end (delta: 56.7MB). Peak memory consumption was 56.7MB. Max. memory is 16.1GB. * Witness Printer took 5.80ms. Allocated memory is still 270.5MB. Free memory is still 118.0MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 1272]: Unable to prove that a call to reach_error is unreachable Unable to prove that a call to reach_error is unreachable Reason: overapproximation of large string literal at line 1047, overapproximation of bitwiseOr at line 865. Possible FailurePath: [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1174] int LDV_IN_INTERRUPT ; [L1317] int ldv_count_1 = 0; [L1318] int ldv_count_2 = 0; [L1326] int ldv_call_dev_attr_of_sensor_device_attribute = 0; [L1177] struct platform_device *var_group1 ; [L1178] int res_s3c_hwmon_probe_10 ; [L1179] int ldv_s_s3c_hwmon_driver_platform_driver ; [L1180] int tmp ; [L1181] int tmp___0 ; [L1182] int tmp___1 ; [L1184] ldv_s_s3c_hwmon_driver_platform_driver = 0 [L1185] LDV_IN_INTERRUPT = 1 [L1186] FCALL ldv_initialize() [L1187] FCALL ldv_handler_precall() VAL [LDV_IN_INTERRUPT=1, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_s_s3c_hwmon_driver_platform_driver=0, s3c_hwmon_driver={16:0}] [L1188] CALL, EXPR s3c_hwmon_init() [L1155] int tmp ; [L1157] CALL, EXPR platform_driver_register(& s3c_hwmon_driver) [L1399] return __VERIFIER_nondet_int(); [L1157] RET, EXPR platform_driver_register(& s3c_hwmon_driver) [L1157] tmp = platform_driver_register(& s3c_hwmon_driver) [L1158] return (tmp); [L1188] RET, EXPR s3c_hwmon_init() [L1188] tmp = s3c_hwmon_init() [L1189] COND FALSE !(tmp != 0) VAL [LDV_IN_INTERRUPT=1, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_s_s3c_hwmon_driver_platform_driver=0, s3c_hwmon_driver={16:0}] [L1223] tmp___1 = __VERIFIER_nondet_int() VAL [LDV_IN_INTERRUPT=1, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_s_s3c_hwmon_driver_platform_driver=0, s3c_hwmon_driver={16:0}, tmp___1=1] [L1224] COND TRUE tmp___1 != 0 || ldv_s_s3c_hwmon_driver_platform_driver != 0 [L1195] tmp___0 = __VERIFIER_nondet_int() [L1197] case 0: VAL [LDV_IN_INTERRUPT=1, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_s_s3c_hwmon_driver_platform_driver=0, s3c_hwmon_driver={16:0}, tmp___0=0] [L1197] case 0: VAL [LDV_IN_INTERRUPT=1, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1197] case 0: [L1199] CALL s3c_hwmon_probe(var_group1) [L1020] struct s3c_hwmon_pdata *pdata ; [L1021] struct s3c_hwmon *hwmon ; [L1022] int ret ; [L1023] int i ; [L1024] void *tmp ; [L1025] struct lock_class_key __key ; [L1026] long tmp___0 ; [L1027] long tmp___1 ; [L1028] long tmp___2 ; [L1029] long tmp___3 ; [L1030] struct s3c_hwmon_chcfg *cfg ; [L1032] EXPR dev->dev.platform_data [L1032] pdata = (struct s3c_hwmon_pdata *)dev->dev.platform_data [L1033] ret = 0 VAL [LDV_IN_INTERRUPT=1, __key={17:0}, __this_module={4294967298:4294967307}, dev={4294967305:23}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, pdata={18:-17}, s3c_hwmon_driver={16:0}] [L1034] COND FALSE !((unsigned long )pdata == (unsigned long )((struct s3c_hwmon_pdata *)0)) [L1039] CALL, EXPR kzalloc(800U, 208U) [L863] void *tmp ; VAL [LDV_IN_INTERRUPT=1, __this_module={4294967298:4294967307}, flags=208, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}, size=800] [L865] EXPR flags | 32768U VAL [LDV_IN_INTERRUPT=1, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}, size=800] [L865] CALL, EXPR kmalloc(size, flags | 32768U) [L854] void *tmp___2 ; [L856] CALL, EXPR __kmalloc(size, flags) [L849] CALL, EXPR ldv_malloc(size) VAL [LDV_IN_INTERRUPT=1, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L839] COND TRUE __VERIFIER_nondet_int() [L840] void *res = malloc(size); [L841] CALL, EXPR ldv_is_err(res) VAL [LDV_IN_INTERRUPT=1, \old(ptr)={-(((__int128) 1 << 64) | 18446744073709549604U):0}, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1284] return ((unsigned long )ptr > 2012UL); [L841] RET, EXPR ldv_is_err(res) VAL [LDV_IN_INTERRUPT=1, \old(size)=800, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, res={-(((__int128) 1 << 64) | 18446744073709549604U):0}, s3c_hwmon_driver={16:0}] [L841] CALL assume_abort_if_not(!ldv_is_err(res)) [L833] COND FALSE !(!cond) VAL [LDV_IN_INTERRUPT=1, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L841] RET assume_abort_if_not(!ldv_is_err(res)) [L842] return res; VAL [LDV_IN_INTERRUPT=1, \old(size)=800, \result={-(((__int128) 1 << 64) | 18446744073709549604U):0}, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L849] RET, EXPR ldv_malloc(size) VAL [LDV_IN_INTERRUPT=1, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}, size=800] [L849] return ldv_malloc(size); [L856] RET, EXPR __kmalloc(size, flags) [L856] tmp___2 = __kmalloc(size, flags) [L857] return (tmp___2); [L865] RET, EXPR kmalloc(size, flags | 32768U) [L865] tmp = kmalloc(size, flags | 32768U) [L866] return (tmp); [L1039] RET, EXPR kzalloc(800U, 208U) [L1039] tmp = kzalloc(800U, 208U) [L1040] hwmon = (struct s3c_hwmon *)tmp VAL [LDV_IN_INTERRUPT=1, __key={17:0}, __this_module={4294967298:4294967307}, dev={4294967305:23}, hwmon={-(((__int128) 1 << 64) | 18446744073709549604U):0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, pdata={18:-17}, s3c_hwmon_driver={16:0}] [L1041] COND FALSE !((unsigned long )hwmon == (unsigned long )((struct s3c_hwmon *)0)) [L1046] CALL platform_set_drvdata(dev, (void *)hwmon) [L884] FCALL dev_set_drvdata(& pdev->dev, data) [L1046] RET platform_set_drvdata(dev, (void *)hwmon) [L1047] FCALL __mutex_init(& hwmon->lock, "&hwmon->lock", & __key) [L1048] CALL, EXPR s3c_adc_register(dev, 0, 0, 0U) [L1409] CALL, EXPR ldv_malloc(0UL) VAL [LDV_IN_INTERRUPT=1, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L839] COND FALSE !(__VERIFIER_nondet_int()) [L844] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=0, \result={0:0}, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}, size=0] [L1409] RET, EXPR ldv_malloc(0UL) VAL [LDV_IN_INTERRUPT=1, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1409] return ldv_malloc(0UL); [L1048] RET, EXPR s3c_adc_register(dev, 0, 0, 0U) [L1048] hwmon->client = s3c_adc_register(dev, 0, 0, 0U) [L1049] EXPR hwmon->client VAL [LDV_IN_INTERRUPT=1, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1049] CALL, EXPR IS_ERR((void const *)hwmon->client) VAL [LDV_IN_INTERRUPT=1, \old(ptr)={0:0}, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1246] long tmp ; VAL [LDV_IN_INTERRUPT=1, \old(ptr)={0:0}, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ptr={0:0}, s3c_hwmon_driver={16:0}] [L1248] CALL, EXPR ldv_is_err(ptr) VAL [LDV_IN_INTERRUPT=1, \old(ptr)={0:0}, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1284] return ((unsigned long )ptr > 2012UL); [L1248] RET, EXPR ldv_is_err(ptr) VAL [LDV_IN_INTERRUPT=1, \old(ptr)={0:0}, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ptr={0:0}, s3c_hwmon_driver={16:0}] [L1248] tmp = ldv_is_err(ptr) [L1249] return (tmp); [L1049] RET, EXPR IS_ERR((void const *)hwmon->client) VAL [LDV_IN_INTERRUPT=1, __this_module={4294967298:4294967307}, dev={4294967305:23}, hwmon={-(((__int128) 1 << 64) | 18446744073709549604U):0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, pdata={18:-17}, s3c_hwmon_driver={16:0}] [L1049] tmp___1 = IS_ERR((void const *)hwmon->client) [L1050] COND FALSE !(tmp___1 != 0L) [L1057] CALL, EXPR s3c_hwmon_add_raw(& dev->dev) [L915] return (0); [L1057] RET, EXPR s3c_hwmon_add_raw(& dev->dev) [L1057] ret = s3c_hwmon_add_raw(& dev->dev) [L1058] COND FALSE !(ret != 0) [L1062] CALL, EXPR hwmon_device_register(& dev->dev) [L1373] CALL, EXPR ldv_malloc(sizeof(struct device)) VAL [LDV_IN_INTERRUPT=1, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L839] COND FALSE !(__VERIFIER_nondet_int()) [L844] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=1003, \result={0:0}, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}, size=1003] [L1373] RET, EXPR ldv_malloc(sizeof(struct device)) VAL [LDV_IN_INTERRUPT=1, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1373] return ldv_malloc(sizeof(struct device)); [L1062] RET, EXPR hwmon_device_register(& dev->dev) [L1062] hwmon->hwmon_dev = hwmon_device_register(& dev->dev) [L1063] EXPR hwmon->hwmon_dev VAL [LDV_IN_INTERRUPT=1, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1063] CALL, EXPR IS_ERR((void const *)hwmon->hwmon_dev) VAL [LDV_IN_INTERRUPT=1, \old(ptr)={0:0}, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1246] long tmp ; VAL [LDV_IN_INTERRUPT=1, \old(ptr)={0:0}, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ptr={0:0}, s3c_hwmon_driver={16:0}] [L1248] CALL, EXPR ldv_is_err(ptr) VAL [LDV_IN_INTERRUPT=1, \old(ptr)={0:0}, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1284] return ((unsigned long )ptr > 2012UL); [L1248] RET, EXPR ldv_is_err(ptr) VAL [LDV_IN_INTERRUPT=1, \old(ptr)={0:0}, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ptr={0:0}, s3c_hwmon_driver={16:0}] [L1248] tmp = ldv_is_err(ptr) [L1249] return (tmp); [L1063] RET, EXPR IS_ERR((void const *)hwmon->hwmon_dev) VAL [LDV_IN_INTERRUPT=1, __this_module={4294967298:4294967307}, dev={4294967305:23}, hwmon={-(((__int128) 1 << 64) | 18446744073709549604U):0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, pdata={18:-17}, s3c_hwmon_driver={16:0}] [L1063] tmp___3 = IS_ERR((void const *)hwmon->hwmon_dev) [L1064] COND FALSE !(tmp___3 != 0L) [L1071] i = 0 VAL [LDV_IN_INTERRUPT=1, __this_module={4294967298:4294967307}, dev={4294967305:23}, hwmon={-(((__int128) 1 << 64) | 18446744073709549604U):0}, i=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, pdata={18:-17}, s3c_hwmon_driver={16:0}] [L1110] COND TRUE (unsigned int )i <= 7U [L1074] EXPR pdata->in[i] [L1074] cfg = pdata->in[i] VAL [LDV_IN_INTERRUPT=1, __this_module={4294967298:4294967307}, cfg={19:-18}, dev={4294967305:23}, hwmon={-(((__int128) 1 << 64) | 18446744073709549604U):0}, i=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, pdata={18:-17}, s3c_hwmon_driver={16:0}] [L1075] COND FALSE !((unsigned long )cfg == (unsigned long )((struct s3c_hwmon_chcfg *)0)) [L1079] EXPR cfg->mult VAL [LDV_IN_INTERRUPT=1, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1079] COND FALSE !(cfg->mult > 65535U) [L1084] EXPR cfg->div VAL [LDV_IN_INTERRUPT=1, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1084] COND FALSE !(cfg->div == 0U) [L1089] EXPR pdata->in[i] [L1089-L1090] CALL s3c_hwmon_create_attr(& dev->dev, pdata->in[i], (struct s3c_hwmon_attr *)(& hwmon->attrs) + (unsigned int )i, i) [L977] struct sensor_device_attribute *attr ; [L978] int ret ; [L981] attr = & attrs->in [L982] attr->index = channel [L983] attr->dev_attr.attr.name = (char const *)(& attrs->in_name) [L984] attr->dev_attr.attr.mode = 292U [L985] attr->dev_attr.show = & s3c_hwmon_ch_show [L986] CALL ldv_device_create_file_5(dev, (struct device_attribute const *)(& attr->dev_attr)) [L1254] int tmp ; VAL [LDV_IN_INTERRUPT=1, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_func_arg2={-(((__int128) 1 << 64) | 18446744073709549604U):168}, s3c_hwmon_driver={16:0}] [L1256] CALL ldv_device_create_file_dev_attr_of_sensor_device_attribute(ldv_func_arg2) VAL [LDV_IN_INTERRUPT=1, \old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1330] COND TRUE ldv_call_dev_attr_of_sensor_device_attribute == 0 [L1331] ldv_count_2 = ldv_count_2 + 1 [L1332] ldv_call_dev_attr_of_sensor_device_attribute = 1 VAL [LDV_IN_INTERRUPT=1, \old(attr)={-(((__int128) 1 << 64) | 18446744073709549604U):168}, \old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=1, ldv_count_1=0, ldv_count_2=1, s3c_hwmon_driver={16:0}] [L1333] COND FALSE !(ldv_count_1 >= ldv_count_2) [L1335] CALL ldv_error() [L1272] reach_error() VAL [LDV_IN_INTERRUPT=1, \old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={4294967298:4294967307}, ldv_call_dev_attr_of_sensor_device_attribute=1, ldv_count_1=0, ldv_count_2=1, s3c_hwmon_driver={16:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 14 procedures, 141 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 3.3s, OverallIterations: 3, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2 SdHoareTripleChecker+Valid, 0.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2 mSDsluCounter, 922 SdHoareTripleChecker+Invalid, 0.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 610 mSDsCounter, 0 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 180 IncrementalHoareTripleChecker+Invalid, 180 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 0 mSolverCounterUnsat, 312 mSDtfsCounter, 180 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 168 GetRequests, 159 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=141occurred in iteration=0, InterpolantAutomatonStates: 8, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 2 MinimizatonAttempts, 0 StatesRemovedByMinimization, 0 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 1.2s InterpolantComputationTime, 322 NumberOfCodeBlocks, 322 NumberOfCodeBlocksAsserted, 5 NumberOfCheckSat, 248 ConstructedInterpolants, 0 QuantifiedInterpolants, 358 SizeOfPredicates, 0 NumberOfNonLiveVariables, 1117 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 4 InterpolantComputations, 2 PerfectInterpolantSequences, 64/72 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2024-10-11 15:10:26,213 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /root/.sdkman/candidates/java/current/bin/java -Dosgi.configuration.area=/storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-commit-tester/m0_drivers-hwmon-s3c-hwmon-ko--130_7a--af3071a-1.i -s /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 4083bfcd7db6f77d1df429f19c85907b2c08abb35764175570b1e2ec14e31561 --- Real Ultimate output --- This is Ultimate 0.2.5-dev-84cfde4 [2024-10-11 15:10:28,512 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-10-11 15:10:28,592 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2024-10-11 15:10:28,598 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-10-11 15:10:28,599 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-10-11 15:10:28,635 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-10-11 15:10:28,636 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-10-11 15:10:28,636 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-10-11 15:10:28,637 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-10-11 15:10:28,637 INFO L153 SettingsManager]: * Use memory slicer=true [2024-10-11 15:10:28,637 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-10-11 15:10:28,638 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-10-11 15:10:28,641 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-10-11 15:10:28,643 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-10-11 15:10:28,643 INFO L153 SettingsManager]: * Use SBE=true [2024-10-11 15:10:28,643 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-10-11 15:10:28,644 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-10-11 15:10:28,644 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-10-11 15:10:28,644 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-10-11 15:10:28,645 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-10-11 15:10:28,648 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-10-11 15:10:28,649 INFO L153 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2024-10-11 15:10:28,649 INFO L153 SettingsManager]: * Use bitvectors instead of ints=true [2024-10-11 15:10:28,649 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-10-11 15:10:28,649 INFO L153 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2024-10-11 15:10:28,650 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-10-11 15:10:28,650 INFO L153 SettingsManager]: * Use constant arrays=true [2024-10-11 15:10:28,650 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-10-11 15:10:28,650 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-10-11 15:10:28,651 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-10-11 15:10:28,651 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-10-11 15:10:28,651 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-10-11 15:10:28,651 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-10-11 15:10:28,651 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-10-11 15:10:28,651 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-10-11 15:10:28,652 INFO L153 SettingsManager]: * Trace refinement strategy=WOLF [2024-10-11 15:10:28,652 INFO L153 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2024-10-11 15:10:28,652 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-10-11 15:10:28,652 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-10-11 15:10:28,653 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-10-11 15:10:28,653 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-10-11 15:10:28,653 INFO L153 SettingsManager]: * Logic for external solver=AUFBV [2024-10-11 15:10:28,654 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4083bfcd7db6f77d1df429f19c85907b2c08abb35764175570b1e2ec14e31561 [2024-10-11 15:10:28,972 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-10-11 15:10:28,996 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-10-11 15:10:29,000 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-10-11 15:10:29,001 INFO L270 PluginConnector]: Initializing CDTParser... [2024-10-11 15:10:29,002 INFO L274 PluginConnector]: CDTParser initialized [2024-10-11 15:10:29,003 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-commit-tester/m0_drivers-hwmon-s3c-hwmon-ko--130_7a--af3071a-1.i [2024-10-11 15:10:30,554 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-10-11 15:10:30,818 INFO L384 CDTParser]: Found 1 translation units. [2024-10-11 15:10:30,820 INFO L180 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-commit-tester/m0_drivers-hwmon-s3c-hwmon-ko--130_7a--af3071a-1.i [2024-10-11 15:10:30,835 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/data/aaf237fb7/bcb43f4b5f054ac48ca9888c6fbfdb4c/FLAGe5e914959 [2024-10-11 15:10:30,846 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/data/aaf237fb7/bcb43f4b5f054ac48ca9888c6fbfdb4c [2024-10-11 15:10:30,848 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-10-11 15:10:30,849 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-10-11 15:10:30,850 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-10-11 15:10:30,850 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-10-11 15:10:30,855 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-10-11 15:10:30,856 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 11.10 03:10:30" (1/1) ... [2024-10-11 15:10:30,856 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3a5b0b18 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.10 03:10:30, skipping insertion in model container [2024-10-11 15:10:30,857 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 11.10 03:10:30" (1/1) ... [2024-10-11 15:10:30,898 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-10-11 15:10:31,318 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-commit-tester/m0_drivers-hwmon-s3c-hwmon-ko--130_7a--af3071a-1.i[36117,36130] [2024-10-11 15:10:31,337 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-10-11 15:10:31,357 INFO L197 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2024-10-11 15:10:31,366 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-10-11 15:10:31,442 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-commit-tester/m0_drivers-hwmon-s3c-hwmon-ko--130_7a--af3071a-1.i[36117,36130] [2024-10-11 15:10:31,450 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-10-11 15:10:31,460 INFO L200 MainTranslator]: Completed pre-run [2024-10-11 15:10:31,533 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-commit-tester/m0_drivers-hwmon-s3c-hwmon-ko--130_7a--af3071a-1.i[36117,36130] [2024-10-11 15:10:31,537 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-10-11 15:10:31,566 INFO L204 MainTranslator]: Completed translation [2024-10-11 15:10:31,567 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.10 03:10:31 WrapperNode [2024-10-11 15:10:31,567 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-10-11 15:10:31,568 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-10-11 15:10:31,568 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-10-11 15:10:31,568 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-10-11 15:10:31,574 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.10 03:10:31" (1/1) ... [2024-10-11 15:10:31,595 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.10 03:10:31" (1/1) ... [2024-10-11 15:10:31,636 INFO L138 Inliner]: procedures = 77, calls = 161, calls flagged for inlining = 35, calls inlined = 30, statements flattened = 500 [2024-10-11 15:10:31,636 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-10-11 15:10:31,637 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-10-11 15:10:31,637 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-10-11 15:10:31,637 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-10-11 15:10:31,656 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.10 03:10:31" (1/1) ... [2024-10-11 15:10:31,656 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.10 03:10:31" (1/1) ... [2024-10-11 15:10:31,664 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.10 03:10:31" (1/1) ... [2024-10-11 15:10:31,734 INFO L175 MemorySlicer]: Split 52 memory accesses to 7 slices as follows [2, 3, 20, 4, 2, 1, 20]. 38 percent of accesses are in the largest equivalence class. The 26 initializations are split as follows [2, 0, 0, 4, 0, 0, 20]. The 12 writes are split as follows [0, 0, 12, 0, 0, 0, 0]. [2024-10-11 15:10:31,735 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.10 03:10:31" (1/1) ... [2024-10-11 15:10:31,735 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.10 03:10:31" (1/1) ... [2024-10-11 15:10:31,763 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.10 03:10:31" (1/1) ... [2024-10-11 15:10:31,772 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.10 03:10:31" (1/1) ... [2024-10-11 15:10:31,781 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.10 03:10:31" (1/1) ... [2024-10-11 15:10:31,785 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.10 03:10:31" (1/1) ... [2024-10-11 15:10:31,795 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-10-11 15:10:31,796 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-10-11 15:10:31,796 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-10-11 15:10:31,796 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-10-11 15:10:31,797 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.10 03:10:31" (1/1) ... [2024-10-11 15:10:31,806 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-10-11 15:10:31,817 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 [2024-10-11 15:10:31,833 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-10-11 15:10:31,840 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-10-11 15:10:31,888 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_hwmon_remove_raw [2024-10-11 15:10:31,888 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_hwmon_remove_raw [2024-10-11 15:10:31,889 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-10-11 15:10:31,890 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2024-10-11 15:10:31,890 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#0 [2024-10-11 15:10:31,890 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#1 [2024-10-11 15:10:31,890 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#2 [2024-10-11 15:10:31,890 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#3 [2024-10-11 15:10:31,891 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#4 [2024-10-11 15:10:31,891 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#5 [2024-10-11 15:10:31,891 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#6 [2024-10-11 15:10:31,891 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4#0 [2024-10-11 15:10:31,891 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4#1 [2024-10-11 15:10:31,892 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4#2 [2024-10-11 15:10:31,892 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4#3 [2024-10-11 15:10:31,892 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4#4 [2024-10-11 15:10:31,893 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4#5 [2024-10-11 15:10:31,893 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4#6 [2024-10-11 15:10:31,893 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#0 [2024-10-11 15:10:31,893 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#1 [2024-10-11 15:10:31,893 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#2 [2024-10-11 15:10:31,894 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#3 [2024-10-11 15:10:31,894 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#4 [2024-10-11 15:10:31,894 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#5 [2024-10-11 15:10:31,894 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#6 [2024-10-11 15:10:31,897 INFO L130 BoogieDeclarations]: Found specification of procedure PTR_ERR [2024-10-11 15:10:31,898 INFO L138 BoogieDeclarations]: Found implementation of procedure PTR_ERR [2024-10-11 15:10:31,898 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err [2024-10-11 15:10:31,898 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err [2024-10-11 15:10:31,898 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2024-10-11 15:10:31,898 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2024-10-11 15:10:31,898 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1#0 [2024-10-11 15:10:31,899 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1#1 [2024-10-11 15:10:31,899 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1#2 [2024-10-11 15:10:31,899 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1#3 [2024-10-11 15:10:31,899 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1#4 [2024-10-11 15:10:31,899 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1#5 [2024-10-11 15:10:31,899 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1#6 [2024-10-11 15:10:31,899 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_hwmon_remove_attr [2024-10-11 15:10:31,899 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_hwmon_remove_attr [2024-10-11 15:10:31,899 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2024-10-11 15:10:31,899 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4#0 [2024-10-11 15:10:31,899 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4#1 [2024-10-11 15:10:31,900 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4#2 [2024-10-11 15:10:31,900 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4#3 [2024-10-11 15:10:31,900 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4#4 [2024-10-11 15:10:31,900 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4#5 [2024-10-11 15:10:31,900 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4#6 [2024-10-11 15:10:31,900 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#0 [2024-10-11 15:10:31,900 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#1 [2024-10-11 15:10:31,900 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#2 [2024-10-11 15:10:31,900 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#3 [2024-10-11 15:10:31,900 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#4 [2024-10-11 15:10:31,901 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#5 [2024-10-11 15:10:31,901 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#6 [2024-10-11 15:10:31,901 INFO L130 BoogieDeclarations]: Found specification of procedure platform_get_drvdata [2024-10-11 15:10:31,901 INFO L138 BoogieDeclarations]: Found implementation of procedure platform_get_drvdata [2024-10-11 15:10:31,901 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_device_create_file_dev_attr_of_sensor_device_attribute [2024-10-11 15:10:31,902 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_device_create_file_dev_attr_of_sensor_device_attribute [2024-10-11 15:10:31,902 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1#0 [2024-10-11 15:10:31,902 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1#1 [2024-10-11 15:10:31,902 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1#2 [2024-10-11 15:10:31,902 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1#3 [2024-10-11 15:10:31,902 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1#4 [2024-10-11 15:10:31,902 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1#5 [2024-10-11 15:10:31,903 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1#6 [2024-10-11 15:10:31,903 INFO L130 BoogieDeclarations]: Found specification of procedure hwmon_device_unregister [2024-10-11 15:10:31,903 INFO L138 BoogieDeclarations]: Found implementation of procedure hwmon_device_unregister [2024-10-11 15:10:31,904 INFO L130 BoogieDeclarations]: Found specification of procedure dev_err [2024-10-11 15:10:31,904 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_err [2024-10-11 15:10:31,904 INFO L130 BoogieDeclarations]: Found specification of procedure s3c_adc_release [2024-10-11 15:10:31,904 INFO L138 BoogieDeclarations]: Found implementation of procedure s3c_adc_release [2024-10-11 15:10:31,905 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_handler_precall [2024-10-11 15:10:31,905 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_handler_precall [2024-10-11 15:10:31,905 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2024-10-11 15:10:31,905 INFO L130 BoogieDeclarations]: Found specification of procedure device_remove_file [2024-10-11 15:10:31,905 INFO L138 BoogieDeclarations]: Found implementation of procedure device_remove_file [2024-10-11 15:10:31,905 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-10-11 15:10:31,905 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-10-11 15:10:31,906 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2024-10-11 15:10:31,906 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2024-10-11 15:10:32,200 INFO L238 CfgBuilder]: Building ICFG [2024-10-11 15:10:32,202 INFO L264 CfgBuilder]: Building CFG for each procedure with an implementation [2024-10-11 15:10:34,559 INFO L? ?]: Removed 250 outVars from TransFormulas that were not future-live. [2024-10-11 15:10:34,563 INFO L287 CfgBuilder]: Performing block encoding [2024-10-11 15:10:34,656 INFO L309 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-10-11 15:10:34,656 INFO L314 CfgBuilder]: Removed 2 assume(true) statements. [2024-10-11 15:10:34,657 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.10 03:10:34 BoogieIcfgContainer [2024-10-11 15:10:34,657 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-10-11 15:10:34,658 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-10-11 15:10:34,658 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-10-11 15:10:34,661 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-10-11 15:10:34,662 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 11.10 03:10:30" (1/3) ... [2024-10-11 15:10:34,662 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1f1bbf31 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 11.10 03:10:34, skipping insertion in model container [2024-10-11 15:10:34,662 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.10 03:10:31" (2/3) ... [2024-10-11 15:10:34,664 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1f1bbf31 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 11.10 03:10:34, skipping insertion in model container [2024-10-11 15:10:34,665 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.10 03:10:34" (3/3) ... [2024-10-11 15:10:34,666 INFO L112 eAbstractionObserver]: Analyzing ICFG m0_drivers-hwmon-s3c-hwmon-ko--130_7a--af3071a-1.i [2024-10-11 15:10:34,679 INFO L209 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-10-11 15:10:34,679 INFO L149 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2024-10-11 15:10:34,741 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-10-11 15:10:34,746 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@39c4b280, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-10-11 15:10:34,746 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-10-11 15:10:34,750 INFO L276 IsEmpty]: Start isEmpty. Operand has 137 states, 87 states have (on average 1.3448275862068966) internal successors, (117), 91 states have internal predecessors, (117), 35 states have call successors, (35), 13 states have call predecessors, (35), 13 states have return successors, (35), 35 states have call predecessors, (35), 35 states have call successors, (35) [2024-10-11 15:10:34,761 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2024-10-11 15:10:34,761 INFO L207 NwaCegarLoop]: Found error trace [2024-10-11 15:10:34,762 INFO L215 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-11 15:10:34,763 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_device_create_file_dev_attr_of_sensor_device_attributeErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_device_create_file_dev_attr_of_sensor_device_attributeErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-10-11 15:10:34,768 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-11 15:10:34,769 INFO L85 PathProgramCache]: Analyzing trace with hash 629136655, now seen corresponding path program 1 times [2024-10-11 15:10:34,785 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2024-10-11 15:10:34,785 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1862488800] [2024-10-11 15:10:34,785 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-11 15:10:34,786 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2024-10-11 15:10:34,787 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/mathsat [2024-10-11 15:10:34,790 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2024-10-11 15:10:34,791 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2024-10-11 15:10:35,153 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-11 15:10:35,165 INFO L255 TraceCheckSpWp]: Trace formula consists of 322 conjuncts, 7 conjuncts are in the unsatisfiable core [2024-10-11 15:10:35,176 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-10-11 15:10:35,264 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2024-10-11 15:10:35,265 INFO L307 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-10-11 15:10:35,265 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2024-10-11 15:10:35,266 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1862488800] [2024-10-11 15:10:35,266 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1862488800] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-11 15:10:35,266 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-11 15:10:35,267 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-10-11 15:10:35,270 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [571858802] [2024-10-11 15:10:35,270 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-11 15:10:35,274 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-10-11 15:10:35,275 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2024-10-11 15:10:35,306 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-10-11 15:10:35,307 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-10-11 15:10:35,309 INFO L87 Difference]: Start difference. First operand has 137 states, 87 states have (on average 1.3448275862068966) internal successors, (117), 91 states have internal predecessors, (117), 35 states have call successors, (35), 13 states have call predecessors, (35), 13 states have return successors, (35), 35 states have call predecessors, (35), 35 states have call successors, (35) Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 4 states have internal predecessors, (37), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2024-10-11 15:10:35,615 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-11 15:10:35,616 INFO L93 Difference]: Finished difference Result 274 states and 383 transitions. [2024-10-11 15:10:35,619 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-10-11 15:10:35,621 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 4 states have internal predecessors, (37), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 60 [2024-10-11 15:10:35,621 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-10-11 15:10:35,631 INFO L225 Difference]: With dead ends: 274 [2024-10-11 15:10:35,631 INFO L226 Difference]: Without dead ends: 137 [2024-10-11 15:10:35,634 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 59 GetRequests, 56 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-10-11 15:10:35,637 INFO L432 NwaCegarLoop]: 155 mSDtfsCounter, 0 mSDsluCounter, 457 mSDsCounter, 0 mSdLazyCounter, 127 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 612 SdHoareTripleChecker+Invalid, 127 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 127 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2024-10-11 15:10:35,637 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 612 Invalid, 127 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 127 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2024-10-11 15:10:35,665 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 137 states. [2024-10-11 15:10:35,719 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 137 to 137. [2024-10-11 15:10:35,721 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 137 states, 88 states have (on average 1.2840909090909092) internal successors, (113), 91 states have internal predecessors, (113), 34 states have call successors, (34), 13 states have call predecessors, (34), 14 states have return successors, (38), 35 states have call predecessors, (38), 34 states have call successors, (38) [2024-10-11 15:10:35,724 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 137 states to 137 states and 185 transitions. [2024-10-11 15:10:35,732 INFO L78 Accepts]: Start accepts. Automaton has 137 states and 185 transitions. Word has length 60 [2024-10-11 15:10:35,733 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-10-11 15:10:35,733 INFO L471 AbstractCegarLoop]: Abstraction has 137 states and 185 transitions. [2024-10-11 15:10:35,733 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 4 states have internal predecessors, (37), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2024-10-11 15:10:35,733 INFO L276 IsEmpty]: Start isEmpty. Operand 137 states and 185 transitions. [2024-10-11 15:10:35,740 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2024-10-11 15:10:35,740 INFO L207 NwaCegarLoop]: Found error trace [2024-10-11 15:10:35,741 INFO L215 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-11 15:10:35,749 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2024-10-11 15:10:35,941 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2024-10-11 15:10:35,942 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_device_create_file_dev_attr_of_sensor_device_attributeErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_device_create_file_dev_attr_of_sensor_device_attributeErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-10-11 15:10:35,943 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-11 15:10:35,943 INFO L85 PathProgramCache]: Analyzing trace with hash -2090105556, now seen corresponding path program 1 times [2024-10-11 15:10:35,944 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2024-10-11 15:10:35,944 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [416265867] [2024-10-11 15:10:35,944 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-11 15:10:35,944 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2024-10-11 15:10:35,945 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/mathsat [2024-10-11 15:10:35,946 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2024-10-11 15:10:35,947 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2024-10-11 15:10:37,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-11 15:10:37,349 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-10-11 15:10:38,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-11 15:10:38,640 INFO L130 FreeRefinementEngine]: Strategy WOLF found a feasible trace [2024-10-11 15:10:38,640 INFO L325 BasicCegarLoop]: Counterexample is feasible [2024-10-11 15:10:38,644 INFO L782 garLoopResultBuilder]: Registering result UNSAFE for location ldv_device_create_file_dev_attr_of_sensor_device_attributeErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2024-10-11 15:10:38,664 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (3)] Ended with exit code 0 [2024-10-11 15:10:38,846 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2024-10-11 15:10:38,851 INFO L407 BasicCegarLoop]: Path program histogram: [1, 1] [2024-10-11 15:10:38,937 INFO L165 ceAbstractionStarter]: Computing trace abstraction results [2024-10-11 15:10:38,940 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 11.10 03:10:38 BoogieIcfgContainer [2024-10-11 15:10:38,940 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2024-10-11 15:10:38,941 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2024-10-11 15:10:38,941 INFO L270 PluginConnector]: Initializing Witness Printer... [2024-10-11 15:10:38,941 INFO L274 PluginConnector]: Witness Printer initialized [2024-10-11 15:10:38,942 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.10 03:10:34" (3/4) ... [2024-10-11 15:10:38,944 INFO L142 WitnessPrinter]: No result that supports witness generation found [2024-10-11 15:10:38,945 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2024-10-11 15:10:38,947 INFO L158 Benchmark]: Toolchain (without parser) took 8096.80ms. Allocated memory was 73.4MB in the beginning and 113.2MB in the end (delta: 39.8MB). Free memory was 41.6MB in the beginning and 71.7MB in the end (delta: -30.1MB). Peak memory consumption was 6.5MB. Max. memory is 16.1GB. [2024-10-11 15:10:38,948 INFO L158 Benchmark]: CDTParser took 0.18ms. Allocated memory is still 50.3MB. Free memory is still 23.2MB. There was no memory consumed. Max. memory is 16.1GB. [2024-10-11 15:10:38,948 INFO L158 Benchmark]: CACSL2BoogieTranslator took 717.01ms. Allocated memory is still 73.4MB. Free memory was 41.4MB in the beginning and 35.6MB in the end (delta: 5.8MB). Peak memory consumption was 11.4MB. Max. memory is 16.1GB. [2024-10-11 15:10:38,948 INFO L158 Benchmark]: Boogie Procedure Inliner took 68.61ms. Allocated memory is still 73.4MB. Free memory was 35.3MB in the beginning and 31.1MB in the end (delta: 4.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2024-10-11 15:10:38,949 INFO L158 Benchmark]: Boogie Preprocessor took 158.35ms. Allocated memory was 73.4MB in the beginning and 88.1MB in the end (delta: 14.7MB). Free memory was 31.1MB in the beginning and 57.0MB in the end (delta: -25.9MB). Peak memory consumption was 6.6MB. Max. memory is 16.1GB. [2024-10-11 15:10:38,949 INFO L158 Benchmark]: RCFGBuilder took 2860.64ms. Allocated memory is still 88.1MB. Free memory was 56.4MB in the beginning and 39.7MB in the end (delta: 16.7MB). Peak memory consumption was 41.4MB. Max. memory is 16.1GB. [2024-10-11 15:10:38,949 INFO L158 Benchmark]: TraceAbstraction took 4282.09ms. Allocated memory was 88.1MB in the beginning and 113.2MB in the end (delta: 25.2MB). Free memory was 38.7MB in the beginning and 71.7MB in the end (delta: -32.9MB). Peak memory consumption was 24.7MB. Max. memory is 16.1GB. [2024-10-11 15:10:38,950 INFO L158 Benchmark]: Witness Printer took 4.61ms. Allocated memory is still 113.2MB. Free memory is still 71.7MB. There was no memory consumed. Max. memory is 16.1GB. [2024-10-11 15:10:38,955 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18ms. Allocated memory is still 50.3MB. Free memory is still 23.2MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 717.01ms. Allocated memory is still 73.4MB. Free memory was 41.4MB in the beginning and 35.6MB in the end (delta: 5.8MB). Peak memory consumption was 11.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 68.61ms. Allocated memory is still 73.4MB. Free memory was 35.3MB in the beginning and 31.1MB in the end (delta: 4.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 158.35ms. Allocated memory was 73.4MB in the beginning and 88.1MB in the end (delta: 14.7MB). Free memory was 31.1MB in the beginning and 57.0MB in the end (delta: -25.9MB). Peak memory consumption was 6.6MB. Max. memory is 16.1GB. * RCFGBuilder took 2860.64ms. Allocated memory is still 88.1MB. Free memory was 56.4MB in the beginning and 39.7MB in the end (delta: 16.7MB). Peak memory consumption was 41.4MB. Max. memory is 16.1GB. * TraceAbstraction took 4282.09ms. Allocated memory was 88.1MB in the beginning and 113.2MB in the end (delta: 25.2MB). Free memory was 38.7MB in the beginning and 71.7MB in the end (delta: -32.9MB). Peak memory consumption was 24.7MB. Max. memory is 16.1GB. * Witness Printer took 4.61ms. Allocated memory is still 113.2MB. Free memory is still 71.7MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 1272]: Unable to prove that a call to reach_error is unreachable Unable to prove that a call to reach_error is unreachable Reason: overapproximation of large string literal at line 1047. Possible FailurePath: [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1150-L1152] static struct platform_driver s3c_hwmon_driver = {& s3c_hwmon_probe, & s3c_hwmon_remove, 0, 0, 0, {"s3c-hwmon", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L1174] int LDV_IN_INTERRUPT ; [L1317] int ldv_count_1 = 0; [L1318] int ldv_count_2 = 0; [L1326] int ldv_call_dev_attr_of_sensor_device_attribute = 0; [L1177] struct platform_device *var_group1 ; [L1178] int res_s3c_hwmon_probe_10 ; [L1179] int ldv_s_s3c_hwmon_driver_platform_driver ; [L1180] int tmp ; [L1181] int tmp___0 ; [L1182] int tmp___1 ; [L1184] ldv_s_s3c_hwmon_driver_platform_driver = 0 [L1185] LDV_IN_INTERRUPT = 1 [L1186] FCALL ldv_initialize() [L1187] FCALL ldv_handler_precall() VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_s_s3c_hwmon_driver_platform_driver=0, s3c_hwmon_driver={16:0}] [L1188] CALL, EXPR s3c_hwmon_init() [L1155] int tmp ; [L1157] CALL, EXPR platform_driver_register(& s3c_hwmon_driver) [L1399] return __VERIFIER_nondet_int(); [L1157] RET, EXPR platform_driver_register(& s3c_hwmon_driver) [L1157] tmp = platform_driver_register(& s3c_hwmon_driver) [L1158] return (tmp); [L1188] RET, EXPR s3c_hwmon_init() [L1188] tmp = s3c_hwmon_init() [L1189] COND FALSE !(tmp != 0) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_s_s3c_hwmon_driver_platform_driver=0, s3c_hwmon_driver={16:0}] [L1223] tmp___1 = __VERIFIER_nondet_int() VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_s_s3c_hwmon_driver_platform_driver=0, s3c_hwmon_driver={16:0}, tmp___1=-2147483648] [L1224] COND TRUE tmp___1 != 0 || ldv_s_s3c_hwmon_driver_platform_driver != 0 [L1195] tmp___0 = __VERIFIER_nondet_int() [L1197] case 0: VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_s_s3c_hwmon_driver_platform_driver=0, s3c_hwmon_driver={16:0}, tmp___0=0] [L1197] case 0: VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1197] case 0: [L1199] CALL s3c_hwmon_probe(var_group1) [L1020] struct s3c_hwmon_pdata *pdata ; [L1021] struct s3c_hwmon *hwmon ; [L1022] int ret ; [L1023] int i ; [L1024] void *tmp ; [L1025] struct lock_class_key __key ; [L1026] long tmp___0 ; [L1027] long tmp___1 ; [L1028] long tmp___2 ; [L1029] long tmp___3 ; [L1030] struct s3c_hwmon_chcfg *cfg ; [L1032] EXPR dev->dev.platform_data [L1032] pdata = (struct s3c_hwmon_pdata *)dev->dev.platform_data [L1033] ret = 0 VAL [LDV_IN_INTERRUPT=1, __key={31:0}, __this_module={0:0}, dev={4:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, pdata={-9223372036854775808:0}, s3c_hwmon_driver={16:0}] [L1034] COND FALSE !((unsigned long )pdata == (unsigned long )((struct s3c_hwmon_pdata *)0)) [L1039] CALL, EXPR kzalloc(800U, 208U) [L863] void *tmp ; [L865] CALL, EXPR kmalloc(size, flags | 32768U) [L854] void *tmp___2 ; [L856] CALL, EXPR __kmalloc(size, flags) [L849] CALL, EXPR ldv_malloc(size) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L839] COND TRUE __VERIFIER_nondet_int() [L840] void *res = malloc(size); [L841] CALL, EXPR ldv_is_err(res) VAL [LDV_IN_INTERRUPT=1, \old(ptr)={29:0}, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1284] return ((unsigned long )ptr > 2012UL); [L841] RET, EXPR ldv_is_err(res) VAL [LDV_IN_INTERRUPT=1, \old(size)=800, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, res={29:0}, s3c_hwmon_driver={16:0}] [L841] CALL assume_abort_if_not(!ldv_is_err(res)) [L833] COND FALSE !(!cond) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L841] RET assume_abort_if_not(!ldv_is_err(res)) [L842] return res; VAL [LDV_IN_INTERRUPT=1, \old(size)=800, \result={29:0}, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L849] RET, EXPR ldv_malloc(size) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}, size=800] [L849] return ldv_malloc(size); [L856] RET, EXPR __kmalloc(size, flags) [L856] tmp___2 = __kmalloc(size, flags) [L857] return (tmp___2); [L865] RET, EXPR kmalloc(size, flags | 32768U) [L865] tmp = kmalloc(size, flags | 32768U) [L866] return (tmp); [L1039] RET, EXPR kzalloc(800U, 208U) [L1039] tmp = kzalloc(800U, 208U) [L1040] hwmon = (struct s3c_hwmon *)tmp VAL [LDV_IN_INTERRUPT=1, __key={31:0}, __this_module={0:0}, dev={4:0}, hwmon={29:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, pdata={-9223372036854775808:0}, s3c_hwmon_driver={16:0}] [L1041] COND FALSE !((unsigned long )hwmon == (unsigned long )((struct s3c_hwmon *)0)) [L1046] CALL platform_set_drvdata(dev, (void *)hwmon) [L884] FCALL dev_set_drvdata(& pdev->dev, data) [L1046] RET platform_set_drvdata(dev, (void *)hwmon) [L1047] FCALL __mutex_init(& hwmon->lock, "&hwmon->lock", & __key) [L1048] CALL, EXPR s3c_adc_register(dev, 0, 0, 0U) [L1409] CALL, EXPR ldv_malloc(0UL) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L839] COND FALSE !(__VERIFIER_nondet_int()) [L844] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=0, \result={0:0}, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}, size=0] [L1409] RET, EXPR ldv_malloc(0UL) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1409] return ldv_malloc(0UL); [L1048] RET, EXPR s3c_adc_register(dev, 0, 0, 0U) [L1048] hwmon->client = s3c_adc_register(dev, 0, 0, 0U) [L1049] EXPR hwmon->client VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1049] CALL, EXPR IS_ERR((void const *)hwmon->client) VAL [LDV_IN_INTERRUPT=1, \old(ptr)={0:0}, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1246] long tmp ; VAL [LDV_IN_INTERRUPT=1, \old(ptr)={0:0}, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ptr={0:0}, s3c_hwmon_driver={16:0}] [L1248] CALL, EXPR ldv_is_err(ptr) VAL [LDV_IN_INTERRUPT=1, \old(ptr)={0:0}, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1284] return ((unsigned long )ptr > 2012UL); [L1248] RET, EXPR ldv_is_err(ptr) VAL [LDV_IN_INTERRUPT=1, \old(ptr)={0:0}, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ptr={0:0}, s3c_hwmon_driver={16:0}] [L1248] tmp = ldv_is_err(ptr) [L1249] return (tmp); [L1049] RET, EXPR IS_ERR((void const *)hwmon->client) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, dev={4:0}, hwmon={29:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, pdata={-9223372036854775808:0}, s3c_hwmon_driver={16:0}] [L1049] tmp___1 = IS_ERR((void const *)hwmon->client) [L1050] COND FALSE !(tmp___1 != 0L) [L1057] CALL, EXPR s3c_hwmon_add_raw(& dev->dev) [L915] return (0); [L1057] RET, EXPR s3c_hwmon_add_raw(& dev->dev) [L1057] ret = s3c_hwmon_add_raw(& dev->dev) [L1058] COND FALSE !(ret != 0) [L1062] CALL, EXPR hwmon_device_register(& dev->dev) [L1373] CALL, EXPR ldv_malloc(sizeof(struct device)) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L839] COND FALSE !(__VERIFIER_nondet_int()) [L844] return ((void *)0); VAL [LDV_IN_INTERRUPT=1, \old(size)=1003, \result={0:0}, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}, size=1003] [L1373] RET, EXPR ldv_malloc(sizeof(struct device)) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1373] return ldv_malloc(sizeof(struct device)); [L1062] RET, EXPR hwmon_device_register(& dev->dev) [L1062] hwmon->hwmon_dev = hwmon_device_register(& dev->dev) [L1063] EXPR hwmon->hwmon_dev VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1063] CALL, EXPR IS_ERR((void const *)hwmon->hwmon_dev) VAL [LDV_IN_INTERRUPT=1, \old(ptr)={0:0}, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1246] long tmp ; VAL [LDV_IN_INTERRUPT=1, \old(ptr)={0:0}, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ptr={0:0}, s3c_hwmon_driver={16:0}] [L1248] CALL, EXPR ldv_is_err(ptr) VAL [LDV_IN_INTERRUPT=1, \old(ptr)={0:0}, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1284] return ((unsigned long )ptr > 2012UL); [L1248] RET, EXPR ldv_is_err(ptr) VAL [LDV_IN_INTERRUPT=1, \old(ptr)={0:0}, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ptr={0:0}, s3c_hwmon_driver={16:0}] [L1248] tmp = ldv_is_err(ptr) [L1249] return (tmp); [L1063] RET, EXPR IS_ERR((void const *)hwmon->hwmon_dev) VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, dev={4:0}, hwmon={29:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, pdata={-9223372036854775808:0}, s3c_hwmon_driver={16:0}] [L1063] tmp___3 = IS_ERR((void const *)hwmon->hwmon_dev) [L1064] COND FALSE !(tmp___3 != 0L) [L1071] i = 0 VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, dev={4:0}, hwmon={29:0}, i=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, pdata={-9223372036854775808:0}, s3c_hwmon_driver={16:0}] [L1110] COND TRUE (unsigned int )i <= 7U [L1074] EXPR pdata->in[i] [L1074] cfg = pdata->in[i] VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, cfg={0:-9223372036854775808}, dev={4:0}, hwmon={29:0}, i=0, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, pdata={-9223372036854775808:0}, s3c_hwmon_driver={16:0}] [L1075] COND FALSE !((unsigned long )cfg == (unsigned long )((struct s3c_hwmon_chcfg *)0)) [L1079] EXPR cfg->mult VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1079] COND FALSE !(cfg->mult > 65535U) [L1084] EXPR cfg->div VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1084] COND FALSE !(cfg->div == 0U) [L1089] EXPR pdata->in[i] [L1089-L1090] CALL s3c_hwmon_create_attr(& dev->dev, pdata->in[i], (struct s3c_hwmon_attr *)(& hwmon->attrs) + (unsigned int )i, i) [L977] struct sensor_device_attribute *attr ; [L978] int ret ; [L981] attr = & attrs->in [L982] attr->index = channel [L983] attr->dev_attr.attr.name = (char const *)(& attrs->in_name) [L984] attr->dev_attr.attr.mode = 292U [L985] attr->dev_attr.show = & s3c_hwmon_ch_show [L986] CALL ldv_device_create_file_5(dev, (struct device_attribute const *)(& attr->dev_attr)) [L1254] int tmp ; VAL [LDV_IN_INTERRUPT=1, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, ldv_func_arg2={29:168}, s3c_hwmon_driver={16:0}] [L1256] CALL ldv_device_create_file_dev_attr_of_sensor_device_attribute(ldv_func_arg2) VAL [LDV_IN_INTERRUPT=1, \old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=0, ldv_count_1=0, ldv_count_2=0, s3c_hwmon_driver={16:0}] [L1330] COND TRUE ldv_call_dev_attr_of_sensor_device_attribute == 0 [L1331] ldv_count_2 = ldv_count_2 + 1 [L1332] ldv_call_dev_attr_of_sensor_device_attribute = 1 VAL [LDV_IN_INTERRUPT=1, \old(attr)={29:168}, \old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=1, ldv_count_1=0, ldv_count_2=1, s3c_hwmon_driver={16:0}] [L1333] COND FALSE !(ldv_count_1 >= ldv_count_2) [L1335] CALL ldv_error() [L1272] reach_error() VAL [LDV_IN_INTERRUPT=1, \old(ldv_call_dev_attr_of_sensor_device_attribute)=0, \old(ldv_count_2)=0, __this_module={0:0}, ldv_call_dev_attr_of_sensor_device_attribute=1, ldv_count_1=0, ldv_count_2=1, s3c_hwmon_driver={16:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 14 procedures, 137 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 4.1s, OverallIterations: 2, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 0 SdHoareTripleChecker+Valid, 0.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 0 mSDsluCounter, 612 SdHoareTripleChecker+Invalid, 0.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 457 mSDsCounter, 0 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 127 IncrementalHoareTripleChecker+Invalid, 127 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 0 mSolverCounterUnsat, 155 mSDtfsCounter, 127 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 59 GetRequests, 56 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=137occurred in iteration=0, InterpolantAutomatonStates: 5, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 1 MinimizatonAttempts, 0 StatesRemovedByMinimization, 0 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 1.3s SatisfiabilityAnalysisTime, 0.1s InterpolantComputationTime, 126 NumberOfCodeBlocks, 126 NumberOfCodeBlocksAsserted, 2 NumberOfCheckSat, 59 ConstructedInterpolants, 0 QuantifiedInterpolants, 83 SizeOfPredicates, 0 NumberOfNonLiveVariables, 322 ConjunctsInSsa, 7 ConjunctsInUnsatCore, 1 InterpolantComputations, 1 PerfectInterpolantSequences, 18/18 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2024-10-11 15:10:38,998 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate-clean/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: UNKNOWN: Overapproximated counterexample