java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata ./data -tc ../../../trunk/examples/toolchains/AutomizerC.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf --traceabstraction.trace.refinement.strategy SIFA_TAIPAN --sifa.abstract.domain CompoundDomain --rcfgbuilder.size.of.a.code.block LoopFreeBlock --sifa.call.summarizer TopInputCallSummarizer --sifa.fluid SizeLimitFluid --sifa.simplification.technique SIMPLIFY_QUICK -i ../../../trunk/examples/svcomp/list-simple/dll2n_remove_all_reverse.i -------------------------------------------------------------------------------- This is Ultimate 0.1.24-36ac518-m [2019-10-07 13:25:28,272 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-10-07 13:25:28,274 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-10-07 13:25:28,295 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-10-07 13:25:28,296 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-10-07 13:25:28,298 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-10-07 13:25:28,300 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-10-07 13:25:28,310 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-10-07 13:25:28,315 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-10-07 13:25:28,316 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-10-07 13:25:28,317 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-10-07 13:25:28,318 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-10-07 13:25:28,319 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-10-07 13:25:28,322 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-10-07 13:25:28,325 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-10-07 13:25:28,326 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-10-07 13:25:28,328 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-10-07 13:25:28,330 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-10-07 13:25:28,331 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-10-07 13:25:28,336 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-10-07 13:25:28,340 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-10-07 13:25:28,343 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-10-07 13:25:28,346 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-10-07 13:25:28,347 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-10-07 13:25:28,351 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-10-07 13:25:28,351 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-10-07 13:25:28,351 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-10-07 13:25:28,353 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-10-07 13:25:28,354 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-10-07 13:25:28,355 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-10-07 13:25:28,355 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-10-07 13:25:28,356 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-10-07 13:25:28,357 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-10-07 13:25:28,357 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-10-07 13:25:28,359 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-10-07 13:25:28,359 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-10-07 13:25:28,360 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-10-07 13:25:28,360 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-10-07 13:25:28,360 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-10-07 13:25:28,361 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-10-07 13:25:28,362 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-10-07 13:25:28,363 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Reach-32bit-Automizer_Default.epf [2019-10-07 13:25:28,401 INFO L113 SettingsManager]: Loading preferences was successful [2019-10-07 13:25:28,401 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-10-07 13:25:28,402 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2019-10-07 13:25:28,403 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2019-10-07 13:25:28,403 INFO L138 SettingsManager]: * Use SBE=true [2019-10-07 13:25:28,403 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-10-07 13:25:28,406 INFO L138 SettingsManager]: * sizeof long=4 [2019-10-07 13:25:28,407 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2019-10-07 13:25:28,407 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-10-07 13:25:28,407 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-10-07 13:25:28,407 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2019-10-07 13:25:28,407 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2019-10-07 13:25:28,408 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2019-10-07 13:25:28,408 INFO L138 SettingsManager]: * sizeof long double=12 [2019-10-07 13:25:28,408 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-10-07 13:25:28,408 INFO L138 SettingsManager]: * Use constant arrays=true [2019-10-07 13:25:28,408 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2019-10-07 13:25:28,409 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-10-07 13:25:28,409 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2019-10-07 13:25:28,409 INFO L138 SettingsManager]: * To the following directory=./dump/ [2019-10-07 13:25:28,412 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2019-10-07 13:25:28,412 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-10-07 13:25:28,413 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-10-07 13:25:28,413 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2019-10-07 13:25:28,413 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2019-10-07 13:25:28,414 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2019-10-07 13:25:28,414 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2019-10-07 13:25:28,414 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2019-10-07 13:25:28,414 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: Trace refinement strategy -> SIFA_TAIPAN Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.sifa: Abstract Domain -> CompoundDomain Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder: Size of a code block -> LoopFreeBlock Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.sifa: Call Summarizer -> TopInputCallSummarizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.sifa: Fluid -> SizeLimitFluid Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.sifa: Simplification Technique -> SIMPLIFY_QUICK [2019-10-07 13:25:28,741 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-10-07 13:25:28,756 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-10-07 13:25:28,760 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-10-07 13:25:28,761 INFO L271 PluginConnector]: Initializing CDTParser... [2019-10-07 13:25:28,762 INFO L275 PluginConnector]: CDTParser initialized [2019-10-07 13:25:28,763 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/list-simple/dll2n_remove_all_reverse.i [2019-10-07 13:25:28,841 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/fca7a3f1e/41218547004b49f186b1cf666855b542/FLAG42c72415d [2019-10-07 13:25:29,382 INFO L306 CDTParser]: Found 1 translation units. [2019-10-07 13:25:29,383 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/list-simple/dll2n_remove_all_reverse.i [2019-10-07 13:25:29,396 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/fca7a3f1e/41218547004b49f186b1cf666855b542/FLAG42c72415d [2019-10-07 13:25:29,650 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/fca7a3f1e/41218547004b49f186b1cf666855b542 [2019-10-07 13:25:29,658 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-10-07 13:25:29,660 INFO L131 ToolchainWalker]: Walking toolchain with 4 elements. [2019-10-07 13:25:29,661 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-10-07 13:25:29,661 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-10-07 13:25:29,665 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-10-07 13:25:29,666 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.10 01:25:29" (1/1) ... [2019-10-07 13:25:29,669 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@342d9936 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.10 01:25:29, skipping insertion in model container [2019-10-07 13:25:29,669 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.10 01:25:29" (1/1) ... [2019-10-07 13:25:29,676 INFO L142 MainTranslator]: Starting translation in SV-COMP mode [2019-10-07 13:25:29,726 INFO L173 MainTranslator]: Built tables and reachable declarations [2019-10-07 13:25:30,284 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-10-07 13:25:30,304 INFO L188 MainTranslator]: Completed pre-run [2019-10-07 13:25:30,387 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-10-07 13:25:30,452 INFO L192 MainTranslator]: Completed translation [2019-10-07 13:25:30,453 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.10 01:25:30 WrapperNode [2019-10-07 13:25:30,453 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-10-07 13:25:30,454 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2019-10-07 13:25:30,454 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2019-10-07 13:25:30,454 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2019-10-07 13:25:30,467 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.10 01:25:30" (1/1) ... [2019-10-07 13:25:30,467 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.10 01:25:30" (1/1) ... [2019-10-07 13:25:30,482 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.10 01:25:30" (1/1) ... [2019-10-07 13:25:30,483 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.10 01:25:30" (1/1) ... [2019-10-07 13:25:30,501 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.10 01:25:30" (1/1) ... [2019-10-07 13:25:30,507 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.10 01:25:30" (1/1) ... [2019-10-07 13:25:30,510 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.10 01:25:30" (1/1) ... [2019-10-07 13:25:30,517 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2019-10-07 13:25:30,518 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2019-10-07 13:25:30,518 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2019-10-07 13:25:30,518 INFO L275 PluginConnector]: RCFGBuilder initialized [2019-10-07 13:25:30,519 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.10 01:25:30" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-10-07 13:25:30,583 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2019-10-07 13:25:30,584 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2019-10-07 13:25:30,584 INFO L138 BoogieDeclarations]: Found implementation of procedure __bswap_32 [2019-10-07 13:25:30,584 INFO L138 BoogieDeclarations]: Found implementation of procedure __bswap_64 [2019-10-07 13:25:30,584 INFO L138 BoogieDeclarations]: Found implementation of procedure myexit [2019-10-07 13:25:30,584 INFO L138 BoogieDeclarations]: Found implementation of procedure node_create [2019-10-07 13:25:30,585 INFO L138 BoogieDeclarations]: Found implementation of procedure dll_create [2019-10-07 13:25:30,585 INFO L138 BoogieDeclarations]: Found implementation of procedure dll_remove_last [2019-10-07 13:25:30,585 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2019-10-07 13:25:30,585 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_error [2019-10-07 13:25:30,585 INFO L130 BoogieDeclarations]: Found specification of procedure __bswap_32 [2019-10-07 13:25:30,586 INFO L130 BoogieDeclarations]: Found specification of procedure __bswap_64 [2019-10-07 13:25:30,586 INFO L130 BoogieDeclarations]: Found specification of procedure __ctype_get_mb_cur_max [2019-10-07 13:25:30,586 INFO L130 BoogieDeclarations]: Found specification of procedure atof [2019-10-07 13:25:30,586 INFO L130 BoogieDeclarations]: Found specification of procedure atoi [2019-10-07 13:25:30,586 INFO L130 BoogieDeclarations]: Found specification of procedure atol [2019-10-07 13:25:30,586 INFO L130 BoogieDeclarations]: Found specification of procedure atoll [2019-10-07 13:25:30,587 INFO L130 BoogieDeclarations]: Found specification of procedure strtod [2019-10-07 13:25:30,587 INFO L130 BoogieDeclarations]: Found specification of procedure strtof [2019-10-07 13:25:30,587 INFO L130 BoogieDeclarations]: Found specification of procedure strtold [2019-10-07 13:25:30,587 INFO L130 BoogieDeclarations]: Found specification of procedure strtol [2019-10-07 13:25:30,587 INFO L130 BoogieDeclarations]: Found specification of procedure strtoul [2019-10-07 13:25:30,587 INFO L130 BoogieDeclarations]: Found specification of procedure strtoq [2019-10-07 13:25:30,588 INFO L130 BoogieDeclarations]: Found specification of procedure strtouq [2019-10-07 13:25:30,588 INFO L130 BoogieDeclarations]: Found specification of procedure strtoll [2019-10-07 13:25:30,588 INFO L130 BoogieDeclarations]: Found specification of procedure strtoull [2019-10-07 13:25:30,588 INFO L130 BoogieDeclarations]: Found specification of procedure l64a [2019-10-07 13:25:30,588 INFO L130 BoogieDeclarations]: Found specification of procedure a64l [2019-10-07 13:25:30,589 INFO L130 BoogieDeclarations]: Found specification of procedure select [2019-10-07 13:25:30,589 INFO L130 BoogieDeclarations]: Found specification of procedure pselect [2019-10-07 13:25:30,589 INFO L130 BoogieDeclarations]: Found specification of procedure gnu_dev_major [2019-10-07 13:25:30,589 INFO L130 BoogieDeclarations]: Found specification of procedure gnu_dev_minor [2019-10-07 13:25:30,589 INFO L130 BoogieDeclarations]: Found specification of procedure gnu_dev_makedev [2019-10-07 13:25:30,589 INFO L130 BoogieDeclarations]: Found specification of procedure random [2019-10-07 13:25:30,590 INFO L130 BoogieDeclarations]: Found specification of procedure srandom [2019-10-07 13:25:30,590 INFO L130 BoogieDeclarations]: Found specification of procedure initstate [2019-10-07 13:25:30,590 INFO L130 BoogieDeclarations]: Found specification of procedure setstate [2019-10-07 13:25:30,590 INFO L130 BoogieDeclarations]: Found specification of procedure random_r [2019-10-07 13:25:30,590 INFO L130 BoogieDeclarations]: Found specification of procedure srandom_r [2019-10-07 13:25:30,590 INFO L130 BoogieDeclarations]: Found specification of procedure initstate_r [2019-10-07 13:25:30,591 INFO L130 BoogieDeclarations]: Found specification of procedure setstate_r [2019-10-07 13:25:30,591 INFO L130 BoogieDeclarations]: Found specification of procedure rand [2019-10-07 13:25:30,591 INFO L130 BoogieDeclarations]: Found specification of procedure srand [2019-10-07 13:25:30,591 INFO L130 BoogieDeclarations]: Found specification of procedure rand_r [2019-10-07 13:25:30,591 INFO L130 BoogieDeclarations]: Found specification of procedure drand48 [2019-10-07 13:25:30,591 INFO L130 BoogieDeclarations]: Found specification of procedure erand48 [2019-10-07 13:25:30,591 INFO L130 BoogieDeclarations]: Found specification of procedure lrand48 [2019-10-07 13:25:30,592 INFO L130 BoogieDeclarations]: Found specification of procedure nrand48 [2019-10-07 13:25:30,592 INFO L130 BoogieDeclarations]: Found specification of procedure mrand48 [2019-10-07 13:25:30,592 INFO L130 BoogieDeclarations]: Found specification of procedure jrand48 [2019-10-07 13:25:30,592 INFO L130 BoogieDeclarations]: Found specification of procedure srand48 [2019-10-07 13:25:30,592 INFO L130 BoogieDeclarations]: Found specification of procedure seed48 [2019-10-07 13:25:30,592 INFO L130 BoogieDeclarations]: Found specification of procedure lcong48 [2019-10-07 13:25:30,592 INFO L130 BoogieDeclarations]: Found specification of procedure drand48_r [2019-10-07 13:25:30,593 INFO L130 BoogieDeclarations]: Found specification of procedure erand48_r [2019-10-07 13:25:30,593 INFO L130 BoogieDeclarations]: Found specification of procedure lrand48_r [2019-10-07 13:25:30,593 INFO L130 BoogieDeclarations]: Found specification of procedure nrand48_r [2019-10-07 13:25:30,593 INFO L130 BoogieDeclarations]: Found specification of procedure mrand48_r [2019-10-07 13:25:30,593 INFO L130 BoogieDeclarations]: Found specification of procedure jrand48_r [2019-10-07 13:25:30,593 INFO L130 BoogieDeclarations]: Found specification of procedure srand48_r [2019-10-07 13:25:30,594 INFO L130 BoogieDeclarations]: Found specification of procedure seed48_r [2019-10-07 13:25:30,594 INFO L130 BoogieDeclarations]: Found specification of procedure lcong48_r [2019-10-07 13:25:30,594 INFO L130 BoogieDeclarations]: Found specification of procedure malloc [2019-10-07 13:25:30,594 INFO L130 BoogieDeclarations]: Found specification of procedure calloc [2019-10-07 13:25:30,594 INFO L130 BoogieDeclarations]: Found specification of procedure realloc [2019-10-07 13:25:30,594 INFO L130 BoogieDeclarations]: Found specification of procedure free [2019-10-07 13:25:30,595 INFO L130 BoogieDeclarations]: Found specification of procedure cfree [2019-10-07 13:25:30,595 INFO L130 BoogieDeclarations]: Found specification of procedure alloca [2019-10-07 13:25:30,595 INFO L130 BoogieDeclarations]: Found specification of procedure valloc [2019-10-07 13:25:30,595 INFO L130 BoogieDeclarations]: Found specification of procedure posix_memalign [2019-10-07 13:25:30,595 INFO L130 BoogieDeclarations]: Found specification of procedure aligned_alloc [2019-10-07 13:25:30,595 INFO L130 BoogieDeclarations]: Found specification of procedure abort [2019-10-07 13:25:30,595 INFO L130 BoogieDeclarations]: Found specification of procedure atexit [2019-10-07 13:25:30,596 INFO L130 BoogieDeclarations]: Found specification of procedure at_quick_exit [2019-10-07 13:25:30,596 INFO L130 BoogieDeclarations]: Found specification of procedure on_exit [2019-10-07 13:25:30,596 INFO L130 BoogieDeclarations]: Found specification of procedure exit [2019-10-07 13:25:30,596 INFO L130 BoogieDeclarations]: Found specification of procedure quick_exit [2019-10-07 13:25:30,596 INFO L130 BoogieDeclarations]: Found specification of procedure _Exit [2019-10-07 13:25:30,596 INFO L130 BoogieDeclarations]: Found specification of procedure getenv [2019-10-07 13:25:30,597 INFO L130 BoogieDeclarations]: Found specification of procedure putenv [2019-10-07 13:25:30,597 INFO L130 BoogieDeclarations]: Found specification of procedure setenv [2019-10-07 13:25:30,597 INFO L130 BoogieDeclarations]: Found specification of procedure unsetenv [2019-10-07 13:25:30,597 INFO L130 BoogieDeclarations]: Found specification of procedure clearenv [2019-10-07 13:25:30,597 INFO L130 BoogieDeclarations]: Found specification of procedure mktemp [2019-10-07 13:25:30,597 INFO L130 BoogieDeclarations]: Found specification of procedure mkstemp [2019-10-07 13:25:30,598 INFO L130 BoogieDeclarations]: Found specification of procedure mkstemps [2019-10-07 13:25:30,598 INFO L130 BoogieDeclarations]: Found specification of procedure mkdtemp [2019-10-07 13:25:30,598 INFO L130 BoogieDeclarations]: Found specification of procedure system [2019-10-07 13:25:30,598 INFO L130 BoogieDeclarations]: Found specification of procedure realpath [2019-10-07 13:25:30,598 INFO L130 BoogieDeclarations]: Found specification of procedure bsearch [2019-10-07 13:25:30,598 INFO L130 BoogieDeclarations]: Found specification of procedure qsort [2019-10-07 13:25:30,599 INFO L130 BoogieDeclarations]: Found specification of procedure abs [2019-10-07 13:25:30,599 INFO L130 BoogieDeclarations]: Found specification of procedure labs [2019-10-07 13:25:30,599 INFO L130 BoogieDeclarations]: Found specification of procedure llabs [2019-10-07 13:25:30,599 INFO L130 BoogieDeclarations]: Found specification of procedure div [2019-10-07 13:25:30,599 INFO L130 BoogieDeclarations]: Found specification of procedure ldiv [2019-10-07 13:25:30,599 INFO L130 BoogieDeclarations]: Found specification of procedure lldiv [2019-10-07 13:25:30,599 INFO L130 BoogieDeclarations]: Found specification of procedure ecvt [2019-10-07 13:25:30,600 INFO L130 BoogieDeclarations]: Found specification of procedure fcvt [2019-10-07 13:25:30,600 INFO L130 BoogieDeclarations]: Found specification of procedure gcvt [2019-10-07 13:25:30,600 INFO L130 BoogieDeclarations]: Found specification of procedure qecvt [2019-10-07 13:25:30,600 INFO L130 BoogieDeclarations]: Found specification of procedure qfcvt [2019-10-07 13:25:30,600 INFO L130 BoogieDeclarations]: Found specification of procedure qgcvt [2019-10-07 13:25:30,600 INFO L130 BoogieDeclarations]: Found specification of procedure ecvt_r [2019-10-07 13:25:30,600 INFO L130 BoogieDeclarations]: Found specification of procedure fcvt_r [2019-10-07 13:25:30,601 INFO L130 BoogieDeclarations]: Found specification of procedure qecvt_r [2019-10-07 13:25:30,601 INFO L130 BoogieDeclarations]: Found specification of procedure qfcvt_r [2019-10-07 13:25:30,601 INFO L130 BoogieDeclarations]: Found specification of procedure mblen [2019-10-07 13:25:30,601 INFO L130 BoogieDeclarations]: Found specification of procedure mbtowc [2019-10-07 13:25:30,601 INFO L130 BoogieDeclarations]: Found specification of procedure wctomb [2019-10-07 13:25:30,601 INFO L130 BoogieDeclarations]: Found specification of procedure mbstowcs [2019-10-07 13:25:30,602 INFO L130 BoogieDeclarations]: Found specification of procedure wcstombs [2019-10-07 13:25:30,602 INFO L130 BoogieDeclarations]: Found specification of procedure rpmatch [2019-10-07 13:25:30,602 INFO L130 BoogieDeclarations]: Found specification of procedure getsubopt [2019-10-07 13:25:30,602 INFO L130 BoogieDeclarations]: Found specification of procedure getloadavg [2019-10-07 13:25:30,602 INFO L130 BoogieDeclarations]: Found specification of procedure myexit [2019-10-07 13:25:30,602 INFO L130 BoogieDeclarations]: Found specification of procedure node_create [2019-10-07 13:25:30,602 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2019-10-07 13:25:30,603 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2019-10-07 13:25:30,603 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2019-10-07 13:25:30,603 INFO L130 BoogieDeclarations]: Found specification of procedure dll_create [2019-10-07 13:25:30,603 INFO L130 BoogieDeclarations]: Found specification of procedure dll_remove_last [2019-10-07 13:25:30,603 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2019-10-07 13:25:30,603 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2019-10-07 13:25:30,604 INFO L130 BoogieDeclarations]: Found specification of procedure main [2019-10-07 13:25:30,604 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2019-10-07 13:25:30,604 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2019-10-07 13:25:30,604 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2019-10-07 13:25:30,604 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2019-10-07 13:25:30,604 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2019-10-07 13:25:30,963 INFO L685 $ProcedureCfgBuilder]: dead code at ProgramPoint myexitFINAL: assume true; [2019-10-07 13:25:31,351 INFO L279 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2019-10-07 13:25:31,352 INFO L284 CfgBuilder]: Removed 3 assume(true) statements. [2019-10-07 13:25:31,353 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.10 01:25:31 BoogieIcfgContainer [2019-10-07 13:25:31,353 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2019-10-07 13:25:31,355 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2019-10-07 13:25:31,355 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2019-10-07 13:25:31,358 INFO L275 PluginConnector]: TraceAbstraction initialized [2019-10-07 13:25:31,359 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 07.10 01:25:29" (1/3) ... [2019-10-07 13:25:31,359 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@53994de6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 07.10 01:25:31, skipping insertion in model container [2019-10-07 13:25:31,360 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.10 01:25:30" (2/3) ... [2019-10-07 13:25:31,360 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@53994de6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 07.10 01:25:31, skipping insertion in model container [2019-10-07 13:25:31,360 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.10 01:25:31" (3/3) ... [2019-10-07 13:25:31,362 INFO L109 eAbstractionObserver]: Analyzing ICFG dll2n_remove_all_reverse.i [2019-10-07 13:25:31,372 INFO L152 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2019-10-07 13:25:31,381 INFO L164 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2019-10-07 13:25:31,391 INFO L249 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2019-10-07 13:25:31,413 INFO L373 AbstractCegarLoop]: Interprodecural is true [2019-10-07 13:25:31,413 INFO L374 AbstractCegarLoop]: Hoare is true [2019-10-07 13:25:31,414 INFO L375 AbstractCegarLoop]: Compute interpolants for FPandBP [2019-10-07 13:25:31,414 INFO L376 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2019-10-07 13:25:31,414 INFO L377 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2019-10-07 13:25:31,414 INFO L378 AbstractCegarLoop]: Difference is false [2019-10-07 13:25:31,414 INFO L379 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2019-10-07 13:25:31,415 INFO L383 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2019-10-07 13:25:31,433 INFO L276 IsEmpty]: Start isEmpty. Operand 32 states. [2019-10-07 13:25:31,439 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2019-10-07 13:25:31,440 INFO L377 BasicCegarLoop]: Found error trace [2019-10-07 13:25:31,441 INFO L385 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-07 13:25:31,443 INFO L410 AbstractCegarLoop]: === Iteration 1 === [mainErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-07 13:25:31,448 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-07 13:25:31,449 INFO L82 PathProgramCache]: Analyzing trace with hash 1503477050, now seen corresponding path program 1 times [2019-10-07 13:25:31,458 INFO L150 tionRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2019-10-07 13:25:31,459 INFO L231 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2019-10-07 13:25:31,459 INFO L117 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-07 13:25:31,459 INFO L117 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-07 13:25:31,460 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-07 13:25:31,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-07 13:25:31,656 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-10-07 13:25:31,657 INFO L286 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2019-10-07 13:25:31,658 INFO L211 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-10-07 13:25:31,658 INFO L224 tionRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-10-07 13:25:31,662 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-10-07 13:25:31,673 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-10-07 13:25:31,674 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2019-10-07 13:25:31,675 INFO L87 Difference]: Start difference. First operand 32 states. Second operand 4 states. [2019-10-07 13:25:31,772 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-10-07 13:25:31,772 INFO L93 Difference]: Finished difference Result 52 states and 66 transitions. [2019-10-07 13:25:31,773 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2019-10-07 13:25:31,774 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 13 [2019-10-07 13:25:31,775 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-10-07 13:25:31,784 INFO L225 Difference]: With dead ends: 52 [2019-10-07 13:25:31,785 INFO L226 Difference]: Without dead ends: 28 [2019-10-07 13:25:31,790 INFO L606 BasicCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2019-10-07 13:25:31,805 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28 states. [2019-10-07 13:25:31,824 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28 to 26. [2019-10-07 13:25:31,826 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 26 states. [2019-10-07 13:25:31,827 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26 states to 26 states and 29 transitions. [2019-10-07 13:25:31,828 INFO L78 Accepts]: Start accepts. Automaton has 26 states and 29 transitions. Word has length 13 [2019-10-07 13:25:31,828 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-10-07 13:25:31,828 INFO L462 AbstractCegarLoop]: Abstraction has 26 states and 29 transitions. [2019-10-07 13:25:31,829 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-10-07 13:25:31,829 INFO L276 IsEmpty]: Start isEmpty. Operand 26 states and 29 transitions. [2019-10-07 13:25:31,830 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2019-10-07 13:25:31,830 INFO L377 BasicCegarLoop]: Found error trace [2019-10-07 13:25:31,830 INFO L385 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-07 13:25:31,830 INFO L410 AbstractCegarLoop]: === Iteration 2 === [mainErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-07 13:25:31,830 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-07 13:25:31,831 INFO L82 PathProgramCache]: Analyzing trace with hash -886044635, now seen corresponding path program 1 times [2019-10-07 13:25:31,831 INFO L150 tionRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2019-10-07 13:25:31,831 INFO L231 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2019-10-07 13:25:31,831 INFO L117 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-07 13:25:31,831 INFO L117 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-07 13:25:31,832 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-07 13:25:31,866 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-07 13:25:31,977 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-10-07 13:25:31,977 INFO L286 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2019-10-07 13:25:31,977 INFO L286 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2019-10-07 13:25:31,977 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-10-07 13:25:32,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-07 13:25:32,129 INFO L256 TraceCheckSpWp]: Trace formula consists of 123 conjuncts, 4 conjunts are in the unsatisfiable core [2019-10-07 13:25:32,138 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2019-10-07 13:25:32,165 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2019-10-07 13:25:32,165 INFO L322 TraceCheckSpWp]: Computing backward predicates... [2019-10-07 13:25:32,260 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2019-10-07 13:25:32,261 INFO L211 tionRefinementEngine]: Constructing automaton from 2 perfect and 1 imperfect interpolant sequences. [2019-10-07 13:25:32,261 INFO L224 tionRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [8] total 10 [2019-10-07 13:25:32,263 INFO L442 AbstractCegarLoop]: Interpolant automaton has 7 states [2019-10-07 13:25:32,263 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-10-07 13:25:32,264 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=67, Unknown=0, NotChecked=0, Total=90 [2019-10-07 13:25:32,264 INFO L87 Difference]: Start difference. First operand 26 states and 29 transitions. Second operand 7 states. [2019-10-07 13:25:32,336 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-10-07 13:25:32,336 INFO L93 Difference]: Finished difference Result 45 states and 51 transitions. [2019-10-07 13:25:32,337 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2019-10-07 13:25:32,337 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 20 [2019-10-07 13:25:32,337 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-10-07 13:25:32,338 INFO L225 Difference]: With dead ends: 45 [2019-10-07 13:25:32,339 INFO L226 Difference]: Without dead ends: 29 [2019-10-07 13:25:32,340 INFO L606 BasicCegarLoop]: 0 DeclaredPredicates, 48 GetRequests, 37 SyntacticMatches, 2 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=28, Invalid=82, Unknown=0, NotChecked=0, Total=110 [2019-10-07 13:25:32,340 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2019-10-07 13:25:32,345 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 27. [2019-10-07 13:25:32,345 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 27 states. [2019-10-07 13:25:32,346 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27 states to 27 states and 30 transitions. [2019-10-07 13:25:32,346 INFO L78 Accepts]: Start accepts. Automaton has 27 states and 30 transitions. Word has length 20 [2019-10-07 13:25:32,347 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-10-07 13:25:32,347 INFO L462 AbstractCegarLoop]: Abstraction has 27 states and 30 transitions. [2019-10-07 13:25:32,347 INFO L463 AbstractCegarLoop]: Interpolant automaton has 7 states. [2019-10-07 13:25:32,347 INFO L276 IsEmpty]: Start isEmpty. Operand 27 states and 30 transitions. [2019-10-07 13:25:32,348 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2019-10-07 13:25:32,348 INFO L377 BasicCegarLoop]: Found error trace [2019-10-07 13:25:32,348 INFO L385 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-07 13:25:32,553 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-10-07 13:25:32,553 INFO L410 AbstractCegarLoop]: === Iteration 3 === [mainErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-07 13:25:32,553 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-07 13:25:32,554 INFO L82 PathProgramCache]: Analyzing trace with hash -497001908, now seen corresponding path program 1 times [2019-10-07 13:25:32,554 INFO L150 tionRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2019-10-07 13:25:32,554 INFO L231 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2019-10-07 13:25:32,554 INFO L117 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-07 13:25:32,554 INFO L117 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-07 13:25:32,555 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-07 13:25:32,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-07 13:25:32,749 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2019-10-07 13:25:32,750 INFO L286 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2019-10-07 13:25:32,750 INFO L211 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-10-07 13:25:32,750 INFO L224 tionRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-10-07 13:25:32,751 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-10-07 13:25:32,751 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-10-07 13:25:32,752 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-10-07 13:25:32,752 INFO L87 Difference]: Start difference. First operand 27 states and 30 transitions. Second operand 6 states. [2019-10-07 13:25:32,906 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-10-07 13:25:32,907 INFO L93 Difference]: Finished difference Result 40 states and 46 transitions. [2019-10-07 13:25:32,907 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-10-07 13:25:32,908 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 23 [2019-10-07 13:25:32,908 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-10-07 13:25:32,909 INFO L225 Difference]: With dead ends: 40 [2019-10-07 13:25:32,909 INFO L226 Difference]: Without dead ends: 27 [2019-10-07 13:25:32,910 INFO L606 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2019-10-07 13:25:32,910 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27 states. [2019-10-07 13:25:32,914 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27 to 27. [2019-10-07 13:25:32,915 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 27 states. [2019-10-07 13:25:32,916 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27 states to 27 states and 29 transitions. [2019-10-07 13:25:32,916 INFO L78 Accepts]: Start accepts. Automaton has 27 states and 29 transitions. Word has length 23 [2019-10-07 13:25:32,916 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-10-07 13:25:32,916 INFO L462 AbstractCegarLoop]: Abstraction has 27 states and 29 transitions. [2019-10-07 13:25:32,916 INFO L463 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-10-07 13:25:32,917 INFO L276 IsEmpty]: Start isEmpty. Operand 27 states and 29 transitions. [2019-10-07 13:25:32,917 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2019-10-07 13:25:32,918 INFO L377 BasicCegarLoop]: Found error trace [2019-10-07 13:25:32,918 INFO L385 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-07 13:25:32,918 INFO L410 AbstractCegarLoop]: === Iteration 4 === [mainErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-07 13:25:32,918 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-07 13:25:32,918 INFO L82 PathProgramCache]: Analyzing trace with hash -1275364761, now seen corresponding path program 1 times [2019-10-07 13:25:32,919 INFO L150 tionRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2019-10-07 13:25:32,919 INFO L231 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2019-10-07 13:25:32,919 INFO L117 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-07 13:25:32,919 INFO L117 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-07 13:25:32,919 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-07 13:25:32,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-07 13:25:33,086 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-10-07 13:25:33,088 INFO L286 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2019-10-07 13:25:33,088 INFO L286 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2019-10-07 13:25:33,088 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-10-07 13:25:33,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-07 13:25:33,249 INFO L256 TraceCheckSpWp]: Trace formula consists of 161 conjuncts, 5 conjunts are in the unsatisfiable core [2019-10-07 13:25:33,253 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2019-10-07 13:25:33,264 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2019-10-07 13:25:33,264 INFO L322 TraceCheckSpWp]: Computing backward predicates... [2019-10-07 13:25:33,355 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2019-10-07 13:25:33,355 INFO L286 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2019-10-07 13:25:33,388 INFO L162 IcfgInterpreter]: Started Sifa with 25 locations of interest [2019-10-07 13:25:33,388 INFO L169 IcfgInterpreter]: Building call graph [2019-10-07 13:25:33,394 INFO L174 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2019-10-07 13:25:33,402 INFO L179 IcfgInterpreter]: Starting interpretation [2019-10-07 13:25:33,402 INFO L199 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2019-10-07 13:25:33,532 INFO L199 IcfgInterpreter]: Interpreting procedure main with input of size 27 for LOIs [2019-10-07 13:25:33,738 WARN L225 Elim1Store]: Array PQE input equivalent to false [2019-10-07 13:25:34,034 WARN L225 Elim1Store]: Array PQE input equivalent to false [2019-10-07 13:25:34,373 WARN L225 Elim1Store]: Array PQE input equivalent to false [2019-10-07 13:25:35,119 WARN L225 Elim1Store]: Array PQE input equivalent to false [2019-10-07 13:25:35,130 WARN L225 Elim1Store]: Array PQE input equivalent to false [2019-10-07 13:25:35,287 WARN L225 Elim1Store]: Array PQE input equivalent to false [2019-10-07 13:25:35,299 WARN L225 Elim1Store]: Array PQE input equivalent to false [2019-10-07 13:25:36,013 WARN L225 Elim1Store]: Array PQE input equivalent to false [2019-10-07 13:25:36,019 WARN L225 Elim1Store]: Array PQE input equivalent to false [2019-10-07 13:25:36,739 INFO L199 IcfgInterpreter]: Interpreting procedure dll_create with input of size 44 for LOIs [2019-10-07 13:25:41,608 INFO L199 IcfgInterpreter]: Interpreting procedure ULTIMATE.init with input of size 10 for LOIs [2019-10-07 13:25:41,612 INFO L199 IcfgInterpreter]: Interpreting procedure dll_remove_last with input of size 35 for LOIs [2019-10-07 13:25:41,738 INFO L183 IcfgInterpreter]: Interpretation finished [2019-10-07 13:25:41,738 INFO L191 IcfgInterpreter]: Final predicates for locations of interest are: [2019-10-07 13:25:41,739 INFO L193 IcfgInterpreter]: Reachable states at location L599-3 satisfy 427#(and (<= dll_remove_last_~snd_to_last~0.offset 0) (<= 0 dll_remove_last_~head.offset) (<= dll_remove_last_~snd_to_last~0.base 0) (<= dll_remove_last_~head.offset 0) (<= 0 dll_remove_last_~snd_to_last~0.base) (or (and (= (select (select |#memory_$Pointer$.offset| dll_remove_last_~head.base) dll_remove_last_~head.offset) dll_remove_last_~last~0.offset) (= 0 |#NULL.base|) (= dll_remove_last_~snd_to_last~0.offset 0) (<= |#NULL.base| 0) (<= |dll_remove_last_#in~head.offset| 0) (<= 0 (select (select |old(#memory_$Pointer$.offset)| |dll_remove_last_#in~head.base|) |dll_remove_last_#in~head.offset|)) (= dll_remove_last_~snd_to_last~0.base 0) (<= 0 |#NULL.base|) (= (select (select |#memory_$Pointer$.base| dll_remove_last_~head.base) dll_remove_last_~head.offset) dll_remove_last_~last~0.base) (<= 0 |#NULL.offset|) (<= |#NULL.offset| 0) (not (= |dll_remove_last_#in~head.base| 0)) (= |#valid| |old(#valid)|) (not (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| dll_remove_last_~head.base) dll_remove_last_~head.offset)) (+ (select (select |#memory_$Pointer$.offset| dll_remove_last_~head.base) dll_remove_last_~head.offset) 4)))) (= dll_remove_last_~head.offset |dll_remove_last_#in~head.offset|) (= |dll_remove_last_#in~head.base| dll_remove_last_~head.base) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= 0 |dll_remove_last_#in~head.offset|) (<= (select (select |old(#memory_$Pointer$.offset)| |dll_remove_last_#in~head.base|) |dll_remove_last_#in~head.offset|) 0) (= |#NULL.offset| 0) (< |dll_remove_last_#in~head.base| |#StackHeapBarrier|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|)) (and (= (select (select |#memory_$Pointer$.offset| dll_remove_last_~head.base) dll_remove_last_~head.offset) dll_remove_last_~last~0.offset) (= 0 |#NULL.base|) (= dll_remove_last_~snd_to_last~0.offset 0) (<= |#NULL.base| 0) (<= |dll_remove_last_#in~head.offset| 0) (<= 0 (select (select |old(#memory_$Pointer$.offset)| |dll_remove_last_#in~head.base|) |dll_remove_last_#in~head.offset|)) (= dll_remove_last_~snd_to_last~0.base 0) (<= 0 |#NULL.base|) (= (select (select |#memory_$Pointer$.base| dll_remove_last_~head.base) dll_remove_last_~head.offset) dll_remove_last_~last~0.base) (<= 0 |#NULL.offset|) (<= |#NULL.offset| 0) (not (= |dll_remove_last_#in~head.base| 0)) (= |#valid| |old(#valid)|) (not (= 0 (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| dll_remove_last_~head.base) dll_remove_last_~head.offset)) (+ (select (select |#memory_$Pointer$.offset| dll_remove_last_~head.base) dll_remove_last_~head.offset) 4)))) (= dll_remove_last_~head.offset |dll_remove_last_#in~head.offset|) (= |dll_remove_last_#in~head.base| dll_remove_last_~head.base) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= 0 |dll_remove_last_#in~head.offset|) (<= (select (select |old(#memory_$Pointer$.offset)| |dll_remove_last_#in~head.base|) |dll_remove_last_#in~head.offset|) 0) (= |#NULL.offset| 0) (< |dll_remove_last_#in~head.base| |#StackHeapBarrier|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))) (<= 0 |dll_remove_last_#in~head.offset|) (<= 0 dll_remove_last_~snd_to_last~0.offset)) [2019-10-07 13:25:41,739 INFO L193 IcfgInterpreter]: Reachable states at location L599-4 satisfy 437#(and (or (and (= (select (select |#memory_$Pointer$.offset| dll_remove_last_~head.base) dll_remove_last_~head.offset) dll_remove_last_~last~0.offset) (= (select (select |#memory_$Pointer$.base| dll_remove_last_~last~0.base) (+ dll_remove_last_~last~0.offset 4)) 0) (= 0 |#NULL.base|) (= dll_remove_last_~snd_to_last~0.base 0) (= (select (select |#memory_$Pointer$.base| dll_remove_last_~head.base) dll_remove_last_~head.offset) dll_remove_last_~last~0.base) (= dll_remove_last_~head.offset |dll_remove_last_#in~head.offset|) (= |dll_remove_last_#in~head.base| dll_remove_last_~head.base) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= 0 |dll_remove_last_#in~head.offset|) (< |dll_remove_last_#in~head.base| |#StackHeapBarrier|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= dll_remove_last_~snd_to_last~0.offset 0) (<= 0 (select (select |old(#memory_$Pointer$.offset)| |dll_remove_last_#in~head.base|) |dll_remove_last_#in~head.offset|)) (not (= |dll_remove_last_#in~head.base| 0)) (= (select (select |#memory_$Pointer$.offset| dll_remove_last_~last~0.base) (+ dll_remove_last_~last~0.offset 4)) 0) (= |#valid| |old(#valid)|) (not (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| dll_remove_last_~head.base) dll_remove_last_~head.offset)) (+ (select (select |#memory_$Pointer$.offset| dll_remove_last_~head.base) dll_remove_last_~head.offset) 4)))) (= |#memory_int| |old(#memory_int)|) (<= (select (select |old(#memory_$Pointer$.offset)| |dll_remove_last_#in~head.base|) |dll_remove_last_#in~head.offset|) 0) (= |#NULL.offset| 0)) (and (= (select (select |#memory_$Pointer$.offset| dll_remove_last_~head.base) dll_remove_last_~head.offset) dll_remove_last_~last~0.offset) (= (select (select |#memory_$Pointer$.base| dll_remove_last_~last~0.base) (+ dll_remove_last_~last~0.offset 4)) 0) (= 0 |#NULL.base|) (= dll_remove_last_~snd_to_last~0.base 0) (= (select (select |#memory_$Pointer$.base| dll_remove_last_~head.base) dll_remove_last_~head.offset) dll_remove_last_~last~0.base) (not (= 0 (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| dll_remove_last_~head.base) dll_remove_last_~head.offset)) (+ (select (select |#memory_$Pointer$.offset| dll_remove_last_~head.base) dll_remove_last_~head.offset) 4)))) (= dll_remove_last_~head.offset |dll_remove_last_#in~head.offset|) (= |dll_remove_last_#in~head.base| dll_remove_last_~head.base) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= 0 |dll_remove_last_#in~head.offset|) (< |dll_remove_last_#in~head.base| |#StackHeapBarrier|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= dll_remove_last_~snd_to_last~0.offset 0) (<= 0 (select (select |old(#memory_$Pointer$.offset)| |dll_remove_last_#in~head.base|) |dll_remove_last_#in~head.offset|)) (not (= |dll_remove_last_#in~head.base| 0)) (= (select (select |#memory_$Pointer$.offset| dll_remove_last_~last~0.base) (+ dll_remove_last_~last~0.offset 4)) 0) (= |#valid| |old(#valid)|) (= |#memory_int| |old(#memory_int)|) (<= (select (select |old(#memory_$Pointer$.offset)| |dll_remove_last_#in~head.base|) |dll_remove_last_#in~head.offset|) 0) (= |#NULL.offset| 0))) (<= dll_remove_last_~snd_to_last~0.offset 0) (<= |#NULL.base| 0) (<= |dll_remove_last_#in~head.offset| 0) (<= 0 dll_remove_last_~head.offset) (<= dll_remove_last_~snd_to_last~0.base 0) (<= 0 |#NULL.base|) (<= 0 |#NULL.offset|) (<= |#NULL.offset| 0) (<= dll_remove_last_~head.offset 0) (<= 0 dll_remove_last_~snd_to_last~0.base) (<= 0 |dll_remove_last_#in~head.offset|) (<= 0 dll_remove_last_~snd_to_last~0.offset)) [2019-10-07 13:25:41,739 INFO L193 IcfgInterpreter]: Reachable states at location L615 satisfy 300#false [2019-10-07 13:25:41,739 INFO L193 IcfgInterpreter]: Reachable states at location L593 satisfy 422#(and (= 0 |#NULL.base|) (<= 0 |#NULL.base|) (<= 0 |#NULL.offset|) (= |dll_remove_last_#t~mem5.base| (select (select |#memory_$Pointer$.base| dll_remove_last_~head.base) dll_remove_last_~head.offset)) (= dll_remove_last_~head.offset |dll_remove_last_#in~head.offset|) (= |dll_remove_last_#in~head.base| dll_remove_last_~head.base) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= 0 |dll_remove_last_#in~head.offset|) (< |dll_remove_last_#in~head.base| |#StackHeapBarrier|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= (select (select |#memory_$Pointer$.offset| dll_remove_last_~head.base) dll_remove_last_~head.offset) |dll_remove_last_#t~mem5.offset|) (<= |#NULL.base| 0) (<= |dll_remove_last_#in~head.offset| 0) (<= 0 dll_remove_last_~head.offset) (<= 0 (select (select |old(#memory_$Pointer$.offset)| |dll_remove_last_#in~head.base|) |dll_remove_last_#in~head.offset|)) (<= |#NULL.offset| 0) (<= dll_remove_last_~head.offset 0) (not (= |dll_remove_last_#in~head.base| 0)) (= |#valid| |old(#valid)|) (= (select (select |#memory_$Pointer$.base| |dll_remove_last_#t~mem5.base|) (+ |dll_remove_last_#t~mem5.offset| 4)) |dll_remove_last_#t~mem6.base|) (<= 0 |dll_remove_last_#in~head.offset|) (= |#memory_int| |old(#memory_int)|) (<= (select (select |old(#memory_$Pointer$.offset)| |dll_remove_last_#in~head.base|) |dll_remove_last_#in~head.offset|) 0) (= |#NULL.offset| 0) (= |dll_remove_last_#t~mem6.offset| (select (select |#memory_$Pointer$.offset| |dll_remove_last_#t~mem5.base|) (+ |dll_remove_last_#t~mem5.offset| 4)))) [2019-10-07 13:25:41,740 INFO L193 IcfgInterpreter]: Reachable states at location L-1 satisfy 23#(and (= 0 |#NULL.base|) (<= |#NULL.base| 0) (= 0 (select |#valid| 0)) (<= 0 |#NULL.base|) (= |#NULL.offset| 0) (<= 0 |#NULL.offset|) (<= |#NULL.offset| 0)) [2019-10-07 13:25:41,740 INFO L193 IcfgInterpreter]: Reachable states at location mainENTRY satisfy 33#(and (= 0 |#NULL.base|) (<= |#NULL.base| 0) (= |#valid| |old(#valid)|) (<= 0 |#NULL.base|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#NULL.offset| 0) (= |old(#length)| |#length|) (= 0 (select |old(#valid)| 0)) (<= 0 |#NULL.offset|) (<= |#NULL.offset| 0) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|)) [2019-10-07 13:25:41,740 INFO L193 IcfgInterpreter]: Reachable states at location L613 satisfy 328#(and (<= 0 main_~i~0) (= 0 |#NULL.base|) (<= 0 |#NULL.base|) (= 0 (select |old(#valid)| |main_~#s~0.base|)) (<= 0 |main_~#s~0.offset|) (<= 0 |#NULL.offset|) (<= 1 main_~i~0) (= main_~i~0 (+ main_~len~0 (- 1))) (<= main_~i~0 1) (= main_~len~0 2) (< |main_~#s~0.base| |#StackHeapBarrier|) (<= (select (select |#memory_$Pointer$.offset| |main_~#s~0.base|) |main_~#s~0.offset|) 0) (<= |#NULL.base| 0) (= main_~data~0 1) (<= main_~len~0 2) (= 0 (select |old(#valid)| 0)) (<= |#NULL.offset| 0) (<= 1 main_~data~0) (<= |main_~#s~0.offset| 0) (= |main_~#s~0.offset| 0) (<= main_~data~0 1) (= |#NULL.offset| 0) (not (= |main_~#s~0.base| 0)) (<= 0 (select (select |#memory_$Pointer$.offset| |main_~#s~0.base|) |main_~#s~0.offset|)) (<= 2 main_~len~0)) [2019-10-07 13:25:41,740 INFO L193 IcfgInterpreter]: Reachable states at location dll_createEXIT satisfy 394#(and (= |dll_create_#res.base| dll_create_~head~0.base) (= |dll_create_#res.offset| dll_create_~head~0.offset) (not (< 0 dll_create_~len)) (<= dll_create_~len 0)) [2019-10-07 13:25:41,741 INFO L193 IcfgInterpreter]: Reachable states at location L613-1 satisfy 272#false [2019-10-07 13:25:41,741 INFO L193 IcfgInterpreter]: Reachable states at location mainErr0ASSERT_VIOLATIONERROR_FUNCTION satisfy 170#false [2019-10-07 13:25:41,741 INFO L193 IcfgInterpreter]: Reachable states at location dll_remove_lastEXIT satisfy 447#(and (<= dll_remove_last_~snd_to_last~0.offset 0) (<= 0 dll_remove_last_~head.offset) (<= dll_remove_last_~snd_to_last~0.base 0) (<= dll_remove_last_~head.offset 0) (<= 0 dll_remove_last_~snd_to_last~0.base) (or (and (= 0 |#NULL.base|) (= (store |old(#memory_int)| dll_remove_last_~snd_to_last~0.base (store (select |old(#memory_int)| dll_remove_last_~snd_to_last~0.base) (+ dll_remove_last_~snd_to_last~0.offset 4) (select (select |#memory_int| dll_remove_last_~snd_to_last~0.base) (+ dll_remove_last_~snd_to_last~0.offset 4)))) |#memory_int|) (= dll_remove_last_~snd_to_last~0.base 0) (= |#valid| (store |old(#valid)| dll_remove_last_~last~0.base 0)) (<= 0 |#NULL.base|) (<= 0 |#NULL.offset|) (not (= (select (select |old(#memory_$Pointer$.offset)| (select (select |old(#memory_$Pointer$.base)| dll_remove_last_~head.base) dll_remove_last_~head.offset)) (+ (select (select |old(#memory_$Pointer$.offset)| dll_remove_last_~head.base) dll_remove_last_~head.offset) 4)) 0)) (= dll_remove_last_~head.offset |dll_remove_last_#in~head.offset|) (= |dll_remove_last_#in~head.base| dll_remove_last_~head.base) (= 0 |dll_remove_last_#in~head.offset|) (< |dll_remove_last_#in~head.base| |#StackHeapBarrier|) (= dll_remove_last_~last~0.offset (select (select |old(#memory_$Pointer$.offset)| dll_remove_last_~head.base) dll_remove_last_~head.offset)) (= dll_remove_last_~snd_to_last~0.offset 0) (<= |#NULL.base| 0) (<= |dll_remove_last_#in~head.offset| 0) (<= 0 (select (select |old(#memory_$Pointer$.offset)| |dll_remove_last_#in~head.base|) |dll_remove_last_#in~head.offset|)) (= 0 (select (select |old(#memory_$Pointer$.base)| dll_remove_last_~last~0.base) (+ dll_remove_last_~last~0.offset 4))) (<= |#NULL.offset| 0) (not (= |dll_remove_last_#in~head.base| 0)) (= (store |old(#memory_$Pointer$.offset)| dll_remove_last_~snd_to_last~0.base (store (select |old(#memory_$Pointer$.offset)| dll_remove_last_~snd_to_last~0.base) (+ dll_remove_last_~snd_to_last~0.offset 4) 0)) |#memory_$Pointer$.offset|) (= |#memory_$Pointer$.base| (store |old(#memory_$Pointer$.base)| dll_remove_last_~snd_to_last~0.base (store (select |old(#memory_$Pointer$.base)| dll_remove_last_~snd_to_last~0.base) (+ dll_remove_last_~snd_to_last~0.offset 4) 0))) (<= 0 |dll_remove_last_#in~head.offset|) (= dll_remove_last_~last~0.base (select (select |old(#memory_$Pointer$.base)| dll_remove_last_~head.base) dll_remove_last_~head.offset)) (<= (select (select |old(#memory_$Pointer$.offset)| |dll_remove_last_#in~head.base|) |dll_remove_last_#in~head.offset|) 0) (= |#NULL.offset| 0) (= (select (select |old(#memory_$Pointer$.offset)| dll_remove_last_~last~0.base) (+ dll_remove_last_~last~0.offset 4)) 0)) (and (= 0 |#NULL.base|) (= (store |old(#memory_int)| dll_remove_last_~snd_to_last~0.base (store (select |old(#memory_int)| dll_remove_last_~snd_to_last~0.base) (+ dll_remove_last_~snd_to_last~0.offset 4) (select (select |#memory_int| dll_remove_last_~snd_to_last~0.base) (+ dll_remove_last_~snd_to_last~0.offset 4)))) |#memory_int|) (= dll_remove_last_~snd_to_last~0.base 0) (= |#valid| (store |old(#valid)| dll_remove_last_~last~0.base 0)) (<= 0 |#NULL.base|) (<= 0 |#NULL.offset|) (= dll_remove_last_~head.offset |dll_remove_last_#in~head.offset|) (= |dll_remove_last_#in~head.base| dll_remove_last_~head.base) (= 0 |dll_remove_last_#in~head.offset|) (< |dll_remove_last_#in~head.base| |#StackHeapBarrier|) (not (= (select (select |old(#memory_$Pointer$.base)| (select (select |old(#memory_$Pointer$.base)| dll_remove_last_~head.base) dll_remove_last_~head.offset)) (+ (select (select |old(#memory_$Pointer$.offset)| dll_remove_last_~head.base) dll_remove_last_~head.offset) 4)) 0)) (= dll_remove_last_~last~0.offset (select (select |old(#memory_$Pointer$.offset)| dll_remove_last_~head.base) dll_remove_last_~head.offset)) (= dll_remove_last_~snd_to_last~0.offset 0) (<= |#NULL.base| 0) (<= |dll_remove_last_#in~head.offset| 0) (<= 0 (select (select |old(#memory_$Pointer$.offset)| |dll_remove_last_#in~head.base|) |dll_remove_last_#in~head.offset|)) (= 0 (select (select |old(#memory_$Pointer$.base)| dll_remove_last_~last~0.base) (+ dll_remove_last_~last~0.offset 4))) (<= |#NULL.offset| 0) (not (= |dll_remove_last_#in~head.base| 0)) (= (store |old(#memory_$Pointer$.offset)| dll_remove_last_~snd_to_last~0.base (store (select |old(#memory_$Pointer$.offset)| dll_remove_last_~snd_to_last~0.base) (+ dll_remove_last_~snd_to_last~0.offset 4) 0)) |#memory_$Pointer$.offset|) (= |#memory_$Pointer$.base| (store |old(#memory_$Pointer$.base)| dll_remove_last_~snd_to_last~0.base (store (select |old(#memory_$Pointer$.base)| dll_remove_last_~snd_to_last~0.base) (+ dll_remove_last_~snd_to_last~0.offset 4) 0))) (<= 0 |dll_remove_last_#in~head.offset|) (= dll_remove_last_~last~0.base (select (select |old(#memory_$Pointer$.base)| dll_remove_last_~head.base) dll_remove_last_~head.offset)) (<= (select (select |old(#memory_$Pointer$.offset)| |dll_remove_last_#in~head.base|) |dll_remove_last_#in~head.offset|) 0) (= |#NULL.offset| 0) (= (select (select |old(#memory_$Pointer$.offset)| dll_remove_last_~last~0.base) (+ dll_remove_last_~last~0.offset 4)) 0))) (<= 0 dll_remove_last_~snd_to_last~0.offset)) [2019-10-07 13:25:41,741 INFO L193 IcfgInterpreter]: Reachable states at location L599-1 satisfy 432#(and (<= dll_remove_last_~snd_to_last~0.offset 0) (<= 0 dll_remove_last_~head.offset) (<= dll_remove_last_~snd_to_last~0.base 0) (or (and (= (select (select |#memory_$Pointer$.offset| dll_remove_last_~head.base) dll_remove_last_~head.offset) dll_remove_last_~last~0.offset) (= 0 |#NULL.base|) (= dll_remove_last_~snd_to_last~0.base 0) (<= 0 |#NULL.base|) (= (select (select |#memory_$Pointer$.base| dll_remove_last_~head.base) dll_remove_last_~head.offset) dll_remove_last_~last~0.base) (= (select (select |#memory_$Pointer$.offset| dll_remove_last_~last~0.base) (+ dll_remove_last_~last~0.offset 4)) |dll_remove_last_#t~mem10.offset|) (= dll_remove_last_~head.offset |dll_remove_last_#in~head.offset|) (= |dll_remove_last_#in~head.base| dll_remove_last_~head.base) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= 0 |dll_remove_last_#in~head.offset|) (< |dll_remove_last_#in~head.base| |#StackHeapBarrier|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= dll_remove_last_~snd_to_last~0.offset 0) (<= |#NULL.base| 0) (<= |dll_remove_last_#in~head.offset| 0) (<= 0 (select (select |old(#memory_$Pointer$.offset)| |dll_remove_last_#in~head.base|) |dll_remove_last_#in~head.offset|)) (not (= |dll_remove_last_#in~head.base| 0)) (= (select (select |#memory_$Pointer$.base| dll_remove_last_~last~0.base) (+ dll_remove_last_~last~0.offset 4)) |dll_remove_last_#t~mem10.base|) (= |#valid| |old(#valid)|) (not (= 0 (select (select |#memory_$Pointer$.offset| (select (select |#memory_$Pointer$.base| dll_remove_last_~head.base) dll_remove_last_~head.offset)) (+ (select (select |#memory_$Pointer$.offset| dll_remove_last_~head.base) dll_remove_last_~head.offset) 4)))) (= |#memory_int| |old(#memory_int)|) (<= (select (select |old(#memory_$Pointer$.offset)| |dll_remove_last_#in~head.base|) |dll_remove_last_#in~head.offset|) 0) (= |#NULL.offset| 0)) (and (= (select (select |#memory_$Pointer$.offset| dll_remove_last_~head.base) dll_remove_last_~head.offset) dll_remove_last_~last~0.offset) (= 0 |#NULL.base|) (= dll_remove_last_~snd_to_last~0.base 0) (<= 0 |#NULL.base|) (= (select (select |#memory_$Pointer$.base| dll_remove_last_~head.base) dll_remove_last_~head.offset) dll_remove_last_~last~0.base) (= (select (select |#memory_$Pointer$.offset| dll_remove_last_~last~0.base) (+ dll_remove_last_~last~0.offset 4)) |dll_remove_last_#t~mem10.offset|) (not (= 0 (select (select |#memory_$Pointer$.base| (select (select |#memory_$Pointer$.base| dll_remove_last_~head.base) dll_remove_last_~head.offset)) (+ (select (select |#memory_$Pointer$.offset| dll_remove_last_~head.base) dll_remove_last_~head.offset) 4)))) (= dll_remove_last_~head.offset |dll_remove_last_#in~head.offset|) (= |dll_remove_last_#in~head.base| dll_remove_last_~head.base) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= 0 |dll_remove_last_#in~head.offset|) (< |dll_remove_last_#in~head.base| |#StackHeapBarrier|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|) (= dll_remove_last_~snd_to_last~0.offset 0) (<= |#NULL.base| 0) (<= |dll_remove_last_#in~head.offset| 0) (<= 0 (select (select |old(#memory_$Pointer$.offset)| |dll_remove_last_#in~head.base|) |dll_remove_last_#in~head.offset|)) (not (= |dll_remove_last_#in~head.base| 0)) (= (select (select |#memory_$Pointer$.base| dll_remove_last_~last~0.base) (+ dll_remove_last_~last~0.offset 4)) |dll_remove_last_#t~mem10.base|) (= |#valid| |old(#valid)|) (= |#memory_int| |old(#memory_int)|) (<= (select (select |old(#memory_$Pointer$.offset)| |dll_remove_last_#in~head.base|) |dll_remove_last_#in~head.offset|) 0) (= |#NULL.offset| 0))) (<= 0 |#NULL.offset|) (<= |#NULL.offset| 0) (<= dll_remove_last_~head.offset 0) (<= 0 dll_remove_last_~snd_to_last~0.base) (<= 0 |dll_remove_last_#in~head.offset|) (<= 0 dll_remove_last_~snd_to_last~0.offset)) [2019-10-07 13:25:41,742 INFO L193 IcfgInterpreter]: Reachable states at location L578-1 satisfy 404#(and (<= 0 dll_create_~len) (or (and (= (select |#length| |dll_create_#t~malloc3.base|) 12) (not (= 0 |dll_create_#t~malloc3.base|)) (= dll_create_~new_head~0.base |dll_create_#t~malloc3.base|) (< 0 dll_create_~len) (not (= dll_create_~new_head~0.base 0)) (= |dll_create_#t~malloc3.offset| 0) (= |dll_create_#t~malloc3.offset| dll_create_~new_head~0.offset) (= 1 (select |#valid| |dll_create_#t~malloc3.base|)) (< |#StackHeapBarrier| |dll_create_#t~malloc3.base|)) (and (= (select |#length| |dll_create_#t~malloc3.base|) 12) (not (= 0 |dll_create_#t~malloc3.base|)) (= dll_create_~new_head~0.base |dll_create_#t~malloc3.base|) (< 0 dll_create_~len) (= |dll_create_#t~malloc3.offset| 0) (= |dll_create_#t~malloc3.offset| dll_create_~new_head~0.offset) (= 1 (select |#valid| |dll_create_#t~malloc3.base|)) (< |#StackHeapBarrier| |dll_create_#t~malloc3.base|) (not (= 0 dll_create_~new_head~0.offset)))) (<= |dll_create_#t~malloc3.offset| 0) (<= dll_create_~new_head~0.offset 0) (<= 0 dll_create_~new_head~0.offset) (<= 0 |dll_create_#t~malloc3.offset|)) [2019-10-07 13:25:41,742 INFO L193 IcfgInterpreter]: Reachable states at location L578 satisfy 399#(and (<= 0 dll_create_~len) (not (= 0 |dll_create_#t~malloc3.base|)) (= dll_create_~new_head~0.base |dll_create_#t~malloc3.base|) (< 0 dll_create_~len) (<= |dll_create_#t~malloc3.offset| 0) (= |dll_create_#t~malloc3.offset| 0) (= |dll_create_#t~malloc3.offset| dll_create_~new_head~0.offset) (= (select |#length| |dll_create_#t~malloc3.base|) 12) (= 1 (select |#valid| |dll_create_#t~malloc3.base|)) (<= dll_create_~new_head~0.offset 0) (< |#StackHeapBarrier| |dll_create_#t~malloc3.base|) (<= 0 dll_create_~new_head~0.offset) (<= 0 |dll_create_#t~malloc3.offset|)) [2019-10-07 13:25:41,742 INFO L193 IcfgInterpreter]: Reachable states at location ULTIMATE.initENTRY satisfy 408#(and (= |old(#NULL.base)| |#NULL.base|) (= |#valid| |old(#valid)|) (= |#NULL.offset| |old(#NULL.offset)|)) [2019-10-07 13:25:41,742 INFO L193 IcfgInterpreter]: Reachable states at location dll_remove_lastENTRY satisfy 417#(and (= 0 |#NULL.base|) (<= |#NULL.base| 0) (<= |dll_remove_last_#in~head.offset| 0) (<= 0 (select (select |old(#memory_$Pointer$.offset)| |dll_remove_last_#in~head.base|) |dll_remove_last_#in~head.offset|)) (<= 0 |#NULL.base|) (<= 0 |#NULL.offset|) (<= |#NULL.offset| 0) (not (= |dll_remove_last_#in~head.base| 0)) (= |#valid| |old(#valid)|) (<= 0 |dll_remove_last_#in~head.offset|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (<= (select (select |old(#memory_$Pointer$.offset)| |dll_remove_last_#in~head.base|) |dll_remove_last_#in~head.offset|) 0) (= 0 |dll_remove_last_#in~head.offset|) (= |#NULL.offset| 0) (< |dll_remove_last_#in~head.base| |#StackHeapBarrier|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|)) [2019-10-07 13:25:41,743 INFO L193 IcfgInterpreter]: Reachable states at location L616 satisfy 232#false [2019-10-07 13:25:41,743 INFO L193 IcfgInterpreter]: Reachable states at location L576-2 satisfy 389#true [2019-10-07 13:25:41,743 INFO L193 IcfgInterpreter]: Reachable states at location ULTIMATE.initEXIT satisfy 413#(and (= |#valid| (store |old(#valid)| 0 0)) (= 0 |#NULL.base|) (<= |#NULL.base| 0) (<= 0 |#NULL.base|) (= |#NULL.offset| 0) (<= 0 |#NULL.offset|) (<= |#NULL.offset| 0)) [2019-10-07 13:25:41,743 INFO L193 IcfgInterpreter]: Reachable states at location ULTIMATE.startENTRY satisfy 6#true [2019-10-07 13:25:41,744 INFO L193 IcfgInterpreter]: Reachable states at location L593-2 satisfy 442#(and (<= dll_remove_last_~snd_to_last~0.offset 0) (<= 0 dll_remove_last_~head.offset) (<= dll_remove_last_~snd_to_last~0.base 0) (<= dll_remove_last_~head.offset 0) (<= 0 dll_remove_last_~snd_to_last~0.base) (or (and (= 0 |#NULL.base|) (= (store |old(#memory_int)| dll_remove_last_~snd_to_last~0.base (store (select |old(#memory_int)| dll_remove_last_~snd_to_last~0.base) (+ dll_remove_last_~snd_to_last~0.offset 4) (select (select |#memory_int| dll_remove_last_~snd_to_last~0.base) (+ dll_remove_last_~snd_to_last~0.offset 4)))) |#memory_int|) (= dll_remove_last_~snd_to_last~0.base 0) (= |#valid| (store |old(#valid)| dll_remove_last_~last~0.base 0)) (<= 0 |#NULL.base|) (<= 0 |#NULL.offset|) (not (= (select (select |old(#memory_$Pointer$.offset)| (select (select |old(#memory_$Pointer$.base)| dll_remove_last_~head.base) dll_remove_last_~head.offset)) (+ (select (select |old(#memory_$Pointer$.offset)| dll_remove_last_~head.base) dll_remove_last_~head.offset) 4)) 0)) (= dll_remove_last_~head.offset |dll_remove_last_#in~head.offset|) (= |dll_remove_last_#in~head.base| dll_remove_last_~head.base) (= 0 |dll_remove_last_#in~head.offset|) (< |dll_remove_last_#in~head.base| |#StackHeapBarrier|) (= dll_remove_last_~last~0.offset (select (select |old(#memory_$Pointer$.offset)| dll_remove_last_~head.base) dll_remove_last_~head.offset)) (= dll_remove_last_~snd_to_last~0.offset 0) (<= |#NULL.base| 0) (<= |dll_remove_last_#in~head.offset| 0) (<= 0 (select (select |old(#memory_$Pointer$.offset)| |dll_remove_last_#in~head.base|) |dll_remove_last_#in~head.offset|)) (= 0 (select (select |old(#memory_$Pointer$.base)| dll_remove_last_~last~0.base) (+ dll_remove_last_~last~0.offset 4))) (<= |#NULL.offset| 0) (not (= |dll_remove_last_#in~head.base| 0)) (= (store |old(#memory_$Pointer$.offset)| dll_remove_last_~snd_to_last~0.base (store (select |old(#memory_$Pointer$.offset)| dll_remove_last_~snd_to_last~0.base) (+ dll_remove_last_~snd_to_last~0.offset 4) 0)) |#memory_$Pointer$.offset|) (= |#memory_$Pointer$.base| (store |old(#memory_$Pointer$.base)| dll_remove_last_~snd_to_last~0.base (store (select |old(#memory_$Pointer$.base)| dll_remove_last_~snd_to_last~0.base) (+ dll_remove_last_~snd_to_last~0.offset 4) 0))) (<= 0 |dll_remove_last_#in~head.offset|) (= dll_remove_last_~last~0.base (select (select |old(#memory_$Pointer$.base)| dll_remove_last_~head.base) dll_remove_last_~head.offset)) (<= (select (select |old(#memory_$Pointer$.offset)| |dll_remove_last_#in~head.base|) |dll_remove_last_#in~head.offset|) 0) (= |#NULL.offset| 0) (= (select (select |old(#memory_$Pointer$.offset)| dll_remove_last_~last~0.base) (+ dll_remove_last_~last~0.offset 4)) 0)) (and (= 0 |#NULL.base|) (= (store |old(#memory_int)| dll_remove_last_~snd_to_last~0.base (store (select |old(#memory_int)| dll_remove_last_~snd_to_last~0.base) (+ dll_remove_last_~snd_to_last~0.offset 4) (select (select |#memory_int| dll_remove_last_~snd_to_last~0.base) (+ dll_remove_last_~snd_to_last~0.offset 4)))) |#memory_int|) (= dll_remove_last_~snd_to_last~0.base 0) (= |#valid| (store |old(#valid)| dll_remove_last_~last~0.base 0)) (<= 0 |#NULL.base|) (<= 0 |#NULL.offset|) (= dll_remove_last_~head.offset |dll_remove_last_#in~head.offset|) (= |dll_remove_last_#in~head.base| dll_remove_last_~head.base) (= 0 |dll_remove_last_#in~head.offset|) (< |dll_remove_last_#in~head.base| |#StackHeapBarrier|) (not (= (select (select |old(#memory_$Pointer$.base)| (select (select |old(#memory_$Pointer$.base)| dll_remove_last_~head.base) dll_remove_last_~head.offset)) (+ (select (select |old(#memory_$Pointer$.offset)| dll_remove_last_~head.base) dll_remove_last_~head.offset) 4)) 0)) (= dll_remove_last_~last~0.offset (select (select |old(#memory_$Pointer$.offset)| dll_remove_last_~head.base) dll_remove_last_~head.offset)) (= dll_remove_last_~snd_to_last~0.offset 0) (<= |#NULL.base| 0) (<= |dll_remove_last_#in~head.offset| 0) (<= 0 (select (select |old(#memory_$Pointer$.offset)| |dll_remove_last_#in~head.base|) |dll_remove_last_#in~head.offset|)) (= 0 (select (select |old(#memory_$Pointer$.base)| dll_remove_last_~last~0.base) (+ dll_remove_last_~last~0.offset 4))) (<= |#NULL.offset| 0) (not (= |dll_remove_last_#in~head.base| 0)) (= (store |old(#memory_$Pointer$.offset)| dll_remove_last_~snd_to_last~0.base (store (select |old(#memory_$Pointer$.offset)| dll_remove_last_~snd_to_last~0.base) (+ dll_remove_last_~snd_to_last~0.offset 4) 0)) |#memory_$Pointer$.offset|) (= |#memory_$Pointer$.base| (store |old(#memory_$Pointer$.base)| dll_remove_last_~snd_to_last~0.base (store (select |old(#memory_$Pointer$.base)| dll_remove_last_~snd_to_last~0.base) (+ dll_remove_last_~snd_to_last~0.offset 4) 0))) (<= 0 |dll_remove_last_#in~head.offset|) (= dll_remove_last_~last~0.base (select (select |old(#memory_$Pointer$.base)| dll_remove_last_~head.base) dll_remove_last_~head.offset)) (<= (select (select |old(#memory_$Pointer$.offset)| |dll_remove_last_#in~head.base|) |dll_remove_last_#in~head.offset|) 0) (= |#NULL.offset| 0) (= (select (select |old(#memory_$Pointer$.offset)| dll_remove_last_~last~0.base) (+ dll_remove_last_~last~0.offset 4)) 0))) (<= 0 dll_remove_last_~snd_to_last~0.offset)) [2019-10-07 13:25:41,744 INFO L193 IcfgInterpreter]: Reachable states at location dll_createENTRY satisfy 356#(exists ((|v_main_~#s~0.base_BEFORE_CALL_20| Int)) (and (= (select |old(#valid)| |v_main_~#s~0.base_BEFORE_CALL_20|) 1) (= 0 |#NULL.base|) (<= |#NULL.base| 0) (<= 0 |#NULL.base|) (= 4 (select |old(#length)| |v_main_~#s~0.base_BEFORE_CALL_20|)) (= 2 |dll_create_#in~len|) (< |v_main_~#s~0.base_BEFORE_CALL_20| |#StackHeapBarrier|) (<= 0 |#NULL.offset|) (<= |#NULL.offset| 0) (= 0 (select |old(#valid)| 0)) (= |#valid| |old(#valid)|) (not (= 0 |v_main_~#s~0.base_BEFORE_CALL_20|)) (= |dll_create_#in~data| 1) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#NULL.offset| 0) (= |old(#length)| |#length|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))) [2019-10-07 13:25:41,744 INFO L193 IcfgInterpreter]: Reachable states at location L610 satisfy 38#(and (< |main_~#s~0.base| |#StackHeapBarrier|) (= |#valid| (store |old(#valid)| |main_~#s~0.base| 1)) (= 0 |#NULL.base|) (<= |#NULL.base| 0) (<= 0 |#NULL.base|) (= 0 (select |old(#valid)| |main_~#s~0.base|)) (<= 0 |main_~#s~0.offset|) (= main_~data~0 1) (<= main_~len~0 2) (= 0 (select |old(#valid)| 0)) (<= 0 |#NULL.offset|) (<= |#NULL.offset| 0) (<= 1 main_~data~0) (<= |main_~#s~0.offset| 0) (= |main_~#s~0.offset| 0) (<= main_~data~0 1) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= (store |old(#length)| |main_~#s~0.base| 4) |#length|) (= |#NULL.offset| 0) (not (= |main_~#s~0.base| 0)) (= main_~len~0 2) (<= 2 main_~len~0) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|)) [2019-10-07 13:25:41,744 INFO L193 IcfgInterpreter]: Reachable states at location L612-2 satisfy 351#(and (< |main_~#s~0.base| |#StackHeapBarrier|) (= 0 |#NULL.base|) (<= (select (select |#memory_$Pointer$.offset| |main_~#s~0.base|) |main_~#s~0.offset|) 0) (<= |#NULL.base| 0) (<= 0 |#NULL.base|) (= 0 (select |old(#valid)| |main_~#s~0.base|)) (<= 0 |main_~#s~0.offset|) (= main_~data~0 1) (<= main_~len~0 2) (<= 0 |#NULL.offset|) (= 0 (select |old(#valid)| 0)) (<= |#NULL.offset| 0) (<= 1 main_~data~0) (<= |main_~#s~0.offset| 0) (<= 1 main_~i~0) (= main_~i~0 (+ main_~len~0 (- 1))) (= |main_~#s~0.offset| 0) (<= main_~data~0 1) (<= main_~i~0 1) (= |#NULL.offset| 0) (not (= |main_~#s~0.base| 0)) (<= 0 (select (select |#memory_$Pointer$.offset| |main_~#s~0.base|) |main_~#s~0.offset|)) (= main_~len~0 2) (<= 2 main_~len~0)) [2019-10-07 13:25:41,745 INFO L193 IcfgInterpreter]: Reachable states at location L610-1 satisfy 94#(and (< |main_~#s~0.base| |#StackHeapBarrier|) (= 0 |#NULL.base|) (<= |#NULL.base| 0) (<= |main_#t~ret11.offset| 0) (<= 0 |#NULL.base|) (= 0 (select |old(#valid)| |main_~#s~0.base|)) (<= 0 |main_~#s~0.offset|) (= main_~data~0 1) (<= main_~len~0 2) (<= 0 |#NULL.offset|) (= 0 (select |old(#valid)| 0)) (<= |#NULL.offset| 0) (<= 1 main_~data~0) (<= |main_~#s~0.offset| 0) (= |main_~#s~0.offset| 0) (<= main_~data~0 1) (<= 0 |main_#t~ret11.offset|) (= |#NULL.offset| 0) (not (= |main_~#s~0.base| 0)) (= main_~len~0 2) (<= 2 main_~len~0)) [2019-10-07 13:25:42,012 WARN L191 SmtUtils]: Spent 100.00 ms on a formula simplification. DAG size of input: 51 DAG size of output: 43 [2019-10-07 13:25:42,680 WARN L191 SmtUtils]: Spent 113.00 ms on a formula simplification. DAG size of input: 59 DAG size of output: 54 [2019-10-07 13:25:43,110 WARN L191 SmtUtils]: Spent 370.00 ms on a formula simplification. DAG size of input: 70 DAG size of output: 58 [2019-10-07 13:25:43,594 WARN L191 SmtUtils]: Spent 413.00 ms on a formula simplification. DAG size of input: 79 DAG size of output: 70 [2019-10-07 13:25:43,613 INFO L211 tionRefinementEngine]: Constructing automaton from 1 perfect and 3 imperfect interpolant sequences. [2019-10-07 13:25:43,613 INFO L224 tionRefinementEngine]: Number of different interpolants: perfect sequences [16] imperfect sequences [9, 6, 6] total 25 [2019-10-07 13:25:43,614 INFO L442 AbstractCegarLoop]: Interpolant automaton has 16 states [2019-10-07 13:25:43,615 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2019-10-07 13:25:43,615 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=72, Invalid=528, Unknown=0, NotChecked=0, Total=600 [2019-10-07 13:25:43,616 INFO L87 Difference]: Start difference. First operand 27 states and 29 transitions. Second operand 16 states. [2019-10-07 13:25:44,477 WARN L191 SmtUtils]: Spent 158.00 ms on a formula simplification. DAG size of input: 65 DAG size of output: 63 [2019-10-07 13:25:44,823 WARN L191 SmtUtils]: Spent 303.00 ms on a formula simplification. DAG size of input: 70 DAG size of output: 69 [2019-10-07 13:25:45,236 WARN L191 SmtUtils]: Spent 372.00 ms on a formula simplification. DAG size of input: 79 DAG size of output: 79 [2019-10-07 13:25:45,380 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-10-07 13:25:45,381 INFO L93 Difference]: Finished difference Result 48 states and 55 transitions. [2019-10-07 13:25:45,381 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2019-10-07 13:25:45,381 INFO L78 Accepts]: Start accepts. Automaton has 16 states. Word has length 26 [2019-10-07 13:25:45,382 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-10-07 13:25:45,384 INFO L225 Difference]: With dead ends: 48 [2019-10-07 13:25:45,385 INFO L226 Difference]: Without dead ends: 35 [2019-10-07 13:25:45,386 INFO L606 BasicCegarLoop]: 0 DeclaredPredicates, 97 GetRequests, 56 SyntacticMatches, 8 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 282 ImplicationChecksByTransitivity, 3.3s TimeCoverageRelationStatistics Valid=146, Invalid=1044, Unknown=0, NotChecked=0, Total=1190 [2019-10-07 13:25:45,386 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 35 states. [2019-10-07 13:25:45,392 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 35 to 32. [2019-10-07 13:25:45,392 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 32 states. [2019-10-07 13:25:45,393 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32 states to 32 states and 35 transitions. [2019-10-07 13:25:45,393 INFO L78 Accepts]: Start accepts. Automaton has 32 states and 35 transitions. Word has length 26 [2019-10-07 13:25:45,394 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-10-07 13:25:45,394 INFO L462 AbstractCegarLoop]: Abstraction has 32 states and 35 transitions. [2019-10-07 13:25:45,394 INFO L463 AbstractCegarLoop]: Interpolant automaton has 16 states. [2019-10-07 13:25:45,394 INFO L276 IsEmpty]: Start isEmpty. Operand 32 states and 35 transitions. [2019-10-07 13:25:45,396 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2019-10-07 13:25:45,396 INFO L377 BasicCegarLoop]: Found error trace [2019-10-07 13:25:45,396 INFO L385 BasicCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-07 13:25:45,600 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-10-07 13:25:45,600 INFO L410 AbstractCegarLoop]: === Iteration 5 === [mainErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-07 13:25:45,601 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-07 13:25:45,601 INFO L82 PathProgramCache]: Analyzing trace with hash 1313247650, now seen corresponding path program 1 times [2019-10-07 13:25:45,601 INFO L150 tionRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2019-10-07 13:25:45,601 INFO L231 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2019-10-07 13:25:45,601 INFO L117 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-07 13:25:45,602 INFO L117 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-07 13:25:45,602 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-07 13:25:45,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-07 13:25:45,722 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-10-07 13:25:45,722 INFO L286 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2019-10-07 13:25:45,722 INFO L286 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2019-10-07 13:25:45,722 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 4 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-10-07 13:25:45,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-07 13:25:45,855 INFO L256 TraceCheckSpWp]: Trace formula consists of 174 conjuncts, 5 conjunts are in the unsatisfiable core [2019-10-07 13:25:45,859 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2019-10-07 13:25:45,864 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2019-10-07 13:25:45,864 INFO L322 TraceCheckSpWp]: Computing backward predicates... [2019-10-07 13:25:45,945 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2019-10-07 13:25:45,945 INFO L286 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2019-10-07 13:25:45,948 INFO L162 IcfgInterpreter]: Started Sifa with 25 locations of interest [2019-10-07 13:25:45,948 INFO L169 IcfgInterpreter]: Building call graph [2019-10-07 13:25:45,949 INFO L174 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2019-10-07 13:25:45,950 INFO L179 IcfgInterpreter]: Starting interpretation [2019-10-07 13:25:45,950 INFO L199 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2019-10-07 13:25:45,987 INFO L199 IcfgInterpreter]: Interpreting procedure main with input of size 27 for LOIs [2019-10-07 13:25:46,123 WARN L225 Elim1Store]: Array PQE input equivalent to false [2019-10-07 13:25:46,339 WARN L225 Elim1Store]: Array PQE input equivalent to false [2019-10-07 13:25:46,614 WARN L225 Elim1Store]: Array PQE input equivalent to false [2019-10-07 13:25:46,854 WARN L225 Elim1Store]: Array PQE input equivalent to false [2019-10-07 13:25:46,863 WARN L225 Elim1Store]: Array PQE input equivalent to false [2019-10-07 13:25:46,915 WARN L225 Elim1Store]: Array PQE input equivalent to false [2019-10-07 13:25:46,924 WARN L225 Elim1Store]: Array PQE input equivalent to false [2019-10-07 13:25:49,205 INFO L199 IcfgInterpreter]: Interpreting procedure dll_create with input of size 44 for LOIs [2019-10-07 13:25:54,899 INFO L199 IcfgInterpreter]: Interpreting procedure ULTIMATE.init with input of size 10 for LOIs [2019-10-07 13:25:54,904 INFO L199 IcfgInterpreter]: Interpreting procedure dll_remove_last with input of size 13 for LOIs [2019-10-07 13:25:54,962 INFO L183 IcfgInterpreter]: Interpretation finished [2019-10-07 13:25:54,965 INFO L191 IcfgInterpreter]: Final predicates for locations of interest are: [2019-10-07 13:25:54,965 INFO L193 IcfgInterpreter]: Reachable states at location L599-3 satisfy 772#true [2019-10-07 13:25:54,965 INFO L193 IcfgInterpreter]: Reachable states at location L599-4 satisfy 754#true [2019-10-07 13:25:54,966 INFO L193 IcfgInterpreter]: Reachable states at location L615 satisfy 515#(and (= (select (select |#memory_$Pointer$.offset| |main_~#s~0.base|) |main_~#s~0.offset|) |main_#t~mem13.offset|) (not (<= 0 main_~i~0)) (= (select (select |#memory_$Pointer$.base| |main_~#s~0.base|) |main_~#s~0.offset|) |main_#t~mem13.base|) (<= main_~i~0 0)) [2019-10-07 13:25:54,966 INFO L193 IcfgInterpreter]: Reachable states at location L593 satisfy 715#(and (= (select (select |#memory_$Pointer$.offset| dll_remove_last_~head.base) dll_remove_last_~head.offset) |dll_remove_last_#t~mem5.offset|) (= |#valid| |old(#valid)|) (= |dll_remove_last_#t~mem5.base| (select (select |#memory_$Pointer$.base| dll_remove_last_~head.base) dll_remove_last_~head.offset)) (= (select (select |#memory_$Pointer$.base| |dll_remove_last_#t~mem5.base|) (+ |dll_remove_last_#t~mem5.offset| 4)) |dll_remove_last_#t~mem6.base|) (= dll_remove_last_~head.offset |dll_remove_last_#in~head.offset|) (= |dll_remove_last_#in~head.base| dll_remove_last_~head.base) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |dll_remove_last_#t~mem6.offset| (select (select |#memory_$Pointer$.offset| |dll_remove_last_#t~mem5.base|) (+ |dll_remove_last_#t~mem5.offset| 4))) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|)) [2019-10-07 13:25:54,966 INFO L193 IcfgInterpreter]: Reachable states at location L-1 satisfy 23#(and (= 0 |#NULL.base|) (<= |#NULL.base| 0) (= 0 (select |#valid| 0)) (<= 0 |#NULL.base|) (= |#NULL.offset| 0) (<= 0 |#NULL.offset|) (<= |#NULL.offset| 0)) [2019-10-07 13:25:54,966 INFO L193 IcfgInterpreter]: Reachable states at location mainENTRY satisfy 33#(and (= 0 |#NULL.base|) (<= |#NULL.base| 0) (= |#valid| |old(#valid)|) (<= 0 |#NULL.base|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#NULL.offset| 0) (= |old(#length)| |#length|) (= 0 (select |old(#valid)| 0)) (<= 0 |#NULL.offset|) (<= |#NULL.offset| 0) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|)) [2019-10-07 13:25:54,966 INFO L193 IcfgInterpreter]: Reachable states at location L613 satisfy 582#(<= 0 main_~i~0) [2019-10-07 13:25:54,966 INFO L193 IcfgInterpreter]: Reachable states at location dll_createEXIT satisfy 687#(and (= |dll_create_#res.base| dll_create_~head~0.base) (= |dll_create_#res.offset| dll_create_~head~0.offset) (not (< 0 dll_create_~len)) (<= dll_create_~len 0)) [2019-10-07 13:25:54,967 INFO L193 IcfgInterpreter]: Reachable states at location L613-1 satisfy 448#(or (exists ((v_dll_remove_last_~last~0.base_BEFORE_RETURN_26 Int) (v_dll_remove_last_~snd_to_last~0.base_BEFORE_RETURN_26 Int) (v_dll_remove_last_~snd_to_last~0.offset_BEFORE_RETURN_26 Int)) (and (<= 0 main_~i~0) (= (select (select |#memory_$Pointer$.offset| v_dll_remove_last_~snd_to_last~0.base_BEFORE_RETURN_26) (+ v_dll_remove_last_~snd_to_last~0.offset_BEFORE_RETURN_26 4)) 0) (= (select (select |#memory_$Pointer$.base| v_dll_remove_last_~snd_to_last~0.base_BEFORE_RETURN_26) (+ v_dll_remove_last_~snd_to_last~0.offset_BEFORE_RETURN_26 4)) 0) (= (select |#valid| v_dll_remove_last_~last~0.base_BEFORE_RETURN_26) 0))) (exists ((v_dll_remove_last_~last~0.base_BEFORE_RETURN_25 Int) (v_dll_remove_last_~snd_to_last~0.base_BEFORE_RETURN_25 Int) (v_dll_remove_last_~snd_to_last~0.offset_BEFORE_RETURN_25 Int)) (and (= 0 (select (select |#memory_$Pointer$.base| v_dll_remove_last_~snd_to_last~0.base_BEFORE_RETURN_25) (+ v_dll_remove_last_~snd_to_last~0.offset_BEFORE_RETURN_25 4))) (<= 0 main_~i~0) (= 0 (select (select |#memory_$Pointer$.offset| v_dll_remove_last_~snd_to_last~0.base_BEFORE_RETURN_25) (+ v_dll_remove_last_~snd_to_last~0.offset_BEFORE_RETURN_25 4))) (= (select |#valid| v_dll_remove_last_~last~0.base_BEFORE_RETURN_25) 0)))) [2019-10-07 13:25:54,967 INFO L193 IcfgInterpreter]: Reachable states at location mainErr0ASSERT_VIOLATIONERROR_FUNCTION satisfy 229#(and (or (and (not (= (select (select |#memory_$Pointer$.base| |main_~#s~0.base|) |main_~#s~0.offset|) 0)) (not (<= 0 main_~i~0))) (and (not (<= 0 main_~i~0)) (not (= (select (select |#memory_$Pointer$.offset| |main_~#s~0.base|) |main_~#s~0.offset|) 0)))) (<= main_~i~0 0)) [2019-10-07 13:25:54,967 INFO L193 IcfgInterpreter]: Reachable states at location dll_remove_lastEXIT satisfy 764#(and (= (select (select |#memory_$Pointer$.base| dll_remove_last_~snd_to_last~0.base) (+ dll_remove_last_~snd_to_last~0.offset 4)) 0) (= 0 (select (select |#memory_$Pointer$.offset| dll_remove_last_~snd_to_last~0.base) (+ dll_remove_last_~snd_to_last~0.offset 4))) (= (select |#valid| dll_remove_last_~last~0.base) 0)) [2019-10-07 13:25:54,967 INFO L193 IcfgInterpreter]: Reachable states at location L599-1 satisfy 749#true [2019-10-07 13:25:54,968 INFO L193 IcfgInterpreter]: Reachable states at location L578-1 satisfy 697#(and (<= 0 dll_create_~len) (or (and (= (select |#length| |dll_create_#t~malloc3.base|) 12) (not (= 0 |dll_create_#t~malloc3.base|)) (= dll_create_~new_head~0.base |dll_create_#t~malloc3.base|) (< 0 dll_create_~len) (not (= dll_create_~new_head~0.base 0)) (= |dll_create_#t~malloc3.offset| 0) (= |dll_create_#t~malloc3.offset| dll_create_~new_head~0.offset) (= 1 (select |#valid| |dll_create_#t~malloc3.base|)) (< |#StackHeapBarrier| |dll_create_#t~malloc3.base|)) (and (= (select |#length| |dll_create_#t~malloc3.base|) 12) (not (= 0 |dll_create_#t~malloc3.base|)) (= dll_create_~new_head~0.base |dll_create_#t~malloc3.base|) (< 0 dll_create_~len) (= |dll_create_#t~malloc3.offset| 0) (= |dll_create_#t~malloc3.offset| dll_create_~new_head~0.offset) (= 1 (select |#valid| |dll_create_#t~malloc3.base|)) (< |#StackHeapBarrier| |dll_create_#t~malloc3.base|) (not (= 0 dll_create_~new_head~0.offset)))) (<= |dll_create_#t~malloc3.offset| 0) (<= dll_create_~new_head~0.offset 0) (<= 0 dll_create_~new_head~0.offset) (<= 0 |dll_create_#t~malloc3.offset|)) [2019-10-07 13:25:54,968 INFO L193 IcfgInterpreter]: Reachable states at location L578 satisfy 692#(and (<= 0 dll_create_~len) (not (= 0 |dll_create_#t~malloc3.base|)) (= dll_create_~new_head~0.base |dll_create_#t~malloc3.base|) (< 0 dll_create_~len) (<= |dll_create_#t~malloc3.offset| 0) (= |dll_create_#t~malloc3.offset| 0) (= |dll_create_#t~malloc3.offset| dll_create_~new_head~0.offset) (= (select |#length| |dll_create_#t~malloc3.base|) 12) (= 1 (select |#valid| |dll_create_#t~malloc3.base|)) (<= dll_create_~new_head~0.offset 0) (< |#StackHeapBarrier| |dll_create_#t~malloc3.base|) (<= 0 dll_create_~new_head~0.offset) (<= 0 |dll_create_#t~malloc3.offset|)) [2019-10-07 13:25:54,968 INFO L193 IcfgInterpreter]: Reachable states at location ULTIMATE.initENTRY satisfy 701#(and (= |old(#NULL.base)| |#NULL.base|) (= |#valid| |old(#valid)|) (= |#NULL.offset| |old(#NULL.offset)|)) [2019-10-07 13:25:54,968 INFO L193 IcfgInterpreter]: Reachable states at location dll_remove_lastENTRY satisfy 710#(and (= |#valid| |old(#valid)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|)) [2019-10-07 13:25:54,968 INFO L193 IcfgInterpreter]: Reachable states at location L616 satisfy 369#(and (or (and (not (= (select (select |#memory_$Pointer$.base| |main_~#s~0.base|) |main_~#s~0.offset|) 0)) (not (<= 0 main_~i~0))) (and (not (<= 0 main_~i~0)) (not (= (select (select |#memory_$Pointer$.offset| |main_~#s~0.base|) |main_~#s~0.offset|) 0)))) (<= main_~i~0 0)) [2019-10-07 13:25:54,968 INFO L193 IcfgInterpreter]: Reachable states at location L576-2 satisfy 682#true [2019-10-07 13:25:54,969 INFO L193 IcfgInterpreter]: Reachable states at location ULTIMATE.initEXIT satisfy 706#(and (= |#valid| (store |old(#valid)| 0 0)) (= 0 |#NULL.base|) (<= |#NULL.base| 0) (<= 0 |#NULL.base|) (= |#NULL.offset| 0) (<= 0 |#NULL.offset|) (<= |#NULL.offset| 0)) [2019-10-07 13:25:54,969 INFO L193 IcfgInterpreter]: Reachable states at location ULTIMATE.startENTRY satisfy 6#true [2019-10-07 13:25:54,969 INFO L193 IcfgInterpreter]: Reachable states at location L593-2 satisfy 759#(and (= (select (select |#memory_$Pointer$.base| dll_remove_last_~snd_to_last~0.base) (+ dll_remove_last_~snd_to_last~0.offset 4)) 0) (= 0 (select (select |#memory_$Pointer$.offset| dll_remove_last_~snd_to_last~0.base) (+ dll_remove_last_~snd_to_last~0.offset 4))) (= (select |#valid| dll_remove_last_~last~0.base) 0)) [2019-10-07 13:25:54,969 INFO L193 IcfgInterpreter]: Reachable states at location dll_createENTRY satisfy 649#(exists ((|v_main_~#s~0.base_BEFORE_CALL_68| Int)) (and (= (select |old(#valid)| |v_main_~#s~0.base_BEFORE_CALL_68|) 1) (= 0 |#NULL.base|) (<= |#NULL.base| 0) (< |v_main_~#s~0.base_BEFORE_CALL_68| |#StackHeapBarrier|) (<= 0 |#NULL.base|) (= 2 |dll_create_#in~len|) (<= 0 |#NULL.offset|) (<= |#NULL.offset| 0) (= 0 (select |old(#valid)| 0)) (= |#valid| |old(#valid)|) (not (= 0 |v_main_~#s~0.base_BEFORE_CALL_68|)) (= |dll_create_#in~data| 1) (= 4 (select |old(#length)| |v_main_~#s~0.base_BEFORE_CALL_68|)) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#NULL.offset| 0) (= |old(#length)| |#length|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))) [2019-10-07 13:25:54,969 INFO L193 IcfgInterpreter]: Reachable states at location L610 satisfy 38#(and (< |main_~#s~0.base| |#StackHeapBarrier|) (= |#valid| (store |old(#valid)| |main_~#s~0.base| 1)) (= 0 |#NULL.base|) (<= |#NULL.base| 0) (<= 0 |#NULL.base|) (= 0 (select |old(#valid)| |main_~#s~0.base|)) (<= 0 |main_~#s~0.offset|) (= main_~data~0 1) (<= main_~len~0 2) (= 0 (select |old(#valid)| 0)) (<= 0 |#NULL.offset|) (<= |#NULL.offset| 0) (<= 1 main_~data~0) (<= |main_~#s~0.offset| 0) (= |main_~#s~0.offset| 0) (<= main_~data~0 1) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= (store |old(#length)| |main_~#s~0.base| 4) |#length|) (= |#NULL.offset| 0) (not (= |main_~#s~0.base| 0)) (= main_~len~0 2) (<= 2 main_~len~0) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|)) [2019-10-07 13:25:54,970 INFO L193 IcfgInterpreter]: Reachable states at location L612-2 satisfy 644#true [2019-10-07 13:25:54,970 INFO L193 IcfgInterpreter]: Reachable states at location L610-1 satisfy 94#(and (< |main_~#s~0.base| |#StackHeapBarrier|) (= 0 |#NULL.base|) (<= |#NULL.base| 0) (<= |main_#t~ret11.offset| 0) (<= 0 |#NULL.base|) (= 0 (select |old(#valid)| |main_~#s~0.base|)) (<= 0 |main_~#s~0.offset|) (= main_~data~0 1) (<= main_~len~0 2) (<= 0 |#NULL.offset|) (= 0 (select |old(#valid)| 0)) (<= |#NULL.offset| 0) (<= 1 main_~data~0) (<= |main_~#s~0.offset| 0) (= |main_~#s~0.offset| 0) (<= main_~data~0 1) (<= 0 |main_#t~ret11.offset|) (= |#NULL.offset| 0) (not (= |main_~#s~0.base| 0)) (= main_~len~0 2) (<= 2 main_~len~0)) [2019-10-07 13:25:55,702 INFO L211 tionRefinementEngine]: Constructing automaton from 0 perfect and 4 imperfect interpolant sequences. [2019-10-07 13:25:55,702 INFO L224 tionRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6, 17] total 27 [2019-10-07 13:25:55,703 INFO L442 AbstractCegarLoop]: Interpolant automaton has 27 states [2019-10-07 13:25:55,703 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2019-10-07 13:25:55,704 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=76, Invalid=625, Unknown=1, NotChecked=0, Total=702 [2019-10-07 13:25:55,704 INFO L87 Difference]: Start difference. First operand 32 states and 35 transitions. Second operand 27 states. [2019-10-07 13:25:57,148 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-10-07 13:25:57,148 INFO L93 Difference]: Finished difference Result 61 states and 69 transitions. [2019-10-07 13:25:57,149 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2019-10-07 13:25:57,149 INFO L78 Accepts]: Start accepts. Automaton has 27 states. Word has length 28 [2019-10-07 13:25:57,149 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-10-07 13:25:57,151 INFO L225 Difference]: With dead ends: 61 [2019-10-07 13:25:57,151 INFO L226 Difference]: Without dead ends: 40 [2019-10-07 13:25:57,153 INFO L606 BasicCegarLoop]: 0 DeclaredPredicates, 115 GetRequests, 66 SyntacticMatches, 4 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 491 ImplicationChecksByTransitivity, 1.7s TimeCoverageRelationStatistics Valid=227, Invalid=1934, Unknown=1, NotChecked=0, Total=2162 [2019-10-07 13:25:57,154 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 40 states. [2019-10-07 13:25:57,160 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 40 to 37. [2019-10-07 13:25:57,160 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 37 states. [2019-10-07 13:25:57,161 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 40 transitions. [2019-10-07 13:25:57,161 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 40 transitions. Word has length 28 [2019-10-07 13:25:57,161 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-10-07 13:25:57,161 INFO L462 AbstractCegarLoop]: Abstraction has 37 states and 40 transitions. [2019-10-07 13:25:57,162 INFO L463 AbstractCegarLoop]: Interpolant automaton has 27 states. [2019-10-07 13:25:57,162 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 40 transitions. [2019-10-07 13:25:57,163 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2019-10-07 13:25:57,163 INFO L377 BasicCegarLoop]: Found error trace [2019-10-07 13:25:57,163 INFO L385 BasicCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-07 13:25:57,378 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-10-07 13:25:57,379 INFO L410 AbstractCegarLoop]: === Iteration 6 === [mainErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-07 13:25:57,379 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-07 13:25:57,380 INFO L82 PathProgramCache]: Analyzing trace with hash 1145109181, now seen corresponding path program 2 times [2019-10-07 13:25:57,380 INFO L150 tionRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2019-10-07 13:25:57,380 INFO L231 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2019-10-07 13:25:57,381 INFO L117 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-07 13:25:57,381 INFO L117 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-07 13:25:57,381 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-07 13:25:57,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-07 13:25:58,125 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 7 proven. 12 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-10-07 13:25:58,125 INFO L286 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2019-10-07 13:25:58,125 INFO L286 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2019-10-07 13:25:58,125 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 5 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-10-07 13:25:58,293 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2019-10-07 13:25:58,293 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2019-10-07 13:25:58,294 INFO L256 TraceCheckSpWp]: Trace formula consists of 161 conjuncts, 37 conjunts are in the unsatisfiable core [2019-10-07 13:25:58,298 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2019-10-07 13:25:58,534 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2019-10-07 13:25:58,534 INFO L322 TraceCheckSpWp]: Computing backward predicates... [2019-10-07 13:25:58,675 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2019-10-07 13:25:58,675 INFO L211 tionRefinementEngine]: Constructing automaton from 2 perfect and 1 imperfect interpolant sequences. [2019-10-07 13:25:58,676 INFO L224 tionRefinementEngine]: Number of different interpolants: perfect sequences [6, 5] imperfect sequences [17] total 24 [2019-10-07 13:25:58,676 INFO L442 AbstractCegarLoop]: Interpolant automaton has 9 states [2019-10-07 13:25:58,676 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2019-10-07 13:25:58,677 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=51, Invalid=501, Unknown=0, NotChecked=0, Total=552 [2019-10-07 13:25:58,677 INFO L87 Difference]: Start difference. First operand 37 states and 40 transitions. Second operand 9 states. [2019-10-07 13:25:58,988 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-10-07 13:25:58,989 INFO L93 Difference]: Finished difference Result 52 states and 58 transitions. [2019-10-07 13:25:58,989 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-10-07 13:25:58,989 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 41 [2019-10-07 13:25:58,990 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-10-07 13:25:58,991 INFO L225 Difference]: With dead ends: 52 [2019-10-07 13:25:58,991 INFO L226 Difference]: Without dead ends: 39 [2019-10-07 13:25:58,992 INFO L606 BasicCegarLoop]: 0 DeclaredPredicates, 101 GetRequests, 77 SyntacticMatches, 0 SemanticMatches, 24 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 40 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=64, Invalid=586, Unknown=0, NotChecked=0, Total=650 [2019-10-07 13:25:58,992 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39 states. [2019-10-07 13:25:58,999 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39 to 35. [2019-10-07 13:25:58,999 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 35 states. [2019-10-07 13:25:59,000 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 38 transitions. [2019-10-07 13:25:59,001 INFO L78 Accepts]: Start accepts. Automaton has 35 states and 38 transitions. Word has length 41 [2019-10-07 13:25:59,001 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-10-07 13:25:59,001 INFO L462 AbstractCegarLoop]: Abstraction has 35 states and 38 transitions. [2019-10-07 13:25:59,001 INFO L463 AbstractCegarLoop]: Interpolant automaton has 9 states. [2019-10-07 13:25:59,001 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 38 transitions. [2019-10-07 13:25:59,002 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2019-10-07 13:25:59,003 INFO L377 BasicCegarLoop]: Found error trace [2019-10-07 13:25:59,003 INFO L385 BasicCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-07 13:25:59,207 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-10-07 13:25:59,208 INFO L410 AbstractCegarLoop]: === Iteration 7 === [mainErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-07 13:25:59,209 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-07 13:25:59,209 INFO L82 PathProgramCache]: Analyzing trace with hash -483568520, now seen corresponding path program 3 times [2019-10-07 13:25:59,209 INFO L150 tionRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2019-10-07 13:25:59,209 INFO L231 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2019-10-07 13:25:59,210 INFO L117 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-07 13:25:59,210 INFO L117 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-07 13:25:59,210 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-07 13:25:59,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-07 13:25:59,704 WARN L191 SmtUtils]: Spent 131.00 ms on a formula simplification. DAG size of input: 53 DAG size of output: 37 [2019-10-07 13:26:00,170 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 9 proven. 16 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2019-10-07 13:26:00,170 INFO L286 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2019-10-07 13:26:00,170 INFO L286 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2019-10-07 13:26:00,170 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 6 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-10-07 13:26:00,353 INFO L249 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2019-10-07 13:26:00,353 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2019-10-07 13:26:00,356 INFO L256 TraceCheckSpWp]: Trace formula consists of 236 conjuncts, 67 conjunts are in the unsatisfiable core [2019-10-07 13:26:00,359 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2019-10-07 13:26:10,230 WARN L191 SmtUtils]: Spent 5.11 s on a formula simplification that was a NOOP. DAG size: 34 [2019-10-07 13:26:15,095 WARN L191 SmtUtils]: Spent 145.00 ms on a formula simplification. DAG size of input: 46 DAG size of output: 44 [2019-10-07 13:26:15,332 WARN L191 SmtUtils]: Spent 145.00 ms on a formula simplification. DAG size of input: 55 DAG size of output: 43 [2019-10-07 13:26:15,876 WARN L191 SmtUtils]: Spent 223.00 ms on a formula simplification. DAG size of input: 53 DAG size of output: 52 [2019-10-07 13:26:16,048 WARN L191 SmtUtils]: Spent 156.00 ms on a formula simplification. DAG size of input: 41 DAG size of output: 40 [2019-10-07 13:26:16,213 WARN L191 SmtUtils]: Spent 149.00 ms on a formula simplification. DAG size of input: 30 DAG size of output: 29 [2019-10-07 13:26:16,299 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 6 proven. 15 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2019-10-07 13:26:16,300 INFO L322 TraceCheckSpWp]: Computing backward predicates... [2019-10-07 13:26:18,760 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 6 proven. 14 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2019-10-07 13:26:18,761 INFO L286 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2019-10-07 13:26:18,763 INFO L162 IcfgInterpreter]: Started Sifa with 25 locations of interest [2019-10-07 13:26:18,763 INFO L169 IcfgInterpreter]: Building call graph [2019-10-07 13:26:18,763 INFO L174 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2019-10-07 13:26:18,764 INFO L179 IcfgInterpreter]: Starting interpretation [2019-10-07 13:26:18,764 INFO L199 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2019-10-07 13:26:18,790 INFO L199 IcfgInterpreter]: Interpreting procedure main with input of size 27 for LOIs [2019-10-07 13:26:18,852 WARN L225 Elim1Store]: Array PQE input equivalent to false [2019-10-07 13:26:19,090 WARN L225 Elim1Store]: Array PQE input equivalent to false [2019-10-07 13:26:19,754 WARN L225 Elim1Store]: Array PQE input equivalent to false [2019-10-07 13:26:20,186 WARN L225 Elim1Store]: Array PQE input equivalent to false [2019-10-07 13:26:20,197 WARN L225 Elim1Store]: Array PQE input equivalent to false [2019-10-07 13:26:20,341 WARN L225 Elim1Store]: Array PQE input equivalent to false [2019-10-07 13:26:20,531 WARN L225 Elim1Store]: Array PQE input equivalent to false [2019-10-07 13:26:22,647 INFO L199 IcfgInterpreter]: Interpreting procedure dll_create with input of size 44 for LOIs [2019-10-07 13:26:27,352 INFO L199 IcfgInterpreter]: Interpreting procedure ULTIMATE.init with input of size 10 for LOIs [2019-10-07 13:26:27,355 INFO L199 IcfgInterpreter]: Interpreting procedure dll_remove_last with input of size 13 for LOIs [2019-10-07 13:26:27,423 INFO L183 IcfgInterpreter]: Interpretation finished [2019-10-07 13:26:27,424 INFO L191 IcfgInterpreter]: Final predicates for locations of interest are: [2019-10-07 13:26:27,424 INFO L193 IcfgInterpreter]: Reachable states at location L599-3 satisfy 773#true [2019-10-07 13:26:27,425 INFO L193 IcfgInterpreter]: Reachable states at location L599-4 satisfy 755#true [2019-10-07 13:26:27,425 INFO L193 IcfgInterpreter]: Reachable states at location L615 satisfy 516#(and (= (select (select |#memory_$Pointer$.offset| |main_~#s~0.base|) |main_~#s~0.offset|) |main_#t~mem13.offset|) (not (<= 0 main_~i~0)) (= (select (select |#memory_$Pointer$.base| |main_~#s~0.base|) |main_~#s~0.offset|) |main_#t~mem13.base|) (<= main_~i~0 0)) [2019-10-07 13:26:27,425 INFO L193 IcfgInterpreter]: Reachable states at location L593 satisfy 716#(and (= (select (select |#memory_$Pointer$.offset| dll_remove_last_~head.base) dll_remove_last_~head.offset) |dll_remove_last_#t~mem5.offset|) (= |#valid| |old(#valid)|) (= |dll_remove_last_#t~mem5.base| (select (select |#memory_$Pointer$.base| dll_remove_last_~head.base) dll_remove_last_~head.offset)) (= (select (select |#memory_$Pointer$.base| |dll_remove_last_#t~mem5.base|) (+ |dll_remove_last_#t~mem5.offset| 4)) |dll_remove_last_#t~mem6.base|) (= dll_remove_last_~head.offset |dll_remove_last_#in~head.offset|) (= |dll_remove_last_#in~head.base| dll_remove_last_~head.base) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |dll_remove_last_#t~mem6.offset| (select (select |#memory_$Pointer$.offset| |dll_remove_last_#t~mem5.base|) (+ |dll_remove_last_#t~mem5.offset| 4))) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|)) [2019-10-07 13:26:27,425 INFO L193 IcfgInterpreter]: Reachable states at location L-1 satisfy 23#(and (= 0 |#NULL.base|) (<= |#NULL.base| 0) (= 0 (select |#valid| 0)) (<= 0 |#NULL.base|) (= |#NULL.offset| 0) (<= 0 |#NULL.offset|) (<= |#NULL.offset| 0)) [2019-10-07 13:26:27,426 INFO L193 IcfgInterpreter]: Reachable states at location mainENTRY satisfy 33#(and (= 0 |#NULL.base|) (<= |#NULL.base| 0) (= |#valid| |old(#valid)|) (<= 0 |#NULL.base|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#NULL.offset| 0) (= |old(#length)| |#length|) (= 0 (select |old(#valid)| 0)) (<= 0 |#NULL.offset|) (<= |#NULL.offset| 0) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|)) [2019-10-07 13:26:27,426 INFO L193 IcfgInterpreter]: Reachable states at location L613 satisfy 583#(<= 0 main_~i~0) [2019-10-07 13:26:27,426 INFO L193 IcfgInterpreter]: Reachable states at location dll_createEXIT satisfy 688#(and (= |dll_create_#res.base| dll_create_~head~0.base) (= |dll_create_#res.offset| dll_create_~head~0.offset) (not (< 0 dll_create_~len)) (<= dll_create_~len 0)) [2019-10-07 13:26:27,426 INFO L193 IcfgInterpreter]: Reachable states at location L613-1 satisfy 449#(or (exists ((v_dll_remove_last_~last~0.base_BEFORE_RETURN_70 Int) (v_dll_remove_last_~snd_to_last~0.base_BEFORE_RETURN_70 Int) (v_dll_remove_last_~snd_to_last~0.offset_BEFORE_RETURN_70 Int)) (and (= (select (select |#memory_$Pointer$.base| v_dll_remove_last_~snd_to_last~0.base_BEFORE_RETURN_70) (+ v_dll_remove_last_~snd_to_last~0.offset_BEFORE_RETURN_70 4)) 0) (<= 0 main_~i~0) (= 0 (select |#valid| v_dll_remove_last_~last~0.base_BEFORE_RETURN_70)) (= 0 (select (select |#memory_$Pointer$.offset| v_dll_remove_last_~snd_to_last~0.base_BEFORE_RETURN_70) (+ v_dll_remove_last_~snd_to_last~0.offset_BEFORE_RETURN_70 4))))) (exists ((v_dll_remove_last_~last~0.base_BEFORE_RETURN_69 Int) (v_dll_remove_last_~snd_to_last~0.base_BEFORE_RETURN_69 Int) (v_dll_remove_last_~snd_to_last~0.offset_BEFORE_RETURN_69 Int)) (and (<= 0 main_~i~0) (= 0 (select (select |#memory_$Pointer$.base| v_dll_remove_last_~snd_to_last~0.base_BEFORE_RETURN_69) (+ v_dll_remove_last_~snd_to_last~0.offset_BEFORE_RETURN_69 4))) (= (select (select |#memory_$Pointer$.offset| v_dll_remove_last_~snd_to_last~0.base_BEFORE_RETURN_69) (+ v_dll_remove_last_~snd_to_last~0.offset_BEFORE_RETURN_69 4)) 0) (= (select |#valid| v_dll_remove_last_~last~0.base_BEFORE_RETURN_69) 0)))) [2019-10-07 13:26:27,427 INFO L193 IcfgInterpreter]: Reachable states at location mainErr0ASSERT_VIOLATIONERROR_FUNCTION satisfy 230#(and (or (and (not (= (select (select |#memory_$Pointer$.base| |main_~#s~0.base|) |main_~#s~0.offset|) 0)) (not (<= 0 main_~i~0))) (and (not (<= 0 main_~i~0)) (not (= (select (select |#memory_$Pointer$.offset| |main_~#s~0.base|) |main_~#s~0.offset|) 0)))) (<= main_~i~0 0)) [2019-10-07 13:26:27,427 INFO L193 IcfgInterpreter]: Reachable states at location dll_remove_lastEXIT satisfy 765#(and (= (select (select |#memory_$Pointer$.base| dll_remove_last_~snd_to_last~0.base) (+ dll_remove_last_~snd_to_last~0.offset 4)) 0) (= 0 (select (select |#memory_$Pointer$.offset| dll_remove_last_~snd_to_last~0.base) (+ dll_remove_last_~snd_to_last~0.offset 4))) (= (select |#valid| dll_remove_last_~last~0.base) 0)) [2019-10-07 13:26:27,427 INFO L193 IcfgInterpreter]: Reachable states at location L599-1 satisfy 750#true [2019-10-07 13:26:27,427 INFO L193 IcfgInterpreter]: Reachable states at location L578-1 satisfy 698#(and (<= 0 dll_create_~len) (or (and (= (select |#length| |dll_create_#t~malloc3.base|) 12) (not (= 0 |dll_create_#t~malloc3.base|)) (= dll_create_~new_head~0.base |dll_create_#t~malloc3.base|) (< 0 dll_create_~len) (not (= dll_create_~new_head~0.base 0)) (= |dll_create_#t~malloc3.offset| 0) (= |dll_create_#t~malloc3.offset| dll_create_~new_head~0.offset) (= 1 (select |#valid| |dll_create_#t~malloc3.base|)) (< |#StackHeapBarrier| |dll_create_#t~malloc3.base|)) (and (= (select |#length| |dll_create_#t~malloc3.base|) 12) (not (= 0 |dll_create_#t~malloc3.base|)) (= dll_create_~new_head~0.base |dll_create_#t~malloc3.base|) (< 0 dll_create_~len) (= |dll_create_#t~malloc3.offset| 0) (= |dll_create_#t~malloc3.offset| dll_create_~new_head~0.offset) (= 1 (select |#valid| |dll_create_#t~malloc3.base|)) (< |#StackHeapBarrier| |dll_create_#t~malloc3.base|) (not (= 0 dll_create_~new_head~0.offset)))) (<= |dll_create_#t~malloc3.offset| 0) (<= dll_create_~new_head~0.offset 0) (<= 0 dll_create_~new_head~0.offset) (<= 0 |dll_create_#t~malloc3.offset|)) [2019-10-07 13:26:27,427 INFO L193 IcfgInterpreter]: Reachable states at location L578 satisfy 693#(and (<= 0 dll_create_~len) (not (= 0 |dll_create_#t~malloc3.base|)) (= dll_create_~new_head~0.base |dll_create_#t~malloc3.base|) (< 0 dll_create_~len) (<= |dll_create_#t~malloc3.offset| 0) (= |dll_create_#t~malloc3.offset| 0) (= |dll_create_#t~malloc3.offset| dll_create_~new_head~0.offset) (= (select |#length| |dll_create_#t~malloc3.base|) 12) (= 1 (select |#valid| |dll_create_#t~malloc3.base|)) (<= dll_create_~new_head~0.offset 0) (< |#StackHeapBarrier| |dll_create_#t~malloc3.base|) (<= 0 dll_create_~new_head~0.offset) (<= 0 |dll_create_#t~malloc3.offset|)) [2019-10-07 13:26:27,428 INFO L193 IcfgInterpreter]: Reachable states at location ULTIMATE.initENTRY satisfy 702#(and (= |old(#NULL.base)| |#NULL.base|) (= |#valid| |old(#valid)|) (= |#NULL.offset| |old(#NULL.offset)|)) [2019-10-07 13:26:27,428 INFO L193 IcfgInterpreter]: Reachable states at location dll_remove_lastENTRY satisfy 711#(and (= |#valid| |old(#valid)|) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|)) [2019-10-07 13:26:27,428 INFO L193 IcfgInterpreter]: Reachable states at location L616 satisfy 370#(and (or (and (not (= (select (select |#memory_$Pointer$.base| |main_~#s~0.base|) |main_~#s~0.offset|) 0)) (not (<= 0 main_~i~0))) (and (not (<= 0 main_~i~0)) (not (= (select (select |#memory_$Pointer$.offset| |main_~#s~0.base|) |main_~#s~0.offset|) 0)))) (<= main_~i~0 0)) [2019-10-07 13:26:27,428 INFO L193 IcfgInterpreter]: Reachable states at location L576-2 satisfy 683#true [2019-10-07 13:26:27,428 INFO L193 IcfgInterpreter]: Reachable states at location ULTIMATE.initEXIT satisfy 707#(and (= |#valid| (store |old(#valid)| 0 0)) (= 0 |#NULL.base|) (<= |#NULL.base| 0) (<= 0 |#NULL.base|) (= |#NULL.offset| 0) (<= 0 |#NULL.offset|) (<= |#NULL.offset| 0)) [2019-10-07 13:26:27,429 INFO L193 IcfgInterpreter]: Reachable states at location ULTIMATE.startENTRY satisfy 6#true [2019-10-07 13:26:27,429 INFO L193 IcfgInterpreter]: Reachable states at location L593-2 satisfy 760#(and (= (select (select |#memory_$Pointer$.base| dll_remove_last_~snd_to_last~0.base) (+ dll_remove_last_~snd_to_last~0.offset 4)) 0) (= 0 (select (select |#memory_$Pointer$.offset| dll_remove_last_~snd_to_last~0.base) (+ dll_remove_last_~snd_to_last~0.offset 4))) (= (select |#valid| dll_remove_last_~last~0.base) 0)) [2019-10-07 13:26:27,429 INFO L193 IcfgInterpreter]: Reachable states at location dll_createENTRY satisfy 650#(exists ((|v_main_~#s~0.base_BEFORE_CALL_125| Int)) (and (= (select |old(#valid)| |v_main_~#s~0.base_BEFORE_CALL_125|) 1) (< |v_main_~#s~0.base_BEFORE_CALL_125| |#StackHeapBarrier|) (= 0 |#NULL.base|) (not (= 0 |v_main_~#s~0.base_BEFORE_CALL_125|)) (= (select |old(#length)| |v_main_~#s~0.base_BEFORE_CALL_125|) 4) (<= |#NULL.base| 0) (<= 0 |#NULL.base|) (= 2 |dll_create_#in~len|) (<= 0 |#NULL.offset|) (<= |#NULL.offset| 0) (= 0 (select |old(#valid)| 0)) (= |#valid| |old(#valid)|) (= |dll_create_#in~data| 1) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= |#NULL.offset| 0) (= |old(#length)| |#length|) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|))) [2019-10-07 13:26:27,429 INFO L193 IcfgInterpreter]: Reachable states at location L610 satisfy 38#(and (< |main_~#s~0.base| |#StackHeapBarrier|) (= |#valid| (store |old(#valid)| |main_~#s~0.base| 1)) (= 0 |#NULL.base|) (<= |#NULL.base| 0) (<= 0 |#NULL.base|) (= 0 (select |old(#valid)| |main_~#s~0.base|)) (<= 0 |main_~#s~0.offset|) (= main_~data~0 1) (<= main_~len~0 2) (= 0 (select |old(#valid)| 0)) (<= 0 |#NULL.offset|) (<= |#NULL.offset| 0) (<= 1 main_~data~0) (<= |main_~#s~0.offset| 0) (= |main_~#s~0.offset| 0) (<= main_~data~0 1) (= |#memory_int| |old(#memory_int)|) (= |#memory_$Pointer$.base| |old(#memory_$Pointer$.base)|) (= (store |old(#length)| |main_~#s~0.base| 4) |#length|) (= |#NULL.offset| 0) (not (= |main_~#s~0.base| 0)) (= main_~len~0 2) (<= 2 main_~len~0) (= |#memory_$Pointer$.offset| |old(#memory_$Pointer$.offset)|)) [2019-10-07 13:26:27,429 INFO L193 IcfgInterpreter]: Reachable states at location L612-2 satisfy 645#true [2019-10-07 13:26:27,430 INFO L193 IcfgInterpreter]: Reachable states at location L610-1 satisfy 95#(and (< |main_~#s~0.base| |#StackHeapBarrier|) (= 0 |#NULL.base|) (<= |#NULL.base| 0) (<= |main_#t~ret11.offset| 0) (<= 0 |#NULL.base|) (= 0 (select |old(#valid)| |main_~#s~0.base|)) (<= 0 |main_~#s~0.offset|) (= main_~data~0 1) (<= main_~len~0 2) (<= 0 |#NULL.offset|) (= 0 (select |old(#valid)| 0)) (<= |#NULL.offset| 0) (<= 1 main_~data~0) (<= |main_~#s~0.offset| 0) (= |main_~#s~0.offset| 0) (<= main_~data~0 1) (<= 0 |main_#t~ret11.offset|) (= |#NULL.offset| 0) (not (= |main_~#s~0.base| 0)) (= main_~len~0 2) (<= 2 main_~len~0)) [2019-10-07 13:26:29,071 INFO L211 tionRefinementEngine]: Constructing automaton from 0 perfect and 4 imperfect interpolant sequences. [2019-10-07 13:26:29,071 INFO L224 tionRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 15, 12, 17] total 54 [2019-10-07 13:26:29,073 INFO L442 AbstractCegarLoop]: Interpolant automaton has 54 states [2019-10-07 13:26:29,073 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 54 interpolants. [2019-10-07 13:26:29,074 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=197, Invalid=2661, Unknown=4, NotChecked=0, Total=2862 [2019-10-07 13:26:29,075 INFO L87 Difference]: Start difference. First operand 35 states and 38 transitions. Second operand 54 states. [2019-10-07 13:26:40,038 WARN L191 SmtUtils]: Spent 176.00 ms on a formula simplification. DAG size of input: 125 DAG size of output: 69 [2019-10-07 13:26:42,786 WARN L191 SmtUtils]: Spent 1.73 s on a formula simplification. DAG size of input: 60 DAG size of output: 50 [2019-10-07 13:26:46,012 WARN L191 SmtUtils]: Spent 260.00 ms on a formula simplification that was a NOOP. DAG size: 147 [2019-10-07 13:26:47,451 WARN L191 SmtUtils]: Spent 115.00 ms on a formula simplification that was a NOOP. DAG size: 79 [2019-10-07 13:26:47,885 WARN L191 SmtUtils]: Spent 164.00 ms on a formula simplification that was a NOOP. DAG size: 100 [2019-10-07 13:26:51,747 WARN L191 SmtUtils]: Spent 295.00 ms on a formula simplification. DAG size of input: 94 DAG size of output: 74 [2019-10-07 13:26:57,009 WARN L191 SmtUtils]: Spent 252.00 ms on a formula simplification. DAG size of input: 90 DAG size of output: 70 [2019-10-07 13:27:00,259 WARN L191 SmtUtils]: Spent 246.00 ms on a formula simplification. DAG size of input: 164 DAG size of output: 69 [2019-10-07 13:27:02,794 WARN L191 SmtUtils]: Spent 174.00 ms on a formula simplification that was a NOOP. DAG size: 130 [2019-10-07 13:27:04,690 WARN L191 SmtUtils]: Spent 157.00 ms on a formula simplification. DAG size of input: 132 DAG size of output: 52 [2019-10-07 13:27:05,182 WARN L191 SmtUtils]: Spent 279.00 ms on a formula simplification. DAG size of input: 153 DAG size of output: 73 [2019-10-07 13:27:06,265 WARN L191 SmtUtils]: Spent 128.00 ms on a formula simplification. DAG size of input: 99 DAG size of output: 52 [2019-10-07 13:27:06,595 WARN L191 SmtUtils]: Spent 183.00 ms on a formula simplification. DAG size of input: 120 DAG size of output: 73 [2019-10-07 13:27:06,666 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-10-07 13:27:06,666 INFO L93 Difference]: Finished difference Result 90 states and 105 transitions. [2019-10-07 13:27:06,666 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2019-10-07 13:27:06,666 INFO L78 Accepts]: Start accepts. Automaton has 54 states. Word has length 43 [2019-10-07 13:27:06,667 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-10-07 13:27:06,667 INFO L225 Difference]: With dead ends: 90 [2019-10-07 13:27:06,667 INFO L226 Difference]: Without dead ends: 45 [2019-10-07 13:27:06,671 INFO L606 BasicCegarLoop]: 0 DeclaredPredicates, 196 GetRequests, 91 SyntacticMatches, 8 SemanticMatches, 97 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2423 ImplicationChecksByTransitivity, 33.4s TimeCoverageRelationStatistics Valid=882, Invalid=8812, Unknown=8, NotChecked=0, Total=9702 [2019-10-07 13:27:06,671 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 45 states. [2019-10-07 13:27:06,677 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 45 to 42. [2019-10-07 13:27:06,678 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 42 states. [2019-10-07 13:27:06,678 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 42 states to 42 states and 46 transitions. [2019-10-07 13:27:06,679 INFO L78 Accepts]: Start accepts. Automaton has 42 states and 46 transitions. Word has length 43 [2019-10-07 13:27:06,679 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-10-07 13:27:06,679 INFO L462 AbstractCegarLoop]: Abstraction has 42 states and 46 transitions. [2019-10-07 13:27:06,679 INFO L463 AbstractCegarLoop]: Interpolant automaton has 54 states. [2019-10-07 13:27:06,679 INFO L276 IsEmpty]: Start isEmpty. Operand 42 states and 46 transitions. [2019-10-07 13:27:06,680 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2019-10-07 13:27:06,681 INFO L377 BasicCegarLoop]: Found error trace [2019-10-07 13:27:06,681 INFO L385 BasicCegarLoop]: trace histogram [5, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-10-07 13:27:06,884 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-10-07 13:27:06,885 INFO L410 AbstractCegarLoop]: === Iteration 8 === [mainErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-10-07 13:27:06,885 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-10-07 13:27:06,886 INFO L82 PathProgramCache]: Analyzing trace with hash -989193549, now seen corresponding path program 4 times [2019-10-07 13:27:06,886 INFO L150 tionRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2019-10-07 13:27:06,886 INFO L231 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2019-10-07 13:27:06,886 INFO L117 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-07 13:27:06,887 INFO L117 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2019-10-07 13:27:06,887 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-10-07 13:27:06,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-07 13:27:07,971 WARN L191 SmtUtils]: Spent 211.00 ms on a formula simplification. DAG size of input: 89 DAG size of output: 68 [2019-10-07 13:27:08,534 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 3 proven. 29 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2019-10-07 13:27:08,534 INFO L286 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2019-10-07 13:27:08,534 INFO L286 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2019-10-07 13:27:08,535 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 7 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-10-07 13:27:08,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-10-07 13:27:08,786 INFO L256 TraceCheckSpWp]: Trace formula consists of 275 conjuncts, 75 conjunts are in the unsatisfiable core [2019-10-07 13:27:08,793 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2019-10-07 13:27:09,957 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 20 proven. 11 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2019-10-07 13:27:09,957 INFO L322 TraceCheckSpWp]: Computing backward predicates... [2019-10-07 13:27:11,403 WARN L191 SmtUtils]: Spent 770.00 ms on a formula simplification. DAG size of input: 138 DAG size of output: 105 [2019-10-07 13:27:11,629 WARN L191 SmtUtils]: Spent 224.00 ms on a formula simplification that was a NOOP. DAG size: 84 [2019-10-07 13:27:11,881 WARN L191 SmtUtils]: Spent 250.00 ms on a formula simplification that was a NOOP. DAG size: 88 [2019-10-07 13:27:12,099 WARN L191 SmtUtils]: Spent 216.00 ms on a formula simplification that was a NOOP. DAG size: 81 [2019-10-07 13:27:12,118 WARN L225 Elim1Store]: Array PQE input equivalent to true [2019-10-07 13:27:12,851 WARN L191 SmtUtils]: Spent 423.00 ms on a formula simplification that was a NOOP. DAG size: 147 [2019-10-07 13:27:13,351 WARN L191 SmtUtils]: Spent 485.00 ms on a formula simplification that was a NOOP. DAG size: 147 [2019-10-07 13:27:13,830 WARN L191 SmtUtils]: Spent 451.00 ms on a formula simplification that was a NOOP. DAG size: 147 [2019-10-07 13:27:14,324 WARN L191 SmtUtils]: Spent 459.00 ms on a formula simplification that was a NOOP. DAG size: 190 [2019-10-07 13:27:14,651 WARN L191 SmtUtils]: Spent 286.00 ms on a formula simplification that was a NOOP. DAG size: 219 [2019-10-07 13:27:16,204 WARN L191 SmtUtils]: Spent 500.00 ms on a formula simplification. DAG size of input: 235 DAG size of output: 89 [2019-10-07 13:27:19,971 WARN L191 SmtUtils]: Spent 3.34 s on a formula simplification. DAG size of input: 247 DAG size of output: 195 [2019-10-07 13:27:21,431 WARN L191 SmtUtils]: Spent 1.37 s on a formula simplification that was a NOOP. DAG size: 186 [2019-10-07 13:27:21,743 WARN L191 SmtUtils]: Spent 135.00 ms on a formula simplification that was a NOOP. DAG size: 70