./Ultimate.py --spec ../sv-benchmarks/c/properties/valid-memsafety.prp --file ../sv-benchmarks/c/ldv-memsafety/memleaks_test1-2.i --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version 8bd4bc60 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx12G -Xms1G -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerMemDerefMemtrack.xml -i ../sv-benchmarks/c/ldv-memsafety/memleaks_test1-2.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-DerefFreeMemtrack-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash ca8443f02e84c43442a8563176ea0a68cc82ac31 ............................................................................................................................... Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx12G -Xms1G -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerMemDerefMemtrack.xml -i ../sv-benchmarks/c/ldv-memsafety/memleaks_test1-2.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-DerefFreeMemtrack-32bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash ca8443f02e84c43442a8563176ea0a68cc82ac31 ..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Writing human readable error path to file UltimateCounterExample.errorpath Result: FALSE(valid-free) --- Real Ultimate output --- This is Ultimate 0.1.25-8bd4bc6 [2020-07-29 01:01:14,214 INFO L177 SettingsManager]: Resetting all preferences to default values... [2020-07-29 01:01:14,216 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2020-07-29 01:01:14,228 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2020-07-29 01:01:14,229 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2020-07-29 01:01:14,230 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2020-07-29 01:01:14,232 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2020-07-29 01:01:14,234 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2020-07-29 01:01:14,236 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2020-07-29 01:01:14,237 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2020-07-29 01:01:14,238 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2020-07-29 01:01:14,240 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2020-07-29 01:01:14,240 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2020-07-29 01:01:14,241 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2020-07-29 01:01:14,242 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2020-07-29 01:01:14,244 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2020-07-29 01:01:14,245 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2020-07-29 01:01:14,246 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2020-07-29 01:01:14,248 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2020-07-29 01:01:14,250 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2020-07-29 01:01:14,252 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2020-07-29 01:01:14,253 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2020-07-29 01:01:14,255 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2020-07-29 01:01:14,256 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2020-07-29 01:01:14,259 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2020-07-29 01:01:14,259 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2020-07-29 01:01:14,260 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2020-07-29 01:01:14,261 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2020-07-29 01:01:14,261 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2020-07-29 01:01:14,262 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2020-07-29 01:01:14,263 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2020-07-29 01:01:14,264 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2020-07-29 01:01:14,265 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2020-07-29 01:01:14,266 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2020-07-29 01:01:14,267 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2020-07-29 01:01:14,267 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2020-07-29 01:01:14,268 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2020-07-29 01:01:14,269 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2020-07-29 01:01:14,269 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2020-07-29 01:01:14,270 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2020-07-29 01:01:14,271 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2020-07-29 01:01:14,272 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-DerefFreeMemtrack-32bit-Automizer_Default.epf [2020-07-29 01:01:14,287 INFO L113 SettingsManager]: Loading preferences was successful [2020-07-29 01:01:14,288 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2020-07-29 01:01:14,289 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2020-07-29 01:01:14,290 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2020-07-29 01:01:14,290 INFO L138 SettingsManager]: * Use SBE=true [2020-07-29 01:01:14,290 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2020-07-29 01:01:14,291 INFO L138 SettingsManager]: * sizeof long=4 [2020-07-29 01:01:14,291 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2020-07-29 01:01:14,291 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2020-07-29 01:01:14,291 INFO L138 SettingsManager]: * sizeof POINTER=4 [2020-07-29 01:01:14,292 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2020-07-29 01:01:14,292 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2020-07-29 01:01:14,292 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2020-07-29 01:01:14,292 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2020-07-29 01:01:14,293 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2020-07-29 01:01:14,293 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2020-07-29 01:01:14,293 INFO L138 SettingsManager]: * sizeof long double=12 [2020-07-29 01:01:14,294 INFO L138 SettingsManager]: * Use constant arrays=true [2020-07-29 01:01:14,294 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2020-07-29 01:01:14,294 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2020-07-29 01:01:14,295 INFO L138 SettingsManager]: * To the following directory=./dump/ [2020-07-29 01:01:14,295 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2020-07-29 01:01:14,295 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-29 01:01:14,296 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2020-07-29 01:01:14,296 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2020-07-29 01:01:14,296 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2020-07-29 01:01:14,296 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2020-07-29 01:01:14,297 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2020-07-29 01:01:14,297 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ca8443f02e84c43442a8563176ea0a68cc82ac31 [2020-07-29 01:01:14,628 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2020-07-29 01:01:14,645 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2020-07-29 01:01:14,649 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2020-07-29 01:01:14,651 INFO L271 PluginConnector]: Initializing CDTParser... [2020-07-29 01:01:14,653 INFO L275 PluginConnector]: CDTParser initialized [2020-07-29 01:01:14,654 INFO L429 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-memsafety/memleaks_test1-2.i [2020-07-29 01:01:14,729 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/10b153066/76127cb423364bc080d5873e0b517c5a/FLAG013916f04 [2020-07-29 01:01:15,305 INFO L306 CDTParser]: Found 1 translation units. [2020-07-29 01:01:15,306 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-memsafety/memleaks_test1-2.i [2020-07-29 01:01:15,323 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/10b153066/76127cb423364bc080d5873e0b517c5a/FLAG013916f04 [2020-07-29 01:01:15,573 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/10b153066/76127cb423364bc080d5873e0b517c5a [2020-07-29 01:01:15,576 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2020-07-29 01:01:15,579 INFO L131 ToolchainWalker]: Walking toolchain with 5 elements. [2020-07-29 01:01:15,580 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2020-07-29 01:01:15,580 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2020-07-29 01:01:15,584 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2020-07-29 01:01:15,585 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.07 01:01:15" (1/1) ... [2020-07-29 01:01:15,588 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@41227603 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.07 01:01:15, skipping insertion in model container [2020-07-29 01:01:15,589 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.07 01:01:15" (1/1) ... [2020-07-29 01:01:15,596 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2020-07-29 01:01:15,651 INFO L178 MainTranslator]: Built tables and reachable declarations [2020-07-29 01:01:16,194 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-29 01:01:16,218 ERROR L326 MainTranslator]: Unsupported Syntax: Found a cast between two array/pointer types where the value type is smaller than the cast-to type while using memory model HoenickeLindenmann_Original (while Not using bitvector translation) [2020-07-29 01:01:16,219 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieTranslatorObserver@3f05e160 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.07 01:01:16, skipping insertion in model container [2020-07-29 01:01:16,219 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2020-07-29 01:01:16,220 INFO L184 ToolchainWalker]: Toolchain execution was canceled (user or tool) before executing de.uni_freiburg.informatik.ultimate.boogie.preprocessor [2020-07-29 01:01:16,223 INFO L168 Benchmark]: Toolchain (without parser) took 644.43 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 151.5 MB). Free memory was 950.8 MB in the beginning and 1.1 GB in the end (delta: -190.2 MB). Peak memory consumption was 26.1 MB. Max. memory is 11.5 GB. [2020-07-29 01:01:16,224 INFO L168 Benchmark]: CDTParser took 0.55 ms. Allocated memory is still 1.0 GB. Free memory is still 981.7 MB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-29 01:01:16,225 INFO L168 Benchmark]: CACSL2BoogieTranslator took 639.73 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 151.5 MB). Free memory was 945.5 MB in the beginning and 1.1 GB in the end (delta: -195.5 MB). Peak memory consumption was 20.7 MB. Max. memory is 11.5 GB. [2020-07-29 01:01:16,227 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.55 ms. Allocated memory is still 1.0 GB. Free memory is still 981.7 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 639.73 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 151.5 MB). Free memory was 945.5 MB in the beginning and 1.1 GB in the end (delta: -195.5 MB). Peak memory consumption was 20.7 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - UnsupportedSyntaxResult [Line: 576]: Unsupported Syntax Found a cast between two array/pointer types where the value type is smaller than the cast-to type while using memory model HoenickeLindenmann_Original (while Not using bitvector translation) RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request... ### Bit-precise run ### This is Ultimate 0.1.25-8bd4bc6 [2020-07-29 01:01:18,123 INFO L177 SettingsManager]: Resetting all preferences to default values... [2020-07-29 01:01:18,125 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2020-07-29 01:01:18,138 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2020-07-29 01:01:18,138 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2020-07-29 01:01:18,139 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2020-07-29 01:01:18,141 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2020-07-29 01:01:18,143 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2020-07-29 01:01:18,145 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2020-07-29 01:01:18,146 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2020-07-29 01:01:18,147 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2020-07-29 01:01:18,149 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2020-07-29 01:01:18,149 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2020-07-29 01:01:18,150 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2020-07-29 01:01:18,151 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2020-07-29 01:01:18,153 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2020-07-29 01:01:18,154 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2020-07-29 01:01:18,155 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2020-07-29 01:01:18,157 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2020-07-29 01:01:18,159 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2020-07-29 01:01:18,160 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2020-07-29 01:01:18,162 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2020-07-29 01:01:18,163 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2020-07-29 01:01:18,164 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2020-07-29 01:01:18,167 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2020-07-29 01:01:18,167 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2020-07-29 01:01:18,167 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2020-07-29 01:01:18,168 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2020-07-29 01:01:18,169 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2020-07-29 01:01:18,170 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2020-07-29 01:01:18,170 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2020-07-29 01:01:18,171 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2020-07-29 01:01:18,172 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2020-07-29 01:01:18,173 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2020-07-29 01:01:18,176 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2020-07-29 01:01:18,177 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2020-07-29 01:01:18,178 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2020-07-29 01:01:18,179 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2020-07-29 01:01:18,179 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2020-07-29 01:01:18,180 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2020-07-29 01:01:18,181 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2020-07-29 01:01:18,182 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-DerefFreeMemtrack-32bit-Automizer_Bitvector.epf [2020-07-29 01:01:18,208 INFO L113 SettingsManager]: Loading preferences was successful [2020-07-29 01:01:18,208 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2020-07-29 01:01:18,210 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2020-07-29 01:01:18,211 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2020-07-29 01:01:18,211 INFO L138 SettingsManager]: * Use SBE=true [2020-07-29 01:01:18,211 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2020-07-29 01:01:18,211 INFO L138 SettingsManager]: * sizeof long=4 [2020-07-29 01:01:18,212 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2020-07-29 01:01:18,212 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2020-07-29 01:01:18,212 INFO L138 SettingsManager]: * sizeof POINTER=4 [2020-07-29 01:01:18,213 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2020-07-29 01:01:18,214 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2020-07-29 01:01:18,214 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2020-07-29 01:01:18,214 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2020-07-29 01:01:18,215 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2020-07-29 01:01:18,215 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2020-07-29 01:01:18,215 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2020-07-29 01:01:18,215 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2020-07-29 01:01:18,216 INFO L138 SettingsManager]: * sizeof long double=12 [2020-07-29 01:01:18,216 INFO L138 SettingsManager]: * Use constant arrays=true [2020-07-29 01:01:18,216 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2020-07-29 01:01:18,217 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2020-07-29 01:01:18,217 INFO L138 SettingsManager]: * To the following directory=./dump/ [2020-07-29 01:01:18,217 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2020-07-29 01:01:18,217 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-29 01:01:18,218 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2020-07-29 01:01:18,218 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2020-07-29 01:01:18,218 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2020-07-29 01:01:18,218 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --rewrite-divk --print-success --lang smt [2020-07-29 01:01:18,219 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2020-07-29 01:01:18,219 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2020-07-29 01:01:18,219 INFO L138 SettingsManager]: * Logic for external solver=AUFBV Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ca8443f02e84c43442a8563176ea0a68cc82ac31 [2020-07-29 01:01:18,534 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2020-07-29 01:01:18,550 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2020-07-29 01:01:18,553 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2020-07-29 01:01:18,555 INFO L271 PluginConnector]: Initializing CDTParser... [2020-07-29 01:01:18,556 INFO L275 PluginConnector]: CDTParser initialized [2020-07-29 01:01:18,556 INFO L429 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-memsafety/memleaks_test1-2.i [2020-07-29 01:01:18,622 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d84727963/7d2e284be04c4ba4acba8cd102e88dc9/FLAG3213cdc50 [2020-07-29 01:01:19,184 INFO L306 CDTParser]: Found 1 translation units. [2020-07-29 01:01:19,184 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-memsafety/memleaks_test1-2.i [2020-07-29 01:01:19,200 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d84727963/7d2e284be04c4ba4acba8cd102e88dc9/FLAG3213cdc50 [2020-07-29 01:01:19,480 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d84727963/7d2e284be04c4ba4acba8cd102e88dc9 [2020-07-29 01:01:19,483 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2020-07-29 01:01:19,486 INFO L131 ToolchainWalker]: Walking toolchain with 5 elements. [2020-07-29 01:01:19,487 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2020-07-29 01:01:19,488 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2020-07-29 01:01:19,491 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2020-07-29 01:01:19,493 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.07 01:01:19" (1/1) ... [2020-07-29 01:01:19,496 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@12a9274b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.07 01:01:19, skipping insertion in model container [2020-07-29 01:01:19,496 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.07 01:01:19" (1/1) ... [2020-07-29 01:01:19,504 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2020-07-29 01:01:19,571 INFO L178 MainTranslator]: Built tables and reachable declarations [2020-07-29 01:01:20,093 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-29 01:01:20,120 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2020-07-29 01:01:20,136 INFO L178 MainTranslator]: Built tables and reachable declarations [2020-07-29 01:01:20,199 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-29 01:01:20,225 INFO L203 MainTranslator]: Completed pre-run [2020-07-29 01:01:20,341 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-29 01:01:20,445 INFO L208 MainTranslator]: Completed translation [2020-07-29 01:01:20,445 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.07 01:01:20 WrapperNode [2020-07-29 01:01:20,446 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2020-07-29 01:01:20,447 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2020-07-29 01:01:20,447 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2020-07-29 01:01:20,447 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2020-07-29 01:01:20,463 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.07 01:01:20" (1/1) ... [2020-07-29 01:01:20,463 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.07 01:01:20" (1/1) ... [2020-07-29 01:01:20,490 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.07 01:01:20" (1/1) ... [2020-07-29 01:01:20,491 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.07 01:01:20" (1/1) ... [2020-07-29 01:01:20,550 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.07 01:01:20" (1/1) ... [2020-07-29 01:01:20,566 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.07 01:01:20" (1/1) ... [2020-07-29 01:01:20,573 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.07 01:01:20" (1/1) ... [2020-07-29 01:01:20,586 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2020-07-29 01:01:20,587 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2020-07-29 01:01:20,587 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2020-07-29 01:01:20,587 INFO L275 PluginConnector]: RCFGBuilder initialized [2020-07-29 01:01:20,588 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.07 01:01:20" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-29 01:01:20,658 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2020-07-29 01:01:20,658 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2020-07-29 01:01:20,659 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2020-07-29 01:01:20,660 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.setCurrentRoundingMode [2020-07-29 01:01:20,660 INFO L138 BoogieDeclarations]: Found implementation of procedure __bswap_32 [2020-07-29 01:01:20,661 INFO L138 BoogieDeclarations]: Found implementation of procedure __bswap_64 [2020-07-29 01:01:20,661 INFO L138 BoogieDeclarations]: Found implementation of procedure __uint16_identity [2020-07-29 01:01:20,661 INFO L138 BoogieDeclarations]: Found implementation of procedure __uint32_identity [2020-07-29 01:01:20,661 INFO L138 BoogieDeclarations]: Found implementation of procedure __uint64_identity [2020-07-29 01:01:20,662 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_nonpositive [2020-07-29 01:01:20,663 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_positive [2020-07-29 01:01:20,663 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2020-07-29 01:01:20,663 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2020-07-29 01:01:20,663 INFO L138 BoogieDeclarations]: Found implementation of procedure LDV_INIT_LIST_HEAD [2020-07-29 01:01:20,663 INFO L138 BoogieDeclarations]: Found implementation of procedure __ldv_list_add [2020-07-29 01:01:20,664 INFO L138 BoogieDeclarations]: Found implementation of procedure __ldv_list_del [2020-07-29 01:01:20,665 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_list_add [2020-07-29 01:01:20,665 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_list_add_tail [2020-07-29 01:01:20,665 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_list_del [2020-07-29 01:01:20,665 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_msg_alloc [2020-07-29 01:01:20,667 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_msg_fill [2020-07-29 01:01:20,668 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_msg_free [2020-07-29 01:01:20,669 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_submit_msg [2020-07-29 01:01:20,669 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_destroy_msgs [2020-07-29 01:01:20,669 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_get_drvdata [2020-07-29 01:01:20,669 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_dev_set_drvdata [2020-07-29 01:01:20,670 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_atomic_add_return [2020-07-29 01:01:20,670 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_atomic_sub_return [2020-07-29 01:01:20,670 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kref_sub [2020-07-29 01:01:20,671 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kref_init [2020-07-29 01:01:20,671 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kref_get [2020-07-29 01:01:20,671 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kref_put [2020-07-29 01:01:20,671 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kobject_del [2020-07-29 01:01:20,671 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kobject_cleanup [2020-07-29 01:01:20,672 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kobject_release [2020-07-29 01:01:20,672 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kobject_put [2020-07-29 01:01:20,674 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kobject_get [2020-07-29 01:01:20,674 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kobject_init_internal [2020-07-29 01:01:20,674 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kobject_init [2020-07-29 01:01:20,674 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kobject_create [2020-07-29 01:01:20,675 INFO L138 BoogieDeclarations]: Found implementation of procedure f [2020-07-29 01:01:20,676 INFO L138 BoogieDeclarations]: Found implementation of procedure g [2020-07-29 01:01:20,676 INFO L138 BoogieDeclarations]: Found implementation of procedure entry_point [2020-07-29 01:01:20,676 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2020-07-29 01:01:20,677 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2020-07-29 01:01:20,677 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2020-07-29 01:01:20,677 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2020-07-29 01:01:20,678 INFO L130 BoogieDeclarations]: Found specification of procedure __ctype_get_mb_cur_max [2020-07-29 01:01:20,678 INFO L130 BoogieDeclarations]: Found specification of procedure atof [2020-07-29 01:01:20,678 INFO L130 BoogieDeclarations]: Found specification of procedure atoi [2020-07-29 01:01:20,678 INFO L130 BoogieDeclarations]: Found specification of procedure atol [2020-07-29 01:01:20,678 INFO L130 BoogieDeclarations]: Found specification of procedure atoll [2020-07-29 01:01:20,679 INFO L130 BoogieDeclarations]: Found specification of procedure strtod [2020-07-29 01:01:20,679 INFO L130 BoogieDeclarations]: Found specification of procedure strtof [2020-07-29 01:01:20,679 INFO L130 BoogieDeclarations]: Found specification of procedure strtold [2020-07-29 01:01:20,679 INFO L130 BoogieDeclarations]: Found specification of procedure strtol [2020-07-29 01:01:20,680 INFO L130 BoogieDeclarations]: Found specification of procedure strtoul [2020-07-29 01:01:20,680 INFO L130 BoogieDeclarations]: Found specification of procedure strtoq [2020-07-29 01:01:20,680 INFO L130 BoogieDeclarations]: Found specification of procedure strtouq [2020-07-29 01:01:20,680 INFO L130 BoogieDeclarations]: Found specification of procedure strtoll [2020-07-29 01:01:20,681 INFO L130 BoogieDeclarations]: Found specification of procedure strtoull [2020-07-29 01:01:20,681 INFO L130 BoogieDeclarations]: Found specification of procedure l64a [2020-07-29 01:01:20,682 INFO L130 BoogieDeclarations]: Found specification of procedure a64l [2020-07-29 01:01:20,682 INFO L130 BoogieDeclarations]: Found specification of procedure __bswap_32 [2020-07-29 01:01:20,682 INFO L130 BoogieDeclarations]: Found specification of procedure __bswap_64 [2020-07-29 01:01:20,682 INFO L130 BoogieDeclarations]: Found specification of procedure __uint16_identity [2020-07-29 01:01:20,683 INFO L130 BoogieDeclarations]: Found specification of procedure __uint32_identity [2020-07-29 01:01:20,683 INFO L130 BoogieDeclarations]: Found specification of procedure __uint64_identity [2020-07-29 01:01:20,684 INFO L130 BoogieDeclarations]: Found specification of procedure select [2020-07-29 01:01:20,684 INFO L130 BoogieDeclarations]: Found specification of procedure pselect [2020-07-29 01:01:20,685 INFO L130 BoogieDeclarations]: Found specification of procedure gnu_dev_major [2020-07-29 01:01:20,685 INFO L130 BoogieDeclarations]: Found specification of procedure gnu_dev_minor [2020-07-29 01:01:20,685 INFO L130 BoogieDeclarations]: Found specification of procedure gnu_dev_makedev [2020-07-29 01:01:20,685 INFO L130 BoogieDeclarations]: Found specification of procedure random [2020-07-29 01:01:20,685 INFO L130 BoogieDeclarations]: Found specification of procedure srandom [2020-07-29 01:01:20,685 INFO L130 BoogieDeclarations]: Found specification of procedure initstate [2020-07-29 01:01:20,685 INFO L130 BoogieDeclarations]: Found specification of procedure setstate [2020-07-29 01:01:20,685 INFO L130 BoogieDeclarations]: Found specification of procedure random_r [2020-07-29 01:01:20,686 INFO L130 BoogieDeclarations]: Found specification of procedure srandom_r [2020-07-29 01:01:20,686 INFO L130 BoogieDeclarations]: Found specification of procedure initstate_r [2020-07-29 01:01:20,686 INFO L130 BoogieDeclarations]: Found specification of procedure setstate_r [2020-07-29 01:01:20,686 INFO L130 BoogieDeclarations]: Found specification of procedure rand [2020-07-29 01:01:20,686 INFO L130 BoogieDeclarations]: Found specification of procedure srand [2020-07-29 01:01:20,686 INFO L130 BoogieDeclarations]: Found specification of procedure rand_r [2020-07-29 01:01:20,686 INFO L130 BoogieDeclarations]: Found specification of procedure drand48 [2020-07-29 01:01:20,686 INFO L130 BoogieDeclarations]: Found specification of procedure erand48 [2020-07-29 01:01:20,686 INFO L130 BoogieDeclarations]: Found specification of procedure lrand48 [2020-07-29 01:01:20,687 INFO L130 BoogieDeclarations]: Found specification of procedure nrand48 [2020-07-29 01:01:20,687 INFO L130 BoogieDeclarations]: Found specification of procedure mrand48 [2020-07-29 01:01:20,687 INFO L130 BoogieDeclarations]: Found specification of procedure jrand48 [2020-07-29 01:01:20,687 INFO L130 BoogieDeclarations]: Found specification of procedure srand48 [2020-07-29 01:01:20,687 INFO L130 BoogieDeclarations]: Found specification of procedure seed48 [2020-07-29 01:01:20,688 INFO L130 BoogieDeclarations]: Found specification of procedure lcong48 [2020-07-29 01:01:20,688 INFO L130 BoogieDeclarations]: Found specification of procedure drand48_r [2020-07-29 01:01:20,688 INFO L130 BoogieDeclarations]: Found specification of procedure erand48_r [2020-07-29 01:01:20,688 INFO L130 BoogieDeclarations]: Found specification of procedure lrand48_r [2020-07-29 01:01:20,688 INFO L130 BoogieDeclarations]: Found specification of procedure nrand48_r [2020-07-29 01:01:20,689 INFO L130 BoogieDeclarations]: Found specification of procedure mrand48_r [2020-07-29 01:01:20,689 INFO L130 BoogieDeclarations]: Found specification of procedure jrand48_r [2020-07-29 01:01:20,689 INFO L130 BoogieDeclarations]: Found specification of procedure srand48_r [2020-07-29 01:01:20,689 INFO L130 BoogieDeclarations]: Found specification of procedure seed48_r [2020-07-29 01:01:20,689 INFO L130 BoogieDeclarations]: Found specification of procedure lcong48_r [2020-07-29 01:01:20,689 INFO L130 BoogieDeclarations]: Found specification of procedure malloc [2020-07-29 01:01:20,690 INFO L130 BoogieDeclarations]: Found specification of procedure calloc [2020-07-29 01:01:20,690 INFO L130 BoogieDeclarations]: Found specification of procedure realloc [2020-07-29 01:01:20,690 INFO L130 BoogieDeclarations]: Found specification of procedure free [2020-07-29 01:01:20,690 INFO L130 BoogieDeclarations]: Found specification of procedure alloca [2020-07-29 01:01:20,690 INFO L130 BoogieDeclarations]: Found specification of procedure valloc [2020-07-29 01:01:20,690 INFO L130 BoogieDeclarations]: Found specification of procedure posix_memalign [2020-07-29 01:01:20,691 INFO L130 BoogieDeclarations]: Found specification of procedure aligned_alloc [2020-07-29 01:01:20,691 INFO L130 BoogieDeclarations]: Found specification of procedure abort [2020-07-29 01:01:20,691 INFO L130 BoogieDeclarations]: Found specification of procedure atexit [2020-07-29 01:01:20,691 INFO L130 BoogieDeclarations]: Found specification of procedure at_quick_exit [2020-07-29 01:01:20,692 INFO L130 BoogieDeclarations]: Found specification of procedure on_exit [2020-07-29 01:01:20,692 INFO L130 BoogieDeclarations]: Found specification of procedure exit [2020-07-29 01:01:20,692 INFO L130 BoogieDeclarations]: Found specification of procedure quick_exit [2020-07-29 01:01:20,692 INFO L130 BoogieDeclarations]: Found specification of procedure _Exit [2020-07-29 01:01:20,692 INFO L130 BoogieDeclarations]: Found specification of procedure getenv [2020-07-29 01:01:20,692 INFO L130 BoogieDeclarations]: Found specification of procedure putenv [2020-07-29 01:01:20,693 INFO L130 BoogieDeclarations]: Found specification of procedure setenv [2020-07-29 01:01:20,693 INFO L130 BoogieDeclarations]: Found specification of procedure unsetenv [2020-07-29 01:01:20,693 INFO L130 BoogieDeclarations]: Found specification of procedure clearenv [2020-07-29 01:01:20,693 INFO L130 BoogieDeclarations]: Found specification of procedure mktemp [2020-07-29 01:01:20,694 INFO L130 BoogieDeclarations]: Found specification of procedure mkstemp [2020-07-29 01:01:20,694 INFO L130 BoogieDeclarations]: Found specification of procedure mkstemps [2020-07-29 01:01:20,695 INFO L130 BoogieDeclarations]: Found specification of procedure mkdtemp [2020-07-29 01:01:20,698 INFO L130 BoogieDeclarations]: Found specification of procedure system [2020-07-29 01:01:20,699 INFO L130 BoogieDeclarations]: Found specification of procedure realpath [2020-07-29 01:01:20,699 INFO L130 BoogieDeclarations]: Found specification of procedure bsearch [2020-07-29 01:01:20,699 INFO L130 BoogieDeclarations]: Found specification of procedure qsort [2020-07-29 01:01:20,699 INFO L130 BoogieDeclarations]: Found specification of procedure abs [2020-07-29 01:01:20,700 INFO L130 BoogieDeclarations]: Found specification of procedure labs [2020-07-29 01:01:20,701 INFO L130 BoogieDeclarations]: Found specification of procedure llabs [2020-07-29 01:01:20,701 INFO L130 BoogieDeclarations]: Found specification of procedure div [2020-07-29 01:01:20,701 INFO L130 BoogieDeclarations]: Found specification of procedure ldiv [2020-07-29 01:01:20,701 INFO L130 BoogieDeclarations]: Found specification of procedure lldiv [2020-07-29 01:01:20,701 INFO L130 BoogieDeclarations]: Found specification of procedure ecvt [2020-07-29 01:01:20,702 INFO L130 BoogieDeclarations]: Found specification of procedure fcvt [2020-07-29 01:01:20,710 INFO L130 BoogieDeclarations]: Found specification of procedure gcvt [2020-07-29 01:01:20,710 INFO L130 BoogieDeclarations]: Found specification of procedure qecvt [2020-07-29 01:01:20,710 INFO L130 BoogieDeclarations]: Found specification of procedure qfcvt [2020-07-29 01:01:20,710 INFO L130 BoogieDeclarations]: Found specification of procedure qgcvt [2020-07-29 01:01:20,711 INFO L130 BoogieDeclarations]: Found specification of procedure ecvt_r [2020-07-29 01:01:20,711 INFO L130 BoogieDeclarations]: Found specification of procedure fcvt_r [2020-07-29 01:01:20,711 INFO L130 BoogieDeclarations]: Found specification of procedure qecvt_r [2020-07-29 01:01:20,712 INFO L130 BoogieDeclarations]: Found specification of procedure qfcvt_r [2020-07-29 01:01:20,712 INFO L130 BoogieDeclarations]: Found specification of procedure mblen [2020-07-29 01:01:20,712 INFO L130 BoogieDeclarations]: Found specification of procedure mbtowc [2020-07-29 01:01:20,712 INFO L130 BoogieDeclarations]: Found specification of procedure wctomb [2020-07-29 01:01:20,713 INFO L130 BoogieDeclarations]: Found specification of procedure mbstowcs [2020-07-29 01:01:20,713 INFO L130 BoogieDeclarations]: Found specification of procedure wcstombs [2020-07-29 01:01:20,713 INFO L130 BoogieDeclarations]: Found specification of procedure rpmatch [2020-07-29 01:01:20,713 INFO L130 BoogieDeclarations]: Found specification of procedure getsubopt [2020-07-29 01:01:20,713 INFO L130 BoogieDeclarations]: Found specification of procedure getloadavg [2020-07-29 01:01:20,714 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2020-07-29 01:01:20,714 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_int [2020-07-29 01:01:20,714 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_nonpositive [2020-07-29 01:01:20,714 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_positive [2020-07-29 01:01:20,715 INFO L130 BoogieDeclarations]: Found specification of procedure memcpy [2020-07-29 01:01:20,715 INFO L130 BoogieDeclarations]: Found specification of procedure memset [2020-07-29 01:01:20,715 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2020-07-29 01:01:20,715 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2020-07-29 01:01:20,716 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2020-07-29 01:01:20,716 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2020-07-29 01:01:20,716 INFO L130 BoogieDeclarations]: Found specification of procedure LDV_INIT_LIST_HEAD [2020-07-29 01:01:20,716 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2020-07-29 01:01:20,716 INFO L130 BoogieDeclarations]: Found specification of procedure __ldv_list_add [2020-07-29 01:01:20,717 INFO L130 BoogieDeclarations]: Found specification of procedure __ldv_list_del [2020-07-29 01:01:20,718 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_list_add [2020-07-29 01:01:20,718 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2020-07-29 01:01:20,718 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_list_add_tail [2020-07-29 01:01:20,718 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_list_del [2020-07-29 01:01:20,719 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_msg_alloc [2020-07-29 01:01:20,719 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_msg_fill [2020-07-29 01:01:20,719 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2020-07-29 01:01:20,719 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_msg_free [2020-07-29 01:01:20,719 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2020-07-29 01:01:20,720 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_submit_msg [2020-07-29 01:01:20,720 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_destroy_msgs [2020-07-29 01:01:20,721 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_get_drvdata [2020-07-29 01:01:20,721 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_dev_set_drvdata [2020-07-29 01:01:20,721 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_atomic_add_return [2020-07-29 01:01:20,721 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2020-07-29 01:01:20,721 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2020-07-29 01:01:20,722 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_atomic_sub_return [2020-07-29 01:01:20,722 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kref_sub [2020-07-29 01:01:20,722 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2020-07-29 01:01:20,722 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kref_init [2020-07-29 01:01:20,722 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kref_get [2020-07-29 01:01:20,723 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kref_put [2020-07-29 01:01:20,723 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kobject_del [2020-07-29 01:01:20,723 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kobject_cleanup [2020-07-29 01:01:20,723 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kobject_release [2020-07-29 01:01:20,723 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kobject_put [2020-07-29 01:01:20,724 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kobject_get [2020-07-29 01:01:20,724 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kobject_init_internal [2020-07-29 01:01:20,724 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kobject_init [2020-07-29 01:01:20,724 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kobject_create [2020-07-29 01:01:20,725 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2020-07-29 01:01:20,725 INFO L130 BoogieDeclarations]: Found specification of procedure f [2020-07-29 01:01:20,725 INFO L130 BoogieDeclarations]: Found specification of procedure g [2020-07-29 01:01:20,725 INFO L130 BoogieDeclarations]: Found specification of procedure entry_point [2020-07-29 01:01:20,725 INFO L130 BoogieDeclarations]: Found specification of procedure main [2020-07-29 01:01:20,726 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2020-07-29 01:01:20,726 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2020-07-29 01:01:20,726 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2020-07-29 01:01:20,726 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2020-07-29 01:01:20,726 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.setCurrentRoundingMode [2020-07-29 01:01:20,727 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2020-07-29 01:01:20,727 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2020-07-29 01:01:20,727 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2020-07-29 01:01:20,727 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2020-07-29 01:01:21,475 WARN L775 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2020-07-29 01:01:21,948 WARN L775 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2020-07-29 01:01:22,447 INFO L290 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2020-07-29 01:01:22,447 INFO L295 CfgBuilder]: Removed 1 assume(true) statements. [2020-07-29 01:01:22,452 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.07 01:01:22 BoogieIcfgContainer [2020-07-29 01:01:22,453 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2020-07-29 01:01:22,454 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2020-07-29 01:01:22,455 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2020-07-29 01:01:22,458 INFO L275 PluginConnector]: TraceAbstraction initialized [2020-07-29 01:01:22,459 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 29.07 01:01:19" (1/3) ... [2020-07-29 01:01:22,460 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@33928d88 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.07 01:01:22, skipping insertion in model container [2020-07-29 01:01:22,460 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.07 01:01:20" (2/3) ... [2020-07-29 01:01:22,461 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@33928d88 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.07 01:01:22, skipping insertion in model container [2020-07-29 01:01:22,461 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.07 01:01:22" (3/3) ... [2020-07-29 01:01:22,463 INFO L109 eAbstractionObserver]: Analyzing ICFG memleaks_test1-2.i [2020-07-29 01:01:22,476 INFO L157 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2020-07-29 01:01:22,486 INFO L169 ceAbstractionStarter]: Appying trace abstraction to program that has 77 error locations. [2020-07-29 01:01:22,504 INFO L251 AbstractCegarLoop]: Starting to check reachability of 77 error locations. [2020-07-29 01:01:22,532 INFO L375 AbstractCegarLoop]: Interprodecural is true [2020-07-29 01:01:22,532 INFO L376 AbstractCegarLoop]: Hoare is false [2020-07-29 01:01:22,532 INFO L377 AbstractCegarLoop]: Compute interpolants for FPandBP [2020-07-29 01:01:22,532 INFO L378 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2020-07-29 01:01:22,532 INFO L379 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2020-07-29 01:01:22,533 INFO L380 AbstractCegarLoop]: Difference is false [2020-07-29 01:01:22,533 INFO L381 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2020-07-29 01:01:22,533 INFO L385 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2020-07-29 01:01:22,559 INFO L276 IsEmpty]: Start isEmpty. Operand 101 states. [2020-07-29 01:01:22,571 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2020-07-29 01:01:22,572 INFO L414 BasicCegarLoop]: Found error trace [2020-07-29 01:01:22,573 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-29 01:01:22,574 INFO L427 AbstractCegarLoop]: === Iteration 1 === [ldv_kref_initErr0REQUIRES_VIOLATION, ldv_kref_initErr1REQUIRES_VIOLATION, ldv_list_addErr1REQUIRES_VIOLATION, ldv_list_addErr0REQUIRES_VIOLATION, ldv_kobject_createErr1REQUIRES_VIOLATION, ldv_kobject_createErr0REQUIRES_VIOLATION, ldv_destroy_msgsErr4REQUIRES_VIOLATION, ldv_destroy_msgsErr3REQUIRES_VIOLATION, ldv_destroy_msgsErr2REQUIRES_VIOLATION, ldv_destroy_msgsErr1REQUIRES_VIOLATION, ldv_destroy_msgsErr0REQUIRES_VIOLATION, ldv_destroy_msgsErr5REQUIRES_VIOLATION, ldv_msg_fillErr1REQUIRES_VIOLATION, ldv_msg_fillErr5REQUIRES_VIOLATION, ldv_msg_fillErr0REQUIRES_VIOLATION, ldv_msg_fillErr4REQUIRES_VIOLATION, ldv_msg_fillErr2REQUIRES_VIOLATION, ldv_msg_fillErr3REQUIRES_VIOLATION, ldv_atomic_add_returnErr1REQUIRES_VIOLATION, ldv_atomic_add_returnErr0REQUIRES_VIOLATION, ldv_atomic_add_returnErr3REQUIRES_VIOLATION, ldv_atomic_add_returnErr2REQUIRES_VIOLATION, __ldv_list_delErr0REQUIRES_VIOLATION, __ldv_list_delErr1REQUIRES_VIOLATION, __ldv_list_delErr2REQUIRES_VIOLATION, __ldv_list_delErr3REQUIRES_VIOLATION, ldv_kobject_cleanupErr2ASSERT_VIOLATIONMEMORY_FREE, ldv_kobject_cleanupErr5ASSERT_VIOLATIONMEMORY_FREE, ldv_kobject_cleanupErr7ASSERT_VIOLATIONMEMORY_FREE, ldv_kobject_cleanupErr6ASSERT_VIOLATIONMEMORY_FREE, ldv_kobject_cleanupErr1REQUIRES_VIOLATION, ldv_kobject_cleanupErr4ASSERT_VIOLATIONMEMORY_FREE, ldv_kobject_cleanupErr0REQUIRES_VIOLATION, ldv_kobject_cleanupErr3ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_freeErr6ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_freeErr7ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_freeErr4ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_freeErr1REQUIRES_VIOLATION, ldv_msg_freeErr0REQUIRES_VIOLATION, ldv_msg_freeErr5ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_freeErr2ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_freeErr3ASSERT_VIOLATIONMEMORY_FREE, mainErr0ENSURES_VIOLATIONMEMORY_LEAK, LDV_INIT_LIST_HEADErr2REQUIRES_VIOLATION, LDV_INIT_LIST_HEADErr3REQUIRES_VIOLATION, LDV_INIT_LIST_HEADErr0REQUIRES_VIOLATION, LDV_INIT_LIST_HEADErr1REQUIRES_VIOLATION, ldv_list_delErr2REQUIRES_VIOLATION, ldv_list_delErr1REQUIRES_VIOLATION, ldv_list_delErr3REQUIRES_VIOLATION, ldv_list_delErr0REQUIRES_VIOLATION, __ldv_list_addErr5REQUIRES_VIOLATION, __ldv_list_addErr0REQUIRES_VIOLATION, __ldv_list_addErr1REQUIRES_VIOLATION, __ldv_list_addErr6REQUIRES_VIOLATION, __ldv_list_addErr7REQUIRES_VIOLATION, __ldv_list_addErr2REQUIRES_VIOLATION, __ldv_list_addErr3REQUIRES_VIOLATION, __ldv_list_addErr4REQUIRES_VIOLATION, ldv_dev_set_drvdataErr0REQUIRES_VIOLATION, ldv_dev_set_drvdataErr1REQUIRES_VIOLATION, ldv_atomic_sub_returnErr1REQUIRES_VIOLATION, ldv_atomic_sub_returnErr0REQUIRES_VIOLATION, ldv_atomic_sub_returnErr3REQUIRES_VIOLATION, ldv_atomic_sub_returnErr2REQUIRES_VIOLATION, ldv_list_add_tailErr0REQUIRES_VIOLATION, ldv_list_add_tailErr1REQUIRES_VIOLATION, ldv_dev_get_drvdataErr1REQUIRES_VIOLATION, ldv_dev_get_drvdataErr0REQUIRES_VIOLATION, entry_pointErr3ASSERT_VIOLATIONMEMORY_FREE, entry_pointErr4ASSERT_VIOLATIONMEMORY_FREE, entry_pointErr5ASSERT_VIOLATIONMEMORY_FREE, entry_pointErr2ASSERT_VIOLATIONMEMORY_FREE, entry_pointErr1ASSERT_VIOLATIONMEMORY_FREE, entry_pointErr0ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_allocErr0REQUIRES_VIOLATION, ldv_msg_allocErr1REQUIRES_VIOLATION]=== [2020-07-29 01:01:22,583 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-29 01:01:22,583 INFO L82 PathProgramCache]: Analyzing trace with hash 158552258, now seen corresponding path program 1 times [2020-07-29 01:01:22,606 INFO L163 FreeRefinementEngine]: Executing refinement strategy WOLF [2020-07-29 01:01:22,606 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [142049446] [2020-07-29 01:01:22,607 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat Starting monitored process 2 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with mathsat -unsat_core_generation=3 [2020-07-29 01:01:22,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-29 01:01:22,836 INFO L263 TraceCheckSpWp]: Trace formula consists of 64 conjuncts, 5 conjunts are in the unsatisfiable core [2020-07-29 01:01:22,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-29 01:01:22,860 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-29 01:01:22,948 INFO L263 TraceCheckUtils]: 0: Hoare triple {104#true} call ULTIMATE.init(); {104#true} is VALID [2020-07-29 01:01:22,949 INFO L280 TraceCheckUtils]: 1: Hoare triple {104#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];assume ~bvult32(0bv32, #StackHeapBarrier);currentRoundingMode := ~roundNearestTiesToEven;call ~#ldv_global_msg_list~0.base, ~#ldv_global_msg_list~0.offset := #Ultimate.allocOnStack(8bv32);call write~init~$Pointer$(~#ldv_global_msg_list~0.base, ~#ldv_global_msg_list~0.offset, ~#ldv_global_msg_list~0.base, ~#ldv_global_msg_list~0.offset, 4bv32);call write~init~$Pointer$(~#ldv_global_msg_list~0.base, ~#ldv_global_msg_list~0.offset, ~#ldv_global_msg_list~0.base, ~bvadd32(4bv32, ~#ldv_global_msg_list~0.offset), 4bv32); {104#true} is VALID [2020-07-29 01:01:22,949 INFO L280 TraceCheckUtils]: 2: Hoare triple {104#true} assume true; {104#true} is VALID [2020-07-29 01:01:22,950 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {104#true} {104#true} #448#return; {104#true} is VALID [2020-07-29 01:01:22,950 INFO L263 TraceCheckUtils]: 4: Hoare triple {104#true} call main(); {104#true} is VALID [2020-07-29 01:01:22,950 INFO L263 TraceCheckUtils]: 5: Hoare triple {104#true} call entry_point(); {104#true} is VALID [2020-07-29 01:01:22,951 INFO L263 TraceCheckUtils]: 6: Hoare triple {104#true} call #t~ret38.base, #t~ret38.offset := ldv_malloc(4bv32); {104#true} is VALID [2020-07-29 01:01:22,951 INFO L280 TraceCheckUtils]: 7: Hoare triple {104#true} ~size := #in~size; {104#true} is VALID [2020-07-29 01:01:22,952 INFO L280 TraceCheckUtils]: 8: Hoare triple {104#true} assume 0bv32 != #t~nondet11;havoc #t~nondet11;call #t~malloc12.base, #t~malloc12.offset := #Ultimate.allocOnHeap(~size);#res.base, #res.offset := #t~malloc12.base, #t~malloc12.offset; {133#(= (_ bv0 32) |ldv_malloc_#res.offset|)} is VALID [2020-07-29 01:01:22,953 INFO L280 TraceCheckUtils]: 9: Hoare triple {133#(= (_ bv0 32) |ldv_malloc_#res.offset|)} assume true; {133#(= (_ bv0 32) |ldv_malloc_#res.offset|)} is VALID [2020-07-29 01:01:22,955 INFO L275 TraceCheckUtils]: 10: Hoare quadruple {133#(= (_ bv0 32) |ldv_malloc_#res.offset|)} {104#true} #438#return; {140#(= (_ bv0 32) |entry_point_#t~ret38.offset|)} is VALID [2020-07-29 01:01:22,956 INFO L280 TraceCheckUtils]: 11: Hoare triple {140#(= (_ bv0 32) |entry_point_#t~ret38.offset|)} ~p~0.base, ~p~0.offset := #t~ret38.base, #t~ret38.offset;havoc #t~ret38.base, #t~ret38.offset; {144#(= (_ bv0 32) entry_point_~p~0.offset)} is VALID [2020-07-29 01:01:22,957 INFO L280 TraceCheckUtils]: 12: Hoare triple {144#(= (_ bv0 32) entry_point_~p~0.offset)} assume !(0bv32 == ~p~0.offset); {105#false} is VALID [2020-07-29 01:01:22,960 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-29 01:01:22,960 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2020-07-29 01:01:23,056 INFO L280 TraceCheckUtils]: 12: Hoare triple {144#(= (_ bv0 32) entry_point_~p~0.offset)} assume !(0bv32 == ~p~0.offset); {105#false} is VALID [2020-07-29 01:01:23,057 INFO L280 TraceCheckUtils]: 11: Hoare triple {140#(= (_ bv0 32) |entry_point_#t~ret38.offset|)} ~p~0.base, ~p~0.offset := #t~ret38.base, #t~ret38.offset;havoc #t~ret38.base, #t~ret38.offset; {144#(= (_ bv0 32) entry_point_~p~0.offset)} is VALID [2020-07-29 01:01:23,059 INFO L275 TraceCheckUtils]: 10: Hoare quadruple {133#(= (_ bv0 32) |ldv_malloc_#res.offset|)} {104#true} #438#return; {140#(= (_ bv0 32) |entry_point_#t~ret38.offset|)} is VALID [2020-07-29 01:01:23,059 INFO L280 TraceCheckUtils]: 9: Hoare triple {133#(= (_ bv0 32) |ldv_malloc_#res.offset|)} assume true; {133#(= (_ bv0 32) |ldv_malloc_#res.offset|)} is VALID [2020-07-29 01:01:23,061 INFO L280 TraceCheckUtils]: 8: Hoare triple {104#true} assume 0bv32 != #t~nondet11;havoc #t~nondet11;call #t~malloc12.base, #t~malloc12.offset := #Ultimate.allocOnHeap(~size);#res.base, #res.offset := #t~malloc12.base, #t~malloc12.offset; {133#(= (_ bv0 32) |ldv_malloc_#res.offset|)} is VALID [2020-07-29 01:01:23,061 INFO L280 TraceCheckUtils]: 7: Hoare triple {104#true} ~size := #in~size; {104#true} is VALID [2020-07-29 01:01:23,061 INFO L263 TraceCheckUtils]: 6: Hoare triple {104#true} call #t~ret38.base, #t~ret38.offset := ldv_malloc(4bv32); {104#true} is VALID [2020-07-29 01:01:23,062 INFO L263 TraceCheckUtils]: 5: Hoare triple {104#true} call entry_point(); {104#true} is VALID [2020-07-29 01:01:23,062 INFO L263 TraceCheckUtils]: 4: Hoare triple {104#true} call main(); {104#true} is VALID [2020-07-29 01:01:23,062 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {104#true} {104#true} #448#return; {104#true} is VALID [2020-07-29 01:01:23,063 INFO L280 TraceCheckUtils]: 2: Hoare triple {104#true} assume true; {104#true} is VALID [2020-07-29 01:01:23,063 INFO L280 TraceCheckUtils]: 1: Hoare triple {104#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];assume ~bvult32(0bv32, #StackHeapBarrier);currentRoundingMode := ~roundNearestTiesToEven;call ~#ldv_global_msg_list~0.base, ~#ldv_global_msg_list~0.offset := #Ultimate.allocOnStack(8bv32);call write~init~$Pointer$(~#ldv_global_msg_list~0.base, ~#ldv_global_msg_list~0.offset, ~#ldv_global_msg_list~0.base, ~#ldv_global_msg_list~0.offset, 4bv32);call write~init~$Pointer$(~#ldv_global_msg_list~0.base, ~#ldv_global_msg_list~0.offset, ~#ldv_global_msg_list~0.base, ~bvadd32(4bv32, ~#ldv_global_msg_list~0.offset), 4bv32); {104#true} is VALID [2020-07-29 01:01:23,064 INFO L263 TraceCheckUtils]: 0: Hoare triple {104#true} call ULTIMATE.init(); {104#true} is VALID [2020-07-29 01:01:23,065 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-29 01:01:23,066 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [142049446] [2020-07-29 01:01:23,067 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2020-07-29 01:01:23,067 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4, 4] imperfect sequences [] total 4 [2020-07-29 01:01:23,069 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2074728569] [2020-07-29 01:01:23,075 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 13 [2020-07-29 01:01:23,079 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-29 01:01:23,083 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-29 01:01:23,111 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 13 edges. 13 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-29 01:01:23,111 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-29 01:01:23,111 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2020-07-29 01:01:23,122 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-29 01:01:23,123 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-29 01:01:23,126 INFO L87 Difference]: Start difference. First operand 101 states. Second operand 5 states. [2020-07-29 01:01:23,281 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-29 01:01:23,282 INFO L93 Difference]: Finished difference Result 29 states and 29 transitions. [2020-07-29 01:01:23,282 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-29 01:01:23,282 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 13 [2020-07-29 01:01:23,283 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-29 01:01:23,284 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-29 01:01:23,300 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 31 transitions. [2020-07-29 01:01:23,302 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-29 01:01:23,310 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 31 transitions. [2020-07-29 01:01:23,311 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 31 transitions. [2020-07-29 01:01:23,374 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 31 edges. 31 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-29 01:01:23,387 INFO L225 Difference]: With dead ends: 29 [2020-07-29 01:01:23,388 INFO L226 Difference]: Without dead ends: 26 [2020-07-29 01:01:23,390 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 22 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-29 01:01:23,409 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26 states. [2020-07-29 01:01:23,423 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26 to 26. [2020-07-29 01:01:23,424 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-29 01:01:23,424 INFO L82 GeneralOperation]: Start isEquivalent. First operand 26 states. Second operand 26 states. [2020-07-29 01:01:23,425 INFO L74 IsIncluded]: Start isIncluded. First operand 26 states. Second operand 26 states. [2020-07-29 01:01:23,425 INFO L87 Difference]: Start difference. First operand 26 states. Second operand 26 states. [2020-07-29 01:01:23,430 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-29 01:01:23,430 INFO L93 Difference]: Finished difference Result 26 states and 26 transitions. [2020-07-29 01:01:23,431 INFO L276 IsEmpty]: Start isEmpty. Operand 26 states and 26 transitions. [2020-07-29 01:01:23,431 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-29 01:01:23,431 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-29 01:01:23,432 INFO L74 IsIncluded]: Start isIncluded. First operand 26 states. Second operand 26 states. [2020-07-29 01:01:23,432 INFO L87 Difference]: Start difference. First operand 26 states. Second operand 26 states. [2020-07-29 01:01:23,436 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-29 01:01:23,437 INFO L93 Difference]: Finished difference Result 26 states and 26 transitions. [2020-07-29 01:01:23,437 INFO L276 IsEmpty]: Start isEmpty. Operand 26 states and 26 transitions. [2020-07-29 01:01:23,437 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-29 01:01:23,437 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-29 01:01:23,438 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-29 01:01:23,438 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-29 01:01:23,438 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 26 states. [2020-07-29 01:01:23,441 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26 states to 26 states and 26 transitions. [2020-07-29 01:01:23,442 INFO L78 Accepts]: Start accepts. Automaton has 26 states and 26 transitions. Word has length 13 [2020-07-29 01:01:23,443 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-29 01:01:23,443 INFO L479 AbstractCegarLoop]: Abstraction has 26 states and 26 transitions. [2020-07-29 01:01:23,443 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-29 01:01:23,443 INFO L276 IsEmpty]: Start isEmpty. Operand 26 states and 26 transitions. [2020-07-29 01:01:23,444 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 15 [2020-07-29 01:01:23,444 INFO L414 BasicCegarLoop]: Found error trace [2020-07-29 01:01:23,444 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-29 01:01:23,665 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 mathsat -unsat_core_generation=3 [2020-07-29 01:01:23,667 INFO L427 AbstractCegarLoop]: === Iteration 2 === [ldv_kref_initErr0REQUIRES_VIOLATION, ldv_kref_initErr1REQUIRES_VIOLATION, ldv_list_addErr1REQUIRES_VIOLATION, ldv_list_addErr0REQUIRES_VIOLATION, ldv_kobject_createErr1REQUIRES_VIOLATION, ldv_kobject_createErr0REQUIRES_VIOLATION, ldv_destroy_msgsErr4REQUIRES_VIOLATION, ldv_destroy_msgsErr3REQUIRES_VIOLATION, ldv_destroy_msgsErr2REQUIRES_VIOLATION, ldv_destroy_msgsErr1REQUIRES_VIOLATION, ldv_destroy_msgsErr0REQUIRES_VIOLATION, ldv_destroy_msgsErr5REQUIRES_VIOLATION, ldv_msg_fillErr1REQUIRES_VIOLATION, ldv_msg_fillErr5REQUIRES_VIOLATION, ldv_msg_fillErr0REQUIRES_VIOLATION, ldv_msg_fillErr4REQUIRES_VIOLATION, ldv_msg_fillErr2REQUIRES_VIOLATION, ldv_msg_fillErr3REQUIRES_VIOLATION, ldv_atomic_add_returnErr1REQUIRES_VIOLATION, ldv_atomic_add_returnErr0REQUIRES_VIOLATION, ldv_atomic_add_returnErr3REQUIRES_VIOLATION, ldv_atomic_add_returnErr2REQUIRES_VIOLATION, __ldv_list_delErr0REQUIRES_VIOLATION, __ldv_list_delErr1REQUIRES_VIOLATION, __ldv_list_delErr2REQUIRES_VIOLATION, __ldv_list_delErr3REQUIRES_VIOLATION, ldv_kobject_cleanupErr2ASSERT_VIOLATIONMEMORY_FREE, ldv_kobject_cleanupErr5ASSERT_VIOLATIONMEMORY_FREE, ldv_kobject_cleanupErr7ASSERT_VIOLATIONMEMORY_FREE, ldv_kobject_cleanupErr6ASSERT_VIOLATIONMEMORY_FREE, ldv_kobject_cleanupErr1REQUIRES_VIOLATION, ldv_kobject_cleanupErr4ASSERT_VIOLATIONMEMORY_FREE, ldv_kobject_cleanupErr0REQUIRES_VIOLATION, ldv_kobject_cleanupErr3ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_freeErr6ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_freeErr7ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_freeErr4ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_freeErr1REQUIRES_VIOLATION, ldv_msg_freeErr0REQUIRES_VIOLATION, ldv_msg_freeErr5ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_freeErr2ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_freeErr3ASSERT_VIOLATIONMEMORY_FREE, mainErr0ENSURES_VIOLATIONMEMORY_LEAK, LDV_INIT_LIST_HEADErr2REQUIRES_VIOLATION, LDV_INIT_LIST_HEADErr3REQUIRES_VIOLATION, LDV_INIT_LIST_HEADErr0REQUIRES_VIOLATION, LDV_INIT_LIST_HEADErr1REQUIRES_VIOLATION, ldv_list_delErr2REQUIRES_VIOLATION, ldv_list_delErr1REQUIRES_VIOLATION, ldv_list_delErr3REQUIRES_VIOLATION, ldv_list_delErr0REQUIRES_VIOLATION, __ldv_list_addErr5REQUIRES_VIOLATION, __ldv_list_addErr0REQUIRES_VIOLATION, __ldv_list_addErr1REQUIRES_VIOLATION, __ldv_list_addErr6REQUIRES_VIOLATION, __ldv_list_addErr7REQUIRES_VIOLATION, __ldv_list_addErr2REQUIRES_VIOLATION, __ldv_list_addErr3REQUIRES_VIOLATION, __ldv_list_addErr4REQUIRES_VIOLATION, ldv_dev_set_drvdataErr0REQUIRES_VIOLATION, ldv_dev_set_drvdataErr1REQUIRES_VIOLATION, ldv_atomic_sub_returnErr1REQUIRES_VIOLATION, ldv_atomic_sub_returnErr0REQUIRES_VIOLATION, ldv_atomic_sub_returnErr3REQUIRES_VIOLATION, ldv_atomic_sub_returnErr2REQUIRES_VIOLATION, ldv_list_add_tailErr0REQUIRES_VIOLATION, ldv_list_add_tailErr1REQUIRES_VIOLATION, ldv_dev_get_drvdataErr1REQUIRES_VIOLATION, ldv_dev_get_drvdataErr0REQUIRES_VIOLATION, entry_pointErr3ASSERT_VIOLATIONMEMORY_FREE, entry_pointErr4ASSERT_VIOLATIONMEMORY_FREE, entry_pointErr5ASSERT_VIOLATIONMEMORY_FREE, entry_pointErr2ASSERT_VIOLATIONMEMORY_FREE, entry_pointErr1ASSERT_VIOLATIONMEMORY_FREE, entry_pointErr0ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_allocErr0REQUIRES_VIOLATION, ldv_msg_allocErr1REQUIRES_VIOLATION]=== [2020-07-29 01:01:23,667 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-29 01:01:23,668 INFO L82 PathProgramCache]: Analyzing trace with hash 620153091, now seen corresponding path program 1 times [2020-07-29 01:01:23,669 INFO L163 FreeRefinementEngine]: Executing refinement strategy WOLF [2020-07-29 01:01:23,669 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2087936324] [2020-07-29 01:01:23,669 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat Starting monitored process 3 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with mathsat -unsat_core_generation=3 [2020-07-29 01:01:23,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-29 01:01:23,831 INFO L263 TraceCheckSpWp]: Trace formula consists of 65 conjuncts, 7 conjunts are in the unsatisfiable core [2020-07-29 01:01:23,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-29 01:01:23,842 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-29 01:01:23,946 INFO L263 TraceCheckUtils]: 0: Hoare triple {293#true} call ULTIMATE.init(); {293#true} is VALID [2020-07-29 01:01:23,947 INFO L280 TraceCheckUtils]: 1: Hoare triple {293#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];assume ~bvult32(0bv32, #StackHeapBarrier);currentRoundingMode := ~roundNearestTiesToEven;call ~#ldv_global_msg_list~0.base, ~#ldv_global_msg_list~0.offset := #Ultimate.allocOnStack(8bv32);call write~init~$Pointer$(~#ldv_global_msg_list~0.base, ~#ldv_global_msg_list~0.offset, ~#ldv_global_msg_list~0.base, ~#ldv_global_msg_list~0.offset, 4bv32);call write~init~$Pointer$(~#ldv_global_msg_list~0.base, ~#ldv_global_msg_list~0.offset, ~#ldv_global_msg_list~0.base, ~bvadd32(4bv32, ~#ldv_global_msg_list~0.offset), 4bv32); {301#(bvult (_ bv0 32) |#StackHeapBarrier|)} is VALID [2020-07-29 01:01:23,947 INFO L280 TraceCheckUtils]: 2: Hoare triple {301#(bvult (_ bv0 32) |#StackHeapBarrier|)} assume true; {301#(bvult (_ bv0 32) |#StackHeapBarrier|)} is VALID [2020-07-29 01:01:23,948 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {301#(bvult (_ bv0 32) |#StackHeapBarrier|)} {293#true} #448#return; {301#(bvult (_ bv0 32) |#StackHeapBarrier|)} is VALID [2020-07-29 01:01:23,949 INFO L263 TraceCheckUtils]: 4: Hoare triple {301#(bvult (_ bv0 32) |#StackHeapBarrier|)} call main(); {301#(bvult (_ bv0 32) |#StackHeapBarrier|)} is VALID [2020-07-29 01:01:23,950 INFO L263 TraceCheckUtils]: 5: Hoare triple {301#(bvult (_ bv0 32) |#StackHeapBarrier|)} call entry_point(); {301#(bvult (_ bv0 32) |#StackHeapBarrier|)} is VALID [2020-07-29 01:01:23,950 INFO L263 TraceCheckUtils]: 6: Hoare triple {301#(bvult (_ bv0 32) |#StackHeapBarrier|)} call #t~ret38.base, #t~ret38.offset := ldv_malloc(4bv32); {301#(bvult (_ bv0 32) |#StackHeapBarrier|)} is VALID [2020-07-29 01:01:23,951 INFO L280 TraceCheckUtils]: 7: Hoare triple {301#(bvult (_ bv0 32) |#StackHeapBarrier|)} ~size := #in~size; {301#(bvult (_ bv0 32) |#StackHeapBarrier|)} is VALID [2020-07-29 01:01:23,952 INFO L280 TraceCheckUtils]: 8: Hoare triple {301#(bvult (_ bv0 32) |#StackHeapBarrier|)} assume 0bv32 != #t~nondet11;havoc #t~nondet11;call #t~malloc12.base, #t~malloc12.offset := #Ultimate.allocOnHeap(~size);#res.base, #res.offset := #t~malloc12.base, #t~malloc12.offset; {323#(and (not (= |ldv_malloc_#res.base| (_ bv0 32))) (bvult |ldv_malloc_#res.base| |#StackHeapBarrier|))} is VALID [2020-07-29 01:01:23,953 INFO L280 TraceCheckUtils]: 9: Hoare triple {323#(and (not (= |ldv_malloc_#res.base| (_ bv0 32))) (bvult |ldv_malloc_#res.base| |#StackHeapBarrier|))} assume true; {323#(and (not (= |ldv_malloc_#res.base| (_ bv0 32))) (bvult |ldv_malloc_#res.base| |#StackHeapBarrier|))} is VALID [2020-07-29 01:01:23,954 INFO L275 TraceCheckUtils]: 10: Hoare quadruple {323#(and (not (= |ldv_malloc_#res.base| (_ bv0 32))) (bvult |ldv_malloc_#res.base| |#StackHeapBarrier|))} {301#(bvult (_ bv0 32) |#StackHeapBarrier|)} #438#return; {330#(and (bvult |entry_point_#t~ret38.base| |#StackHeapBarrier|) (not (= |entry_point_#t~ret38.base| (_ bv0 32))))} is VALID [2020-07-29 01:01:23,956 INFO L280 TraceCheckUtils]: 11: Hoare triple {330#(and (bvult |entry_point_#t~ret38.base| |#StackHeapBarrier|) (not (= |entry_point_#t~ret38.base| (_ bv0 32))))} ~p~0.base, ~p~0.offset := #t~ret38.base, #t~ret38.offset;havoc #t~ret38.base, #t~ret38.offset; {334#(and (bvult entry_point_~p~0.base |#StackHeapBarrier|) (not (= entry_point_~p~0.base (_ bv0 32))))} is VALID [2020-07-29 01:01:23,957 INFO L280 TraceCheckUtils]: 12: Hoare triple {334#(and (bvult entry_point_~p~0.base |#StackHeapBarrier|) (not (= entry_point_~p~0.base (_ bv0 32))))} assume 0bv32 == ~p~0.offset; {334#(and (bvult entry_point_~p~0.base |#StackHeapBarrier|) (not (= entry_point_~p~0.base (_ bv0 32))))} is VALID [2020-07-29 01:01:23,957 INFO L280 TraceCheckUtils]: 13: Hoare triple {334#(and (bvult entry_point_~p~0.base |#StackHeapBarrier|) (not (= entry_point_~p~0.base (_ bv0 32))))} assume !~bvult32(~p~0.base, #StackHeapBarrier); {294#false} is VALID [2020-07-29 01:01:23,959 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-29 01:01:23,959 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2020-07-29 01:01:24,172 INFO L280 TraceCheckUtils]: 13: Hoare triple {341#(bvult entry_point_~p~0.base |#StackHeapBarrier|)} assume !~bvult32(~p~0.base, #StackHeapBarrier); {294#false} is VALID [2020-07-29 01:01:24,173 INFO L280 TraceCheckUtils]: 12: Hoare triple {341#(bvult entry_point_~p~0.base |#StackHeapBarrier|)} assume 0bv32 == ~p~0.offset; {341#(bvult entry_point_~p~0.base |#StackHeapBarrier|)} is VALID [2020-07-29 01:01:24,173 INFO L280 TraceCheckUtils]: 11: Hoare triple {348#(bvult |entry_point_#t~ret38.base| |#StackHeapBarrier|)} ~p~0.base, ~p~0.offset := #t~ret38.base, #t~ret38.offset;havoc #t~ret38.base, #t~ret38.offset; {341#(bvult entry_point_~p~0.base |#StackHeapBarrier|)} is VALID [2020-07-29 01:01:24,175 INFO L275 TraceCheckUtils]: 10: Hoare quadruple {355#(bvult |ldv_malloc_#res.base| |#StackHeapBarrier|)} {293#true} #438#return; {348#(bvult |entry_point_#t~ret38.base| |#StackHeapBarrier|)} is VALID [2020-07-29 01:01:24,176 INFO L280 TraceCheckUtils]: 9: Hoare triple {355#(bvult |ldv_malloc_#res.base| |#StackHeapBarrier|)} assume true; {355#(bvult |ldv_malloc_#res.base| |#StackHeapBarrier|)} is VALID [2020-07-29 01:01:24,177 INFO L280 TraceCheckUtils]: 8: Hoare triple {293#true} assume 0bv32 != #t~nondet11;havoc #t~nondet11;call #t~malloc12.base, #t~malloc12.offset := #Ultimate.allocOnHeap(~size);#res.base, #res.offset := #t~malloc12.base, #t~malloc12.offset; {355#(bvult |ldv_malloc_#res.base| |#StackHeapBarrier|)} is VALID [2020-07-29 01:01:24,178 INFO L280 TraceCheckUtils]: 7: Hoare triple {293#true} ~size := #in~size; {293#true} is VALID [2020-07-29 01:01:24,178 INFO L263 TraceCheckUtils]: 6: Hoare triple {293#true} call #t~ret38.base, #t~ret38.offset := ldv_malloc(4bv32); {293#true} is VALID [2020-07-29 01:01:24,178 INFO L263 TraceCheckUtils]: 5: Hoare triple {293#true} call entry_point(); {293#true} is VALID [2020-07-29 01:01:24,178 INFO L263 TraceCheckUtils]: 4: Hoare triple {293#true} call main(); {293#true} is VALID [2020-07-29 01:01:24,179 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {293#true} {293#true} #448#return; {293#true} is VALID [2020-07-29 01:01:24,179 INFO L280 TraceCheckUtils]: 2: Hoare triple {293#true} assume true; {293#true} is VALID [2020-07-29 01:01:24,180 INFO L280 TraceCheckUtils]: 1: Hoare triple {293#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];assume ~bvult32(0bv32, #StackHeapBarrier);currentRoundingMode := ~roundNearestTiesToEven;call ~#ldv_global_msg_list~0.base, ~#ldv_global_msg_list~0.offset := #Ultimate.allocOnStack(8bv32);call write~init~$Pointer$(~#ldv_global_msg_list~0.base, ~#ldv_global_msg_list~0.offset, ~#ldv_global_msg_list~0.base, ~#ldv_global_msg_list~0.offset, 4bv32);call write~init~$Pointer$(~#ldv_global_msg_list~0.base, ~#ldv_global_msg_list~0.offset, ~#ldv_global_msg_list~0.base, ~bvadd32(4bv32, ~#ldv_global_msg_list~0.offset), 4bv32); {293#true} is VALID [2020-07-29 01:01:24,180 INFO L263 TraceCheckUtils]: 0: Hoare triple {293#true} call ULTIMATE.init(); {293#true} is VALID [2020-07-29 01:01:24,180 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-29 01:01:24,181 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2087936324] [2020-07-29 01:01:24,181 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2020-07-29 01:01:24,181 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 4] imperfect sequences [] total 8 [2020-07-29 01:01:24,182 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [181995409] [2020-07-29 01:01:24,183 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 14 [2020-07-29 01:01:24,184 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-29 01:01:24,184 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states. [2020-07-29 01:01:24,227 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 27 edges. 27 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-29 01:01:24,227 INFO L459 AbstractCegarLoop]: Interpolant automaton has 9 states [2020-07-29 01:01:24,228 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2020-07-29 01:01:24,228 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2020-07-29 01:01:24,228 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=48, Unknown=0, NotChecked=0, Total=72 [2020-07-29 01:01:24,228 INFO L87 Difference]: Start difference. First operand 26 states and 26 transitions. Second operand 9 states. [2020-07-29 01:01:24,694 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-29 01:01:24,695 INFO L93 Difference]: Finished difference Result 35 states and 37 transitions. [2020-07-29 01:01:24,695 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2020-07-29 01:01:24,695 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 14 [2020-07-29 01:01:24,695 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-29 01:01:24,695 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9 states. [2020-07-29 01:01:24,700 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 41 transitions. [2020-07-29 01:01:24,700 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9 states. [2020-07-29 01:01:24,704 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 41 transitions. [2020-07-29 01:01:24,704 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 41 transitions. [2020-07-29 01:01:24,786 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 41 edges. 41 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-29 01:01:24,788 INFO L225 Difference]: With dead ends: 35 [2020-07-29 01:01:24,789 INFO L226 Difference]: Without dead ends: 35 [2020-07-29 01:01:24,790 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 20 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=24, Invalid=48, Unknown=0, NotChecked=0, Total=72 [2020-07-29 01:01:24,790 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 35 states. [2020-07-29 01:01:24,794 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 35 to 24. [2020-07-29 01:01:24,794 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-29 01:01:24,794 INFO L82 GeneralOperation]: Start isEquivalent. First operand 35 states. Second operand 24 states. [2020-07-29 01:01:24,795 INFO L74 IsIncluded]: Start isIncluded. First operand 35 states. Second operand 24 states. [2020-07-29 01:01:24,795 INFO L87 Difference]: Start difference. First operand 35 states. Second operand 24 states. [2020-07-29 01:01:24,798 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-29 01:01:24,799 INFO L93 Difference]: Finished difference Result 35 states and 37 transitions. [2020-07-29 01:01:24,799 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 37 transitions. [2020-07-29 01:01:24,800 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-29 01:01:24,800 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-29 01:01:24,800 INFO L74 IsIncluded]: Start isIncluded. First operand 24 states. Second operand 35 states. [2020-07-29 01:01:24,800 INFO L87 Difference]: Start difference. First operand 24 states. Second operand 35 states. [2020-07-29 01:01:24,804 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-29 01:01:24,804 INFO L93 Difference]: Finished difference Result 35 states and 37 transitions. [2020-07-29 01:01:24,804 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 37 transitions. [2020-07-29 01:01:24,805 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-29 01:01:24,805 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-29 01:01:24,806 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-29 01:01:24,806 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-29 01:01:24,806 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 24 states. [2020-07-29 01:01:24,808 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24 states to 24 states and 24 transitions. [2020-07-29 01:01:24,808 INFO L78 Accepts]: Start accepts. Automaton has 24 states and 24 transitions. Word has length 14 [2020-07-29 01:01:24,809 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-29 01:01:24,809 INFO L479 AbstractCegarLoop]: Abstraction has 24 states and 24 transitions. [2020-07-29 01:01:24,809 INFO L480 AbstractCegarLoop]: Interpolant automaton has 9 states. [2020-07-29 01:01:24,809 INFO L276 IsEmpty]: Start isEmpty. Operand 24 states and 24 transitions. [2020-07-29 01:01:24,810 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2020-07-29 01:01:24,810 INFO L414 BasicCegarLoop]: Found error trace [2020-07-29 01:01:24,810 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-29 01:01:25,026 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 mathsat -unsat_core_generation=3 [2020-07-29 01:01:25,028 INFO L427 AbstractCegarLoop]: === Iteration 3 === [ldv_kref_initErr0REQUIRES_VIOLATION, ldv_kref_initErr1REQUIRES_VIOLATION, ldv_list_addErr1REQUIRES_VIOLATION, ldv_list_addErr0REQUIRES_VIOLATION, ldv_kobject_createErr1REQUIRES_VIOLATION, ldv_kobject_createErr0REQUIRES_VIOLATION, ldv_destroy_msgsErr4REQUIRES_VIOLATION, ldv_destroy_msgsErr3REQUIRES_VIOLATION, ldv_destroy_msgsErr2REQUIRES_VIOLATION, ldv_destroy_msgsErr1REQUIRES_VIOLATION, ldv_destroy_msgsErr0REQUIRES_VIOLATION, ldv_destroy_msgsErr5REQUIRES_VIOLATION, ldv_msg_fillErr1REQUIRES_VIOLATION, ldv_msg_fillErr5REQUIRES_VIOLATION, ldv_msg_fillErr0REQUIRES_VIOLATION, ldv_msg_fillErr4REQUIRES_VIOLATION, ldv_msg_fillErr2REQUIRES_VIOLATION, ldv_msg_fillErr3REQUIRES_VIOLATION, ldv_atomic_add_returnErr1REQUIRES_VIOLATION, ldv_atomic_add_returnErr0REQUIRES_VIOLATION, ldv_atomic_add_returnErr3REQUIRES_VIOLATION, ldv_atomic_add_returnErr2REQUIRES_VIOLATION, __ldv_list_delErr0REQUIRES_VIOLATION, __ldv_list_delErr1REQUIRES_VIOLATION, __ldv_list_delErr2REQUIRES_VIOLATION, __ldv_list_delErr3REQUIRES_VIOLATION, ldv_kobject_cleanupErr2ASSERT_VIOLATIONMEMORY_FREE, ldv_kobject_cleanupErr5ASSERT_VIOLATIONMEMORY_FREE, ldv_kobject_cleanupErr7ASSERT_VIOLATIONMEMORY_FREE, ldv_kobject_cleanupErr6ASSERT_VIOLATIONMEMORY_FREE, ldv_kobject_cleanupErr1REQUIRES_VIOLATION, ldv_kobject_cleanupErr4ASSERT_VIOLATIONMEMORY_FREE, ldv_kobject_cleanupErr0REQUIRES_VIOLATION, ldv_kobject_cleanupErr3ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_freeErr6ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_freeErr7ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_freeErr4ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_freeErr1REQUIRES_VIOLATION, ldv_msg_freeErr0REQUIRES_VIOLATION, ldv_msg_freeErr5ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_freeErr2ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_freeErr3ASSERT_VIOLATIONMEMORY_FREE, mainErr0ENSURES_VIOLATIONMEMORY_LEAK, LDV_INIT_LIST_HEADErr2REQUIRES_VIOLATION, LDV_INIT_LIST_HEADErr3REQUIRES_VIOLATION, LDV_INIT_LIST_HEADErr0REQUIRES_VIOLATION, LDV_INIT_LIST_HEADErr1REQUIRES_VIOLATION, ldv_list_delErr2REQUIRES_VIOLATION, ldv_list_delErr1REQUIRES_VIOLATION, ldv_list_delErr3REQUIRES_VIOLATION, ldv_list_delErr0REQUIRES_VIOLATION, __ldv_list_addErr5REQUIRES_VIOLATION, __ldv_list_addErr0REQUIRES_VIOLATION, __ldv_list_addErr1REQUIRES_VIOLATION, __ldv_list_addErr6REQUIRES_VIOLATION, __ldv_list_addErr7REQUIRES_VIOLATION, __ldv_list_addErr2REQUIRES_VIOLATION, __ldv_list_addErr3REQUIRES_VIOLATION, __ldv_list_addErr4REQUIRES_VIOLATION, ldv_dev_set_drvdataErr0REQUIRES_VIOLATION, ldv_dev_set_drvdataErr1REQUIRES_VIOLATION, ldv_atomic_sub_returnErr1REQUIRES_VIOLATION, ldv_atomic_sub_returnErr0REQUIRES_VIOLATION, ldv_atomic_sub_returnErr3REQUIRES_VIOLATION, ldv_atomic_sub_returnErr2REQUIRES_VIOLATION, ldv_list_add_tailErr0REQUIRES_VIOLATION, ldv_list_add_tailErr1REQUIRES_VIOLATION, ldv_dev_get_drvdataErr1REQUIRES_VIOLATION, ldv_dev_get_drvdataErr0REQUIRES_VIOLATION, entry_pointErr3ASSERT_VIOLATIONMEMORY_FREE, entry_pointErr4ASSERT_VIOLATIONMEMORY_FREE, entry_pointErr5ASSERT_VIOLATIONMEMORY_FREE, entry_pointErr2ASSERT_VIOLATIONMEMORY_FREE, entry_pointErr1ASSERT_VIOLATIONMEMORY_FREE, entry_pointErr0ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_allocErr0REQUIRES_VIOLATION, ldv_msg_allocErr1REQUIRES_VIOLATION]=== [2020-07-29 01:01:25,029 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-29 01:01:25,029 INFO L82 PathProgramCache]: Analyzing trace with hash 2044877028, now seen corresponding path program 1 times [2020-07-29 01:01:25,030 INFO L163 FreeRefinementEngine]: Executing refinement strategy WOLF [2020-07-29 01:01:25,031 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1285743484] [2020-07-29 01:01:25,031 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat Starting monitored process 4 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with mathsat -unsat_core_generation=3 [2020-07-29 01:01:25,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-29 01:01:25,143 INFO L263 TraceCheckSpWp]: Trace formula consists of 67 conjuncts, 5 conjunts are in the unsatisfiable core [2020-07-29 01:01:25,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-29 01:01:25,160 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-29 01:01:25,231 INFO L384 Elim1Store]: Elim1 did not use preprocessing eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2020-07-29 01:01:25,232 INFO L544 ElimStorePlain]: Start of recursive call 2: End of recursive call: and 1 xjuncts. [2020-07-29 01:01:25,239 INFO L624 ElimStorePlain]: treesize reduction 0, result has 100.0 percent of original size [2020-07-29 01:01:25,239 INFO L544 ElimStorePlain]: Start of recursive call 1: 1 dim-1 vars, End of recursive call: and 1 xjuncts. [2020-07-29 01:01:25,240 INFO L244 ElimStorePlain]: Needed 2 recursive calls to eliminate 1 variables, input treesize:6, output treesize:5 [2020-07-29 01:01:25,243 WARN L406 uantifierElimination]: Trying to double check SDD result, but SMT solver's response was UNKNOWN. [2020-07-29 01:01:25,244 WARN L407 uantifierElimination]: Input elimination task: ∃ [|v_#valid_129|]. (= |#valid| (store |v_#valid_129| |ldv_malloc_#res.base| (_ bv1 1))) [2020-07-29 01:01:25,244 WARN L408 uantifierElimination]: ElimStorePlain result: ∃ []. (= (select |#valid| |ldv_malloc_#res.base|) (_ bv1 1)) [2020-07-29 01:01:25,294 INFO L263 TraceCheckUtils]: 0: Hoare triple {514#true} call ULTIMATE.init(); {514#true} is VALID [2020-07-29 01:01:25,294 INFO L280 TraceCheckUtils]: 1: Hoare triple {514#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];assume ~bvult32(0bv32, #StackHeapBarrier);currentRoundingMode := ~roundNearestTiesToEven;call ~#ldv_global_msg_list~0.base, ~#ldv_global_msg_list~0.offset := #Ultimate.allocOnStack(8bv32);call write~init~$Pointer$(~#ldv_global_msg_list~0.base, ~#ldv_global_msg_list~0.offset, ~#ldv_global_msg_list~0.base, ~#ldv_global_msg_list~0.offset, 4bv32);call write~init~$Pointer$(~#ldv_global_msg_list~0.base, ~#ldv_global_msg_list~0.offset, ~#ldv_global_msg_list~0.base, ~bvadd32(4bv32, ~#ldv_global_msg_list~0.offset), 4bv32); {514#true} is VALID [2020-07-29 01:01:25,295 INFO L280 TraceCheckUtils]: 2: Hoare triple {514#true} assume true; {514#true} is VALID [2020-07-29 01:01:25,295 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {514#true} {514#true} #448#return; {514#true} is VALID [2020-07-29 01:01:25,295 INFO L263 TraceCheckUtils]: 4: Hoare triple {514#true} call main(); {514#true} is VALID [2020-07-29 01:01:25,296 INFO L263 TraceCheckUtils]: 5: Hoare triple {514#true} call entry_point(); {514#true} is VALID [2020-07-29 01:01:25,297 INFO L263 TraceCheckUtils]: 6: Hoare triple {514#true} call #t~ret38.base, #t~ret38.offset := ldv_malloc(4bv32); {514#true} is VALID [2020-07-29 01:01:25,297 INFO L280 TraceCheckUtils]: 7: Hoare triple {514#true} ~size := #in~size; {514#true} is VALID [2020-07-29 01:01:25,302 INFO L280 TraceCheckUtils]: 8: Hoare triple {514#true} assume 0bv32 != #t~nondet11;havoc #t~nondet11;call #t~malloc12.base, #t~malloc12.offset := #Ultimate.allocOnHeap(~size);#res.base, #res.offset := #t~malloc12.base, #t~malloc12.offset; {543#(= (bvadd (select |#valid| |ldv_malloc_#res.base|) (_ bv1 1)) (_ bv0 1))} is VALID [2020-07-29 01:01:25,306 INFO L280 TraceCheckUtils]: 9: Hoare triple {543#(= (bvadd (select |#valid| |ldv_malloc_#res.base|) (_ bv1 1)) (_ bv0 1))} assume true; {543#(= (bvadd (select |#valid| |ldv_malloc_#res.base|) (_ bv1 1)) (_ bv0 1))} is VALID [2020-07-29 01:01:25,309 INFO L275 TraceCheckUtils]: 10: Hoare quadruple {543#(= (bvadd (select |#valid| |ldv_malloc_#res.base|) (_ bv1 1)) (_ bv0 1))} {514#true} #438#return; {550#(= (bvadd (select |#valid| |entry_point_#t~ret38.base|) (_ bv1 1)) (_ bv0 1))} is VALID [2020-07-29 01:01:25,311 INFO L280 TraceCheckUtils]: 11: Hoare triple {550#(= (bvadd (select |#valid| |entry_point_#t~ret38.base|) (_ bv1 1)) (_ bv0 1))} ~p~0.base, ~p~0.offset := #t~ret38.base, #t~ret38.offset;havoc #t~ret38.base, #t~ret38.offset; {554#(= (bvadd (select |#valid| entry_point_~p~0.base) (_ bv1 1)) (_ bv0 1))} is VALID [2020-07-29 01:01:25,312 INFO L280 TraceCheckUtils]: 12: Hoare triple {554#(= (bvadd (select |#valid| entry_point_~p~0.base) (_ bv1 1)) (_ bv0 1))} assume 0bv32 == ~p~0.offset; {554#(= (bvadd (select |#valid| entry_point_~p~0.base) (_ bv1 1)) (_ bv0 1))} is VALID [2020-07-29 01:01:25,313 INFO L280 TraceCheckUtils]: 13: Hoare triple {554#(= (bvadd (select |#valid| entry_point_~p~0.base) (_ bv1 1)) (_ bv0 1))} assume ~bvult32(~p~0.base, #StackHeapBarrier); {554#(= (bvadd (select |#valid| entry_point_~p~0.base) (_ bv1 1)) (_ bv0 1))} is VALID [2020-07-29 01:01:25,314 INFO L280 TraceCheckUtils]: 14: Hoare triple {554#(= (bvadd (select |#valid| entry_point_~p~0.base) (_ bv1 1)) (_ bv0 1))} assume !(0bv32 == ~p~0.base || 1bv1 == #valid[~p~0.base]); {515#false} is VALID [2020-07-29 01:01:25,315 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-29 01:01:25,315 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2020-07-29 01:01:25,398 INFO L280 TraceCheckUtils]: 14: Hoare triple {554#(= (bvadd (select |#valid| entry_point_~p~0.base) (_ bv1 1)) (_ bv0 1))} assume !(0bv32 == ~p~0.base || 1bv1 == #valid[~p~0.base]); {515#false} is VALID [2020-07-29 01:01:25,399 INFO L280 TraceCheckUtils]: 13: Hoare triple {554#(= (bvadd (select |#valid| entry_point_~p~0.base) (_ bv1 1)) (_ bv0 1))} assume ~bvult32(~p~0.base, #StackHeapBarrier); {554#(= (bvadd (select |#valid| entry_point_~p~0.base) (_ bv1 1)) (_ bv0 1))} is VALID [2020-07-29 01:01:25,400 INFO L280 TraceCheckUtils]: 12: Hoare triple {554#(= (bvadd (select |#valid| entry_point_~p~0.base) (_ bv1 1)) (_ bv0 1))} assume 0bv32 == ~p~0.offset; {554#(= (bvadd (select |#valid| entry_point_~p~0.base) (_ bv1 1)) (_ bv0 1))} is VALID [2020-07-29 01:01:25,401 INFO L280 TraceCheckUtils]: 11: Hoare triple {550#(= (bvadd (select |#valid| |entry_point_#t~ret38.base|) (_ bv1 1)) (_ bv0 1))} ~p~0.base, ~p~0.offset := #t~ret38.base, #t~ret38.offset;havoc #t~ret38.base, #t~ret38.offset; {554#(= (bvadd (select |#valid| entry_point_~p~0.base) (_ bv1 1)) (_ bv0 1))} is VALID [2020-07-29 01:01:25,402 INFO L275 TraceCheckUtils]: 10: Hoare quadruple {543#(= (bvadd (select |#valid| |ldv_malloc_#res.base|) (_ bv1 1)) (_ bv0 1))} {514#true} #438#return; {550#(= (bvadd (select |#valid| |entry_point_#t~ret38.base|) (_ bv1 1)) (_ bv0 1))} is VALID [2020-07-29 01:01:25,403 INFO L280 TraceCheckUtils]: 9: Hoare triple {543#(= (bvadd (select |#valid| |ldv_malloc_#res.base|) (_ bv1 1)) (_ bv0 1))} assume true; {543#(= (bvadd (select |#valid| |ldv_malloc_#res.base|) (_ bv1 1)) (_ bv0 1))} is VALID [2020-07-29 01:01:25,405 INFO L280 TraceCheckUtils]: 8: Hoare triple {514#true} assume 0bv32 != #t~nondet11;havoc #t~nondet11;call #t~malloc12.base, #t~malloc12.offset := #Ultimate.allocOnHeap(~size);#res.base, #res.offset := #t~malloc12.base, #t~malloc12.offset; {543#(= (bvadd (select |#valid| |ldv_malloc_#res.base|) (_ bv1 1)) (_ bv0 1))} is VALID [2020-07-29 01:01:25,405 INFO L280 TraceCheckUtils]: 7: Hoare triple {514#true} ~size := #in~size; {514#true} is VALID [2020-07-29 01:01:25,406 INFO L263 TraceCheckUtils]: 6: Hoare triple {514#true} call #t~ret38.base, #t~ret38.offset := ldv_malloc(4bv32); {514#true} is VALID [2020-07-29 01:01:25,406 INFO L263 TraceCheckUtils]: 5: Hoare triple {514#true} call entry_point(); {514#true} is VALID [2020-07-29 01:01:25,406 INFO L263 TraceCheckUtils]: 4: Hoare triple {514#true} call main(); {514#true} is VALID [2020-07-29 01:01:25,406 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {514#true} {514#true} #448#return; {514#true} is VALID [2020-07-29 01:01:25,407 INFO L280 TraceCheckUtils]: 2: Hoare triple {514#true} assume true; {514#true} is VALID [2020-07-29 01:01:25,407 INFO L280 TraceCheckUtils]: 1: Hoare triple {514#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];assume ~bvult32(0bv32, #StackHeapBarrier);currentRoundingMode := ~roundNearestTiesToEven;call ~#ldv_global_msg_list~0.base, ~#ldv_global_msg_list~0.offset := #Ultimate.allocOnStack(8bv32);call write~init~$Pointer$(~#ldv_global_msg_list~0.base, ~#ldv_global_msg_list~0.offset, ~#ldv_global_msg_list~0.base, ~#ldv_global_msg_list~0.offset, 4bv32);call write~init~$Pointer$(~#ldv_global_msg_list~0.base, ~#ldv_global_msg_list~0.offset, ~#ldv_global_msg_list~0.base, ~bvadd32(4bv32, ~#ldv_global_msg_list~0.offset), 4bv32); {514#true} is VALID [2020-07-29 01:01:25,407 INFO L263 TraceCheckUtils]: 0: Hoare triple {514#true} call ULTIMATE.init(); {514#true} is VALID [2020-07-29 01:01:25,408 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-29 01:01:25,408 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1285743484] [2020-07-29 01:01:25,409 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2020-07-29 01:01:25,409 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4, 4] imperfect sequences [] total 4 [2020-07-29 01:01:25,409 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2109747833] [2020-07-29 01:01:25,409 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 15 [2020-07-29 01:01:25,410 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-29 01:01:25,410 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-29 01:01:25,431 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 15 edges. 15 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-29 01:01:25,431 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-29 01:01:25,431 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2020-07-29 01:01:25,432 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-29 01:01:25,432 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-29 01:01:25,432 INFO L87 Difference]: Start difference. First operand 24 states and 24 transitions. Second operand 5 states. [2020-07-29 01:01:25,580 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-29 01:01:25,581 INFO L93 Difference]: Finished difference Result 30 states and 30 transitions. [2020-07-29 01:01:25,581 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-29 01:01:25,581 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 15 [2020-07-29 01:01:25,581 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-29 01:01:25,582 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-29 01:01:25,584 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 31 transitions. [2020-07-29 01:01:25,584 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-29 01:01:25,586 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 31 transitions. [2020-07-29 01:01:25,586 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 31 transitions. [2020-07-29 01:01:25,642 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 31 edges. 31 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-29 01:01:25,644 INFO L225 Difference]: With dead ends: 30 [2020-07-29 01:01:25,645 INFO L226 Difference]: Without dead ends: 30 [2020-07-29 01:01:25,645 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 25 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-29 01:01:25,646 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 30 states. [2020-07-29 01:01:25,649 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 30 to 30. [2020-07-29 01:01:25,649 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-29 01:01:25,649 INFO L82 GeneralOperation]: Start isEquivalent. First operand 30 states. Second operand 30 states. [2020-07-29 01:01:25,649 INFO L74 IsIncluded]: Start isIncluded. First operand 30 states. Second operand 30 states. [2020-07-29 01:01:25,649 INFO L87 Difference]: Start difference. First operand 30 states. Second operand 30 states. [2020-07-29 01:01:25,652 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-29 01:01:25,652 INFO L93 Difference]: Finished difference Result 30 states and 30 transitions. [2020-07-29 01:01:25,653 INFO L276 IsEmpty]: Start isEmpty. Operand 30 states and 30 transitions. [2020-07-29 01:01:25,653 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-29 01:01:25,653 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-29 01:01:25,653 INFO L74 IsIncluded]: Start isIncluded. First operand 30 states. Second operand 30 states. [2020-07-29 01:01:25,654 INFO L87 Difference]: Start difference. First operand 30 states. Second operand 30 states. [2020-07-29 01:01:25,656 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-29 01:01:25,657 INFO L93 Difference]: Finished difference Result 30 states and 30 transitions. [2020-07-29 01:01:25,657 INFO L276 IsEmpty]: Start isEmpty. Operand 30 states and 30 transitions. [2020-07-29 01:01:25,657 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-29 01:01:25,657 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-29 01:01:25,658 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-29 01:01:25,658 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-29 01:01:25,658 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 30 states. [2020-07-29 01:01:25,660 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30 states to 30 states and 30 transitions. [2020-07-29 01:01:25,660 INFO L78 Accepts]: Start accepts. Automaton has 30 states and 30 transitions. Word has length 15 [2020-07-29 01:01:25,660 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-29 01:01:25,660 INFO L479 AbstractCegarLoop]: Abstraction has 30 states and 30 transitions. [2020-07-29 01:01:25,661 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-29 01:01:25,661 INFO L276 IsEmpty]: Start isEmpty. Operand 30 states and 30 transitions. [2020-07-29 01:01:25,661 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2020-07-29 01:01:25,661 INFO L414 BasicCegarLoop]: Found error trace [2020-07-29 01:01:25,662 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-29 01:01:25,866 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 mathsat -unsat_core_generation=3 [2020-07-29 01:01:25,866 INFO L427 AbstractCegarLoop]: === Iteration 4 === [ldv_kref_initErr0REQUIRES_VIOLATION, ldv_kref_initErr1REQUIRES_VIOLATION, ldv_list_addErr1REQUIRES_VIOLATION, ldv_list_addErr0REQUIRES_VIOLATION, ldv_kobject_createErr1REQUIRES_VIOLATION, ldv_kobject_createErr0REQUIRES_VIOLATION, ldv_destroy_msgsErr4REQUIRES_VIOLATION, ldv_destroy_msgsErr3REQUIRES_VIOLATION, ldv_destroy_msgsErr2REQUIRES_VIOLATION, ldv_destroy_msgsErr1REQUIRES_VIOLATION, ldv_destroy_msgsErr0REQUIRES_VIOLATION, ldv_destroy_msgsErr5REQUIRES_VIOLATION, ldv_msg_fillErr1REQUIRES_VIOLATION, ldv_msg_fillErr5REQUIRES_VIOLATION, ldv_msg_fillErr0REQUIRES_VIOLATION, ldv_msg_fillErr4REQUIRES_VIOLATION, ldv_msg_fillErr2REQUIRES_VIOLATION, ldv_msg_fillErr3REQUIRES_VIOLATION, ldv_atomic_add_returnErr1REQUIRES_VIOLATION, ldv_atomic_add_returnErr0REQUIRES_VIOLATION, ldv_atomic_add_returnErr3REQUIRES_VIOLATION, ldv_atomic_add_returnErr2REQUIRES_VIOLATION, __ldv_list_delErr0REQUIRES_VIOLATION, __ldv_list_delErr1REQUIRES_VIOLATION, __ldv_list_delErr2REQUIRES_VIOLATION, __ldv_list_delErr3REQUIRES_VIOLATION, ldv_kobject_cleanupErr2ASSERT_VIOLATIONMEMORY_FREE, ldv_kobject_cleanupErr5ASSERT_VIOLATIONMEMORY_FREE, ldv_kobject_cleanupErr7ASSERT_VIOLATIONMEMORY_FREE, ldv_kobject_cleanupErr6ASSERT_VIOLATIONMEMORY_FREE, ldv_kobject_cleanupErr1REQUIRES_VIOLATION, ldv_kobject_cleanupErr4ASSERT_VIOLATIONMEMORY_FREE, ldv_kobject_cleanupErr0REQUIRES_VIOLATION, ldv_kobject_cleanupErr3ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_freeErr6ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_freeErr7ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_freeErr4ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_freeErr1REQUIRES_VIOLATION, ldv_msg_freeErr0REQUIRES_VIOLATION, ldv_msg_freeErr5ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_freeErr2ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_freeErr3ASSERT_VIOLATIONMEMORY_FREE, mainErr0ENSURES_VIOLATIONMEMORY_LEAK, LDV_INIT_LIST_HEADErr2REQUIRES_VIOLATION, LDV_INIT_LIST_HEADErr3REQUIRES_VIOLATION, LDV_INIT_LIST_HEADErr0REQUIRES_VIOLATION, LDV_INIT_LIST_HEADErr1REQUIRES_VIOLATION, ldv_list_delErr2REQUIRES_VIOLATION, ldv_list_delErr1REQUIRES_VIOLATION, ldv_list_delErr3REQUIRES_VIOLATION, ldv_list_delErr0REQUIRES_VIOLATION, __ldv_list_addErr5REQUIRES_VIOLATION, __ldv_list_addErr0REQUIRES_VIOLATION, __ldv_list_addErr1REQUIRES_VIOLATION, __ldv_list_addErr6REQUIRES_VIOLATION, __ldv_list_addErr7REQUIRES_VIOLATION, __ldv_list_addErr2REQUIRES_VIOLATION, __ldv_list_addErr3REQUIRES_VIOLATION, __ldv_list_addErr4REQUIRES_VIOLATION, ldv_dev_set_drvdataErr0REQUIRES_VIOLATION, ldv_dev_set_drvdataErr1REQUIRES_VIOLATION, ldv_atomic_sub_returnErr1REQUIRES_VIOLATION, ldv_atomic_sub_returnErr0REQUIRES_VIOLATION, ldv_atomic_sub_returnErr3REQUIRES_VIOLATION, ldv_atomic_sub_returnErr2REQUIRES_VIOLATION, ldv_list_add_tailErr0REQUIRES_VIOLATION, ldv_list_add_tailErr1REQUIRES_VIOLATION, ldv_dev_get_drvdataErr1REQUIRES_VIOLATION, ldv_dev_get_drvdataErr0REQUIRES_VIOLATION, entry_pointErr3ASSERT_VIOLATIONMEMORY_FREE, entry_pointErr4ASSERT_VIOLATIONMEMORY_FREE, entry_pointErr5ASSERT_VIOLATIONMEMORY_FREE, entry_pointErr2ASSERT_VIOLATIONMEMORY_FREE, entry_pointErr1ASSERT_VIOLATIONMEMORY_FREE, entry_pointErr0ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_allocErr0REQUIRES_VIOLATION, ldv_msg_allocErr1REQUIRES_VIOLATION]=== [2020-07-29 01:01:25,867 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-29 01:01:25,867 INFO L82 PathProgramCache]: Analyzing trace with hash -1362586587, now seen corresponding path program 1 times [2020-07-29 01:01:25,868 INFO L163 FreeRefinementEngine]: Executing refinement strategy WOLF [2020-07-29 01:01:25,869 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [43423287] [2020-07-29 01:01:25,869 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat Starting monitored process 5 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with mathsat -unsat_core_generation=3 [2020-07-29 01:01:25,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-29 01:01:25,991 INFO L263 TraceCheckSpWp]: Trace formula consists of 61 conjuncts, 4 conjunts are in the unsatisfiable core [2020-07-29 01:01:26,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-29 01:01:26,009 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-29 01:01:26,048 INFO L263 TraceCheckUtils]: 0: Hoare triple {728#true} call ULTIMATE.init(); {728#true} is VALID [2020-07-29 01:01:26,049 INFO L280 TraceCheckUtils]: 1: Hoare triple {728#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];assume ~bvult32(0bv32, #StackHeapBarrier);currentRoundingMode := ~roundNearestTiesToEven;call ~#ldv_global_msg_list~0.base, ~#ldv_global_msg_list~0.offset := #Ultimate.allocOnStack(8bv32);call write~init~$Pointer$(~#ldv_global_msg_list~0.base, ~#ldv_global_msg_list~0.offset, ~#ldv_global_msg_list~0.base, ~#ldv_global_msg_list~0.offset, 4bv32);call write~init~$Pointer$(~#ldv_global_msg_list~0.base, ~#ldv_global_msg_list~0.offset, ~#ldv_global_msg_list~0.base, ~bvadd32(4bv32, ~#ldv_global_msg_list~0.offset), 4bv32); {728#true} is VALID [2020-07-29 01:01:26,049 INFO L280 TraceCheckUtils]: 2: Hoare triple {728#true} assume true; {728#true} is VALID [2020-07-29 01:01:26,050 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {728#true} {728#true} #448#return; {728#true} is VALID [2020-07-29 01:01:26,050 INFO L263 TraceCheckUtils]: 4: Hoare triple {728#true} call main(); {728#true} is VALID [2020-07-29 01:01:26,050 INFO L263 TraceCheckUtils]: 5: Hoare triple {728#true} call entry_point(); {728#true} is VALID [2020-07-29 01:01:26,050 INFO L263 TraceCheckUtils]: 6: Hoare triple {728#true} call #t~ret38.base, #t~ret38.offset := ldv_malloc(4bv32); {728#true} is VALID [2020-07-29 01:01:26,050 INFO L280 TraceCheckUtils]: 7: Hoare triple {728#true} ~size := #in~size; {728#true} is VALID [2020-07-29 01:01:26,052 INFO L280 TraceCheckUtils]: 8: Hoare triple {728#true} assume !(0bv32 != #t~nondet11);havoc #t~nondet11;#res.base, #res.offset := 0bv32, 0bv32; {757#(= |ldv_malloc_#res.base| (_ bv0 32))} is VALID [2020-07-29 01:01:26,052 INFO L280 TraceCheckUtils]: 9: Hoare triple {757#(= |ldv_malloc_#res.base| (_ bv0 32))} assume true; {757#(= |ldv_malloc_#res.base| (_ bv0 32))} is VALID [2020-07-29 01:01:26,054 INFO L275 TraceCheckUtils]: 10: Hoare quadruple {757#(= |ldv_malloc_#res.base| (_ bv0 32))} {728#true} #438#return; {764#(= |entry_point_#t~ret38.base| (_ bv0 32))} is VALID [2020-07-29 01:01:26,055 INFO L280 TraceCheckUtils]: 11: Hoare triple {764#(= |entry_point_#t~ret38.base| (_ bv0 32))} ~p~0.base, ~p~0.offset := #t~ret38.base, #t~ret38.offset;havoc #t~ret38.base, #t~ret38.offset; {768#(= entry_point_~p~0.base (_ bv0 32))} is VALID [2020-07-29 01:01:26,056 INFO L280 TraceCheckUtils]: 12: Hoare triple {768#(= entry_point_~p~0.base (_ bv0 32))} assume 0bv32 == ~p~0.offset; {768#(= entry_point_~p~0.base (_ bv0 32))} is VALID [2020-07-29 01:01:26,056 INFO L280 TraceCheckUtils]: 13: Hoare triple {768#(= entry_point_~p~0.base (_ bv0 32))} assume ~bvult32(~p~0.base, #StackHeapBarrier); {768#(= entry_point_~p~0.base (_ bv0 32))} is VALID [2020-07-29 01:01:26,057 INFO L280 TraceCheckUtils]: 14: Hoare triple {768#(= entry_point_~p~0.base (_ bv0 32))} assume !(0bv32 == ~p~0.base || 1bv1 == #valid[~p~0.base]); {729#false} is VALID [2020-07-29 01:01:26,058 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-29 01:01:26,058 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2020-07-29 01:01:26,118 INFO L280 TraceCheckUtils]: 14: Hoare triple {768#(= entry_point_~p~0.base (_ bv0 32))} assume !(0bv32 == ~p~0.base || 1bv1 == #valid[~p~0.base]); {729#false} is VALID [2020-07-29 01:01:26,119 INFO L280 TraceCheckUtils]: 13: Hoare triple {768#(= entry_point_~p~0.base (_ bv0 32))} assume ~bvult32(~p~0.base, #StackHeapBarrier); {768#(= entry_point_~p~0.base (_ bv0 32))} is VALID [2020-07-29 01:01:26,120 INFO L280 TraceCheckUtils]: 12: Hoare triple {768#(= entry_point_~p~0.base (_ bv0 32))} assume 0bv32 == ~p~0.offset; {768#(= entry_point_~p~0.base (_ bv0 32))} is VALID [2020-07-29 01:01:26,121 INFO L280 TraceCheckUtils]: 11: Hoare triple {764#(= |entry_point_#t~ret38.base| (_ bv0 32))} ~p~0.base, ~p~0.offset := #t~ret38.base, #t~ret38.offset;havoc #t~ret38.base, #t~ret38.offset; {768#(= entry_point_~p~0.base (_ bv0 32))} is VALID [2020-07-29 01:01:26,122 INFO L275 TraceCheckUtils]: 10: Hoare quadruple {757#(= |ldv_malloc_#res.base| (_ bv0 32))} {728#true} #438#return; {764#(= |entry_point_#t~ret38.base| (_ bv0 32))} is VALID [2020-07-29 01:01:26,123 INFO L280 TraceCheckUtils]: 9: Hoare triple {757#(= |ldv_malloc_#res.base| (_ bv0 32))} assume true; {757#(= |ldv_malloc_#res.base| (_ bv0 32))} is VALID [2020-07-29 01:01:26,124 INFO L280 TraceCheckUtils]: 8: Hoare triple {728#true} assume !(0bv32 != #t~nondet11);havoc #t~nondet11;#res.base, #res.offset := 0bv32, 0bv32; {757#(= |ldv_malloc_#res.base| (_ bv0 32))} is VALID [2020-07-29 01:01:26,124 INFO L280 TraceCheckUtils]: 7: Hoare triple {728#true} ~size := #in~size; {728#true} is VALID [2020-07-29 01:01:26,124 INFO L263 TraceCheckUtils]: 6: Hoare triple {728#true} call #t~ret38.base, #t~ret38.offset := ldv_malloc(4bv32); {728#true} is VALID [2020-07-29 01:01:26,125 INFO L263 TraceCheckUtils]: 5: Hoare triple {728#true} call entry_point(); {728#true} is VALID [2020-07-29 01:01:26,125 INFO L263 TraceCheckUtils]: 4: Hoare triple {728#true} call main(); {728#true} is VALID [2020-07-29 01:01:26,125 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {728#true} {728#true} #448#return; {728#true} is VALID [2020-07-29 01:01:26,126 INFO L280 TraceCheckUtils]: 2: Hoare triple {728#true} assume true; {728#true} is VALID [2020-07-29 01:01:26,126 INFO L280 TraceCheckUtils]: 1: Hoare triple {728#true} #NULL.base, #NULL.offset := 0bv32, 0bv32;#valid := #valid[0bv32 := 0bv1];assume ~bvult32(0bv32, #StackHeapBarrier);currentRoundingMode := ~roundNearestTiesToEven;call ~#ldv_global_msg_list~0.base, ~#ldv_global_msg_list~0.offset := #Ultimate.allocOnStack(8bv32);call write~init~$Pointer$(~#ldv_global_msg_list~0.base, ~#ldv_global_msg_list~0.offset, ~#ldv_global_msg_list~0.base, ~#ldv_global_msg_list~0.offset, 4bv32);call write~init~$Pointer$(~#ldv_global_msg_list~0.base, ~#ldv_global_msg_list~0.offset, ~#ldv_global_msg_list~0.base, ~bvadd32(4bv32, ~#ldv_global_msg_list~0.offset), 4bv32); {728#true} is VALID [2020-07-29 01:01:26,126 INFO L263 TraceCheckUtils]: 0: Hoare triple {728#true} call ULTIMATE.init(); {728#true} is VALID [2020-07-29 01:01:26,127 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-29 01:01:26,127 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [43423287] [2020-07-29 01:01:26,127 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2020-07-29 01:01:26,128 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4, 4] imperfect sequences [] total 4 [2020-07-29 01:01:26,128 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [168082026] [2020-07-29 01:01:26,129 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 15 [2020-07-29 01:01:26,129 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-29 01:01:26,129 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-29 01:01:26,152 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 15 edges. 15 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-29 01:01:26,152 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-29 01:01:26,153 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2020-07-29 01:01:26,153 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-29 01:01:26,153 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-29 01:01:26,153 INFO L87 Difference]: Start difference. First operand 30 states and 30 transitions. Second operand 5 states. [2020-07-29 01:01:26,327 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-29 01:01:26,327 INFO L93 Difference]: Finished difference Result 34 states and 34 transitions. [2020-07-29 01:01:26,328 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-29 01:01:26,328 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 15 [2020-07-29 01:01:26,328 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-29 01:01:26,328 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-29 01:01:26,331 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 36 transitions. [2020-07-29 01:01:26,331 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-29 01:01:26,333 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 36 transitions. [2020-07-29 01:01:26,333 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 36 transitions. [2020-07-29 01:01:26,397 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 36 edges. 36 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-29 01:01:26,401 INFO L225 Difference]: With dead ends: 34 [2020-07-29 01:01:26,401 INFO L226 Difference]: Without dead ends: 34 [2020-07-29 01:01:26,401 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 26 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-29 01:01:26,402 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34 states. [2020-07-29 01:01:26,408 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34 to 32. [2020-07-29 01:01:26,409 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-29 01:01:26,409 INFO L82 GeneralOperation]: Start isEquivalent. First operand 34 states. Second operand 32 states. [2020-07-29 01:01:26,409 INFO L74 IsIncluded]: Start isIncluded. First operand 34 states. Second operand 32 states. [2020-07-29 01:01:26,409 INFO L87 Difference]: Start difference. First operand 34 states. Second operand 32 states. [2020-07-29 01:01:26,414 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-29 01:01:26,414 INFO L93 Difference]: Finished difference Result 34 states and 34 transitions. [2020-07-29 01:01:26,414 INFO L276 IsEmpty]: Start isEmpty. Operand 34 states and 34 transitions. [2020-07-29 01:01:26,417 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-29 01:01:26,417 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-29 01:01:26,417 INFO L74 IsIncluded]: Start isIncluded. First operand 32 states. Second operand 34 states. [2020-07-29 01:01:26,417 INFO L87 Difference]: Start difference. First operand 32 states. Second operand 34 states. [2020-07-29 01:01:26,422 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-29 01:01:26,423 INFO L93 Difference]: Finished difference Result 34 states and 34 transitions. [2020-07-29 01:01:26,423 INFO L276 IsEmpty]: Start isEmpty. Operand 34 states and 34 transitions. [2020-07-29 01:01:26,425 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-29 01:01:26,426 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-29 01:01:26,426 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-29 01:01:26,426 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-29 01:01:26,426 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 32 states. [2020-07-29 01:01:26,436 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32 states to 32 states and 32 transitions. [2020-07-29 01:01:26,437 INFO L78 Accepts]: Start accepts. Automaton has 32 states and 32 transitions. Word has length 15 [2020-07-29 01:01:26,437 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-29 01:01:26,437 INFO L479 AbstractCegarLoop]: Abstraction has 32 states and 32 transitions. [2020-07-29 01:01:26,437 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-29 01:01:26,437 INFO L276 IsEmpty]: Start isEmpty. Operand 32 states and 32 transitions. [2020-07-29 01:01:26,438 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2020-07-29 01:01:26,438 INFO L414 BasicCegarLoop]: Found error trace [2020-07-29 01:01:26,438 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-29 01:01:26,663 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 mathsat -unsat_core_generation=3 [2020-07-29 01:01:26,665 INFO L427 AbstractCegarLoop]: === Iteration 5 === [ldv_kref_initErr0REQUIRES_VIOLATION, ldv_kref_initErr1REQUIRES_VIOLATION, ldv_list_addErr1REQUIRES_VIOLATION, ldv_list_addErr0REQUIRES_VIOLATION, ldv_kobject_createErr1REQUIRES_VIOLATION, ldv_kobject_createErr0REQUIRES_VIOLATION, ldv_destroy_msgsErr4REQUIRES_VIOLATION, ldv_destroy_msgsErr3REQUIRES_VIOLATION, ldv_destroy_msgsErr2REQUIRES_VIOLATION, ldv_destroy_msgsErr1REQUIRES_VIOLATION, ldv_destroy_msgsErr0REQUIRES_VIOLATION, ldv_destroy_msgsErr5REQUIRES_VIOLATION, ldv_msg_fillErr1REQUIRES_VIOLATION, ldv_msg_fillErr5REQUIRES_VIOLATION, ldv_msg_fillErr0REQUIRES_VIOLATION, ldv_msg_fillErr4REQUIRES_VIOLATION, ldv_msg_fillErr2REQUIRES_VIOLATION, ldv_msg_fillErr3REQUIRES_VIOLATION, ldv_atomic_add_returnErr1REQUIRES_VIOLATION, ldv_atomic_add_returnErr0REQUIRES_VIOLATION, ldv_atomic_add_returnErr3REQUIRES_VIOLATION, ldv_atomic_add_returnErr2REQUIRES_VIOLATION, __ldv_list_delErr0REQUIRES_VIOLATION, __ldv_list_delErr1REQUIRES_VIOLATION, __ldv_list_delErr2REQUIRES_VIOLATION, __ldv_list_delErr3REQUIRES_VIOLATION, ldv_kobject_cleanupErr2ASSERT_VIOLATIONMEMORY_FREE, ldv_kobject_cleanupErr5ASSERT_VIOLATIONMEMORY_FREE, ldv_kobject_cleanupErr7ASSERT_VIOLATIONMEMORY_FREE, ldv_kobject_cleanupErr6ASSERT_VIOLATIONMEMORY_FREE, ldv_kobject_cleanupErr1REQUIRES_VIOLATION, ldv_kobject_cleanupErr4ASSERT_VIOLATIONMEMORY_FREE, ldv_kobject_cleanupErr0REQUIRES_VIOLATION, ldv_kobject_cleanupErr3ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_freeErr6ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_freeErr7ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_freeErr4ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_freeErr1REQUIRES_VIOLATION, ldv_msg_freeErr0REQUIRES_VIOLATION, ldv_msg_freeErr5ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_freeErr2ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_freeErr3ASSERT_VIOLATIONMEMORY_FREE, mainErr0ENSURES_VIOLATIONMEMORY_LEAK, LDV_INIT_LIST_HEADErr2REQUIRES_VIOLATION, LDV_INIT_LIST_HEADErr3REQUIRES_VIOLATION, LDV_INIT_LIST_HEADErr0REQUIRES_VIOLATION, LDV_INIT_LIST_HEADErr1REQUIRES_VIOLATION, ldv_list_delErr2REQUIRES_VIOLATION, ldv_list_delErr1REQUIRES_VIOLATION, ldv_list_delErr3REQUIRES_VIOLATION, ldv_list_delErr0REQUIRES_VIOLATION, __ldv_list_addErr5REQUIRES_VIOLATION, __ldv_list_addErr0REQUIRES_VIOLATION, __ldv_list_addErr1REQUIRES_VIOLATION, __ldv_list_addErr6REQUIRES_VIOLATION, __ldv_list_addErr7REQUIRES_VIOLATION, __ldv_list_addErr2REQUIRES_VIOLATION, __ldv_list_addErr3REQUIRES_VIOLATION, __ldv_list_addErr4REQUIRES_VIOLATION, ldv_dev_set_drvdataErr0REQUIRES_VIOLATION, ldv_dev_set_drvdataErr1REQUIRES_VIOLATION, ldv_atomic_sub_returnErr1REQUIRES_VIOLATION, ldv_atomic_sub_returnErr0REQUIRES_VIOLATION, ldv_atomic_sub_returnErr3REQUIRES_VIOLATION, ldv_atomic_sub_returnErr2REQUIRES_VIOLATION, ldv_list_add_tailErr0REQUIRES_VIOLATION, ldv_list_add_tailErr1REQUIRES_VIOLATION, ldv_dev_get_drvdataErr1REQUIRES_VIOLATION, ldv_dev_get_drvdataErr0REQUIRES_VIOLATION, entry_pointErr3ASSERT_VIOLATIONMEMORY_FREE, entry_pointErr4ASSERT_VIOLATIONMEMORY_FREE, entry_pointErr5ASSERT_VIOLATIONMEMORY_FREE, entry_pointErr2ASSERT_VIOLATIONMEMORY_FREE, entry_pointErr1ASSERT_VIOLATIONMEMORY_FREE, entry_pointErr0ASSERT_VIOLATIONMEMORY_FREE, ldv_msg_allocErr0REQUIRES_VIOLATION, ldv_msg_allocErr1REQUIRES_VIOLATION]=== [2020-07-29 01:01:26,665 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-29 01:01:26,666 INFO L82 PathProgramCache]: Analyzing trace with hash -884195001, now seen corresponding path program 1 times [2020-07-29 01:01:26,667 INFO L163 FreeRefinementEngine]: Executing refinement strategy WOLF [2020-07-29 01:01:26,667 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [879266563] [2020-07-29 01:01:26,667 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat Starting monitored process 6 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with mathsat -unsat_core_generation=3 [2020-07-29 01:01:26,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2020-07-29 01:01:26,806 INFO L221 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2020-07-29 01:01:26,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2020-07-29 01:01:26,825 INFO L221 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2020-07-29 01:01:26,851 INFO L174 FreeRefinementEngine]: Strategy WOLF found a feasible trace [2020-07-29 01:01:26,851 INFO L520 BasicCegarLoop]: Counterexample might be feasible [2020-07-29 01:01:27,064 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 mathsat -unsat_core_generation=3 [2020-07-29 01:01:27,085 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 7bv32 could not be translated for associated CType STRUCT~~ldv_list_head?next~*ldv_list_head?prev~*ldv_list_head# [2020-07-29 01:01:27,087 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 5bv32 could not be translated for associated CType STRUCT~~ldv_list_head?next~*ldv_list_head?prev~*ldv_list_head# [2020-07-29 01:01:27,099 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 29.07 01:01:27 BoogieIcfgContainer [2020-07-29 01:01:27,099 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2020-07-29 01:01:27,100 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2020-07-29 01:01:27,100 INFO L271 PluginConnector]: Initializing Witness Printer... [2020-07-29 01:01:27,100 INFO L275 PluginConnector]: Witness Printer initialized [2020-07-29 01:01:27,101 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.07 01:01:22" (3/4) ... [2020-07-29 01:01:27,104 INFO L131 WitnessPrinter]: Generating witness for reachability counterexample [2020-07-29 01:01:27,118 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 5bv32 could not be translated for associated CType STRUCT~~ldv_list_head?next~*ldv_list_head?prev~*ldv_list_head# [2020-07-29 01:01:27,119 WARN L1295 BoogieBacktranslator]: Unfinished Backtranslation: BitvecLiteral 7bv32 could not be translated for associated CType STRUCT~~ldv_list_head?next~*ldv_list_head?prev~*ldv_list_head# [2020-07-29 01:01:27,187 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2020-07-29 01:01:27,187 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2020-07-29 01:01:27,190 INFO L168 Benchmark]: Toolchain (without parser) took 7704.62 ms. Allocated memory was 1.0 GB in the beginning and 1.3 GB in the end (delta: 227.5 MB). Free memory was 956.2 MB in the beginning and 835.2 MB in the end (delta: 121.0 MB). Peak memory consumption was 348.5 MB. Max. memory is 11.5 GB. [2020-07-29 01:01:27,190 INFO L168 Benchmark]: CDTParser took 0.28 ms. Allocated memory is still 1.0 GB. Free memory is still 987.1 MB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-29 01:01:27,191 INFO L168 Benchmark]: CACSL2BoogieTranslator took 959.11 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 145.2 MB). Free memory was 956.2 MB in the beginning and 1.1 GB in the end (delta: -143.4 MB). Peak memory consumption was 26.2 MB. Max. memory is 11.5 GB. [2020-07-29 01:01:27,191 INFO L168 Benchmark]: Boogie Preprocessor took 139.44 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. [2020-07-29 01:01:27,192 INFO L168 Benchmark]: RCFGBuilder took 1866.27 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 926.9 MB in the end (delta: 166.0 MB). Peak memory consumption was 166.0 MB. Max. memory is 11.5 GB. [2020-07-29 01:01:27,193 INFO L168 Benchmark]: TraceAbstraction took 4644.82 ms. Allocated memory was 1.2 GB in the beginning and 1.3 GB in the end (delta: 82.3 MB). Free memory was 926.9 MB in the beginning and 835.2 MB in the end (delta: 91.7 MB). Peak memory consumption was 174.0 MB. Max. memory is 11.5 GB. [2020-07-29 01:01:27,193 INFO L168 Benchmark]: Witness Printer took 87.30 ms. Allocated memory is still 1.3 GB. Free memory was 835.2 MB in the beginning and 835.2 MB in the end (delta: 24 B). Peak memory consumption was 24 B. Max. memory is 11.5 GB. [2020-07-29 01:01:27,196 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.28 ms. Allocated memory is still 1.0 GB. Free memory is still 987.1 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 959.11 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 145.2 MB). Free memory was 956.2 MB in the beginning and 1.1 GB in the end (delta: -143.4 MB). Peak memory consumption was 26.2 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 139.44 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. * RCFGBuilder took 1866.27 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 926.9 MB in the end (delta: 166.0 MB). Peak memory consumption was 166.0 MB. Max. memory is 11.5 GB. * TraceAbstraction took 4644.82 ms. Allocated memory was 1.2 GB in the beginning and 1.3 GB in the end (delta: 82.3 MB). Free memory was 926.9 MB in the beginning and 835.2 MB in the end (delta: 91.7 MB). Peak memory consumption was 174.0 MB. Max. memory is 11.5 GB. * Witness Printer took 87.30 ms. Allocated memory is still 1.3 GB. Free memory was 835.2 MB in the beginning and 835.2 MB in the end (delta: 24 B). Peak memory consumption was 24 B. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 7bv32 could not be translated for associated CType STRUCT~~ldv_list_head?next~*ldv_list_head?prev~*ldv_list_head# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 5bv32 could not be translated for associated CType STRUCT~~ldv_list_head?next~*ldv_list_head?prev~*ldv_list_head# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 5bv32 could not be translated for associated CType STRUCT~~ldv_list_head?next~*ldv_list_head?prev~*ldv_list_head# - GenericResult: Unfinished Backtranslation Unfinished Backtranslation: BitvecLiteral 7bv32 could not be translated for associated CType STRUCT~~ldv_list_head?next~*ldv_list_head?prev~*ldv_list_head# * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - CounterExampleResult [Line: 760]: free of unallocated memory possible free of unallocated memory possible We found a FailurePath: [L569] struct ldv_list_head ldv_global_msg_list = { &(ldv_global_msg_list), &(ldv_global_msg_list) }; VAL [\old(ldv_global_msg_list)=null, \old(ldv_global_msg_list)=null, ldv_global_msg_list={3:0}] [L763] CALL entry_point() VAL [ldv_global_msg_list={3:0}] [L758] CALL, EXPR ldv_malloc(sizeof(int)) VAL [\old(size)=4, ldv_global_msg_list={3:0}] [L526] COND TRUE __VERIFIER_nondet_int() [L527] return malloc(size); VAL [\old(size)=4, \result={1:0}, ldv_global_msg_list={3:0}, malloc(size)={1:0}, size=4] [L758] RET, EXPR ldv_malloc(sizeof(int)) VAL [ldv_global_msg_list={3:0}, ldv_malloc(sizeof(int))={1:0}] [L758] int *p = (int *)ldv_malloc(sizeof(int)); [L759] free(p) VAL [ldv_global_msg_list={3:0}, p={1:0}] [L759] free(p) VAL [ldv_global_msg_list={3:0}, p={1:0}] [L759] free(p) [L760] free(p) VAL [ldv_global_msg_list={3:0}, p={1:0}] [L760] free(p) VAL [ldv_global_msg_list={3:0}, p={1:0}] [L760] free(p) VAL [ldv_global_msg_list={3:0}, p={1:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 47 procedures, 341 locations, 77 error locations. Started 1 CEGAR loops. VerificationResult: UNSAFE, OverallTime: 4.5s, OverallIterations: 5, TraceHistogramMax: 1, AutomataDifference: 1.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 92 SDtfs, 46 SDslu, 222 SDs, 0 SdLazy, 144 SolverSat, 10 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.2s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 110 GetRequests, 93 SyntacticMatches, 1 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=101occurred in iteration=0, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 4 MinimizatonAttempts, 13 StatesRemovedByMinimization, 2 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 0.9s InterpolantComputationTime, 75 NumberOfCodeBlocks, 75 NumberOfCodeBlocksAsserted, 5 NumberOfCheckSat, 106 ConstructedInterpolants, 0 QuantifiedInterpolants, 3713 SizeOfPredicates, 4 NumberOfNonLiveVariables, 257 ConjunctsInSsa, 21 ConjunctsInUnsatCore, 8 InterpolantComputations, 8 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! Received shutdown request...