./Ultimate.py --spec ../sv-benchmarks/c/properties/valid-memsafety.prp --file ../sv-benchmarks/c/heap-manipulation/dll_of_dll-1.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version a31fd051 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerMemDerefMemtrack.xml -i ../sv-benchmarks/c/heap-manipulation/dll_of_dll-1.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-DerefFreeMemtrack-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0e14b8baad7c8f50637b16b3adcb891ef363d7563e7c4e0e74695e7b8e3d1787 --- Real Ultimate output --- This is Ultimate 0.2.2-?-a31fd05 [2023-02-15 13:12:37,554 INFO L177 SettingsManager]: Resetting all preferences to default values... [2023-02-15 13:12:37,556 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2023-02-15 13:12:37,585 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2023-02-15 13:12:37,585 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2023-02-15 13:12:37,588 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2023-02-15 13:12:37,590 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2023-02-15 13:12:37,591 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2023-02-15 13:12:37,593 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2023-02-15 13:12:37,596 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2023-02-15 13:12:37,597 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2023-02-15 13:12:37,599 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2023-02-15 13:12:37,599 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2023-02-15 13:12:37,600 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2023-02-15 13:12:37,602 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2023-02-15 13:12:37,602 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2023-02-15 13:12:37,603 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2023-02-15 13:12:37,604 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2023-02-15 13:12:37,605 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2023-02-15 13:12:37,609 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2023-02-15 13:12:37,609 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2023-02-15 13:12:37,610 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2023-02-15 13:12:37,611 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2023-02-15 13:12:37,611 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2023-02-15 13:12:37,617 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2023-02-15 13:12:37,617 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2023-02-15 13:12:37,617 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2023-02-15 13:12:37,618 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2023-02-15 13:12:37,619 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2023-02-15 13:12:37,619 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2023-02-15 13:12:37,619 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2023-02-15 13:12:37,621 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2023-02-15 13:12:37,621 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2023-02-15 13:12:37,622 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2023-02-15 13:12:37,623 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2023-02-15 13:12:37,623 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2023-02-15 13:12:37,623 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2023-02-15 13:12:37,623 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2023-02-15 13:12:37,624 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2023-02-15 13:12:37,624 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2023-02-15 13:12:37,625 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2023-02-15 13:12:37,626 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-DerefFreeMemtrack-32bit-Automizer_Default.epf [2023-02-15 13:12:37,648 INFO L113 SettingsManager]: Loading preferences was successful [2023-02-15 13:12:37,648 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2023-02-15 13:12:37,649 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-02-15 13:12:37,649 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-02-15 13:12:37,649 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-02-15 13:12:37,650 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-02-15 13:12:37,650 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-02-15 13:12:37,650 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2023-02-15 13:12:37,650 INFO L138 SettingsManager]: * Use SBE=true [2023-02-15 13:12:37,650 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-02-15 13:12:37,651 INFO L138 SettingsManager]: * sizeof long=4 [2023-02-15 13:12:37,651 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2023-02-15 13:12:37,651 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2023-02-15 13:12:37,651 INFO L138 SettingsManager]: * sizeof POINTER=4 [2023-02-15 13:12:37,652 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2023-02-15 13:12:37,652 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2023-02-15 13:12:37,652 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2023-02-15 13:12:37,652 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2023-02-15 13:12:37,652 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-02-15 13:12:37,652 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2023-02-15 13:12:37,652 INFO L138 SettingsManager]: * sizeof long double=12 [2023-02-15 13:12:37,652 INFO L138 SettingsManager]: * Use constant arrays=true [2023-02-15 13:12:37,653 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-02-15 13:12:37,653 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-02-15 13:12:37,653 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2023-02-15 13:12:37,653 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-02-15 13:12:37,653 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-02-15 13:12:37,653 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-02-15 13:12:37,654 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2023-02-15 13:12:37,654 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-02-15 13:12:37,654 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-02-15 13:12:37,654 INFO L138 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-02-15 13:12:37,654 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-02-15 13:12:37,655 INFO L138 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-02-15 13:12:37,655 INFO L138 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0e14b8baad7c8f50637b16b3adcb891ef363d7563e7c4e0e74695e7b8e3d1787 [2023-02-15 13:12:37,838 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-02-15 13:12:37,863 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-02-15 13:12:37,865 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-02-15 13:12:37,866 INFO L271 PluginConnector]: Initializing CDTParser... [2023-02-15 13:12:37,866 INFO L275 PluginConnector]: CDTParser initialized [2023-02-15 13:12:37,867 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/heap-manipulation/dll_of_dll-1.i [2023-02-15 13:12:38,825 INFO L500 CDTParser]: Created temporary CDT project at NULL [2023-02-15 13:12:39,041 INFO L351 CDTParser]: Found 1 translation units. [2023-02-15 13:12:39,041 INFO L172 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/heap-manipulation/dll_of_dll-1.i [2023-02-15 13:12:39,050 INFO L394 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/956cbc073/cd38dc04ffe44e53acdbc2b8919c4996/FLAGfe6984470 [2023-02-15 13:12:39,068 INFO L402 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/956cbc073/cd38dc04ffe44e53acdbc2b8919c4996 [2023-02-15 13:12:39,070 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-02-15 13:12:39,071 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2023-02-15 13:12:39,073 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-02-15 13:12:39,073 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-02-15 13:12:39,075 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2023-02-15 13:12:39,076 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.02 01:12:39" (1/1) ... [2023-02-15 13:12:39,076 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@17f1f407 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.02 01:12:39, skipping insertion in model container [2023-02-15 13:12:39,076 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.02 01:12:39" (1/1) ... [2023-02-15 13:12:39,081 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2023-02-15 13:12:39,109 INFO L178 MainTranslator]: Built tables and reachable declarations [2023-02-15 13:12:39,265 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/heap-manipulation/dll_of_dll-1.i[22634,22647] [2023-02-15 13:12:39,316 INFO L210 PostProcessor]: Analyzing one entry point: main [2023-02-15 13:12:39,325 INFO L203 MainTranslator]: Completed pre-run [2023-02-15 13:12:39,350 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/heap-manipulation/dll_of_dll-1.i[22634,22647] [2023-02-15 13:12:39,361 INFO L210 PostProcessor]: Analyzing one entry point: main [2023-02-15 13:12:39,381 INFO L208 MainTranslator]: Completed translation [2023-02-15 13:12:39,381 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.02 01:12:39 WrapperNode [2023-02-15 13:12:39,381 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-02-15 13:12:39,382 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-02-15 13:12:39,382 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-02-15 13:12:39,382 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2023-02-15 13:12:39,387 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.02 01:12:39" (1/1) ... [2023-02-15 13:12:39,412 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.02 01:12:39" (1/1) ... [2023-02-15 13:12:39,430 INFO L138 Inliner]: procedures = 140, calls = 94, calls flagged for inlining = 13, calls inlined = 13, statements flattened = 234 [2023-02-15 13:12:39,430 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-02-15 13:12:39,432 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-02-15 13:12:39,432 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2023-02-15 13:12:39,432 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2023-02-15 13:12:39,438 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.02 01:12:39" (1/1) ... [2023-02-15 13:12:39,439 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.02 01:12:39" (1/1) ... [2023-02-15 13:12:39,445 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.02 01:12:39" (1/1) ... [2023-02-15 13:12:39,446 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.02 01:12:39" (1/1) ... [2023-02-15 13:12:39,455 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.02 01:12:39" (1/1) ... [2023-02-15 13:12:39,461 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.02 01:12:39" (1/1) ... [2023-02-15 13:12:39,464 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.02 01:12:39" (1/1) ... [2023-02-15 13:12:39,465 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.02 01:12:39" (1/1) ... [2023-02-15 13:12:39,468 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-02-15 13:12:39,469 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-02-15 13:12:39,469 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2023-02-15 13:12:39,469 INFO L275 PluginConnector]: RCFGBuilder initialized [2023-02-15 13:12:39,470 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.02 01:12:39" (1/1) ... [2023-02-15 13:12:39,474 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-02-15 13:12:39,483 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2023-02-15 13:12:39,499 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-02-15 13:12:39,502 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-02-15 13:12:39,523 INFO L130 BoogieDeclarations]: Found specification of procedure fail [2023-02-15 13:12:39,523 INFO L138 BoogieDeclarations]: Found implementation of procedure fail [2023-02-15 13:12:39,523 INFO L130 BoogieDeclarations]: Found specification of procedure inspect_base [2023-02-15 13:12:39,523 INFO L138 BoogieDeclarations]: Found implementation of procedure inspect_base [2023-02-15 13:12:39,523 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2023-02-15 13:12:39,524 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-02-15 13:12:39,524 INFO L130 BoogieDeclarations]: Found specification of procedure dll_insert_master [2023-02-15 13:12:39,524 INFO L138 BoogieDeclarations]: Found implementation of procedure dll_insert_master [2023-02-15 13:12:39,524 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2023-02-15 13:12:39,524 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2023-02-15 13:12:39,524 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2023-02-15 13:12:39,524 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2023-02-15 13:12:39,524 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2023-02-15 13:12:39,524 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2023-02-15 13:12:39,525 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2023-02-15 13:12:39,525 INFO L130 BoogieDeclarations]: Found specification of procedure dll_create_generic [2023-02-15 13:12:39,525 INFO L138 BoogieDeclarations]: Found implementation of procedure dll_create_generic [2023-02-15 13:12:39,525 INFO L130 BoogieDeclarations]: Found specification of procedure dll_create_slave [2023-02-15 13:12:39,525 INFO L138 BoogieDeclarations]: Found implementation of procedure dll_create_slave [2023-02-15 13:12:39,525 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-02-15 13:12:39,525 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-02-15 13:12:39,525 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-02-15 13:12:39,620 INFO L235 CfgBuilder]: Building ICFG [2023-02-15 13:12:39,622 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2023-02-15 13:12:40,090 INFO L276 CfgBuilder]: Performing block encoding [2023-02-15 13:12:40,095 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-02-15 13:12:40,096 INFO L300 CfgBuilder]: Removed 38 assume(true) statements. [2023-02-15 13:12:40,097 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.02 01:12:40 BoogieIcfgContainer [2023-02-15 13:12:40,097 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-02-15 13:12:40,099 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-02-15 13:12:40,099 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2023-02-15 13:12:40,101 INFO L275 PluginConnector]: TraceAbstraction initialized [2023-02-15 13:12:40,101 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 15.02 01:12:39" (1/3) ... [2023-02-15 13:12:40,101 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@67fa9807 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 15.02 01:12:40, skipping insertion in model container [2023-02-15 13:12:40,101 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.02 01:12:39" (2/3) ... [2023-02-15 13:12:40,101 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@67fa9807 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 15.02 01:12:40, skipping insertion in model container [2023-02-15 13:12:40,102 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.02 01:12:40" (3/3) ... [2023-02-15 13:12:40,102 INFO L112 eAbstractionObserver]: Analyzing ICFG dll_of_dll-1.i [2023-02-15 13:12:40,113 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-02-15 13:12:40,113 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 98 error locations. [2023-02-15 13:12:40,153 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-02-15 13:12:40,157 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@7ffc66fc, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-02-15 13:12:40,157 INFO L358 AbstractCegarLoop]: Starting to check reachability of 98 error locations. [2023-02-15 13:12:40,160 INFO L276 IsEmpty]: Start isEmpty. Operand has 271 states, 142 states have (on average 2.1619718309859155) internal successors, (307), 259 states have internal predecessors, (307), 24 states have call successors, (24), 6 states have call predecessors, (24), 6 states have return successors, (24), 23 states have call predecessors, (24), 24 states have call successors, (24) [2023-02-15 13:12:40,164 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2023-02-15 13:12:40,165 INFO L187 NwaCegarLoop]: Found error trace [2023-02-15 13:12:40,165 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-02-15 13:12:40,165 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ##fun~$Pointer$~TO~VOIDErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-02-15 13:12:40,168 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2023-02-15 13:12:40,168 INFO L85 PathProgramCache]: Analyzing trace with hash -853608627, now seen corresponding path program 1 times [2023-02-15 13:12:40,174 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-02-15 13:12:40,174 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1985347874] [2023-02-15 13:12:40,174 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-02-15 13:12:40,174 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-02-15 13:12:40,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:12:40,300 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-02-15 13:12:40,301 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-02-15 13:12:40,302 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1985347874] [2023-02-15 13:12:40,302 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1985347874] provided 1 perfect and 0 imperfect interpolant sequences [2023-02-15 13:12:40,302 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-02-15 13:12:40,303 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-02-15 13:12:40,303 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [849806762] [2023-02-15 13:12:40,304 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-02-15 13:12:40,306 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-02-15 13:12:40,307 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-02-15 13:12:40,337 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-02-15 13:12:40,337 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-02-15 13:12:40,340 INFO L87 Difference]: Start difference. First operand has 271 states, 142 states have (on average 2.1619718309859155) internal successors, (307), 259 states have internal predecessors, (307), 24 states have call successors, (24), 6 states have call predecessors, (24), 6 states have return successors, (24), 23 states have call predecessors, (24), 24 states have call successors, (24) Second operand has 2 states, 2 states have (on average 3.5) internal successors, (7), 2 states have internal predecessors, (7), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-02-15 13:12:40,394 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-02-15 13:12:40,394 INFO L93 Difference]: Finished difference Result 269 states and 299 transitions. [2023-02-15 13:12:40,395 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-02-15 13:12:40,395 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 3.5) internal successors, (7), 2 states have internal predecessors, (7), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9 [2023-02-15 13:12:40,396 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-02-15 13:12:40,401 INFO L225 Difference]: With dead ends: 269 [2023-02-15 13:12:40,401 INFO L226 Difference]: Without dead ends: 267 [2023-02-15 13:12:40,403 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-02-15 13:12:40,406 INFO L413 NwaCegarLoop]: 299 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 299 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-02-15 13:12:40,406 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 299 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-02-15 13:12:40,418 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 267 states. [2023-02-15 13:12:40,438 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 267 to 267. [2023-02-15 13:12:40,441 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 267 states, 140 states have (on average 1.8785714285714286) internal successors, (263), 255 states have internal predecessors, (263), 24 states have call successors, (24), 6 states have call predecessors, (24), 5 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) [2023-02-15 13:12:40,444 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 267 states to 267 states and 297 transitions. [2023-02-15 13:12:40,447 INFO L78 Accepts]: Start accepts. Automaton has 267 states and 297 transitions. Word has length 9 [2023-02-15 13:12:40,448 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-02-15 13:12:40,448 INFO L495 AbstractCegarLoop]: Abstraction has 267 states and 297 transitions. [2023-02-15 13:12:40,448 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 3.5) internal successors, (7), 2 states have internal predecessors, (7), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-02-15 13:12:40,449 INFO L276 IsEmpty]: Start isEmpty. Operand 267 states and 297 transitions. [2023-02-15 13:12:40,449 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2023-02-15 13:12:40,449 INFO L187 NwaCegarLoop]: Found error trace [2023-02-15 13:12:40,449 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-02-15 13:12:40,449 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-02-15 13:12:40,450 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ##fun~$Pointer$~TO~VOIDErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-02-15 13:12:40,450 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2023-02-15 13:12:40,451 INFO L85 PathProgramCache]: Analyzing trace with hash -853608565, now seen corresponding path program 1 times [2023-02-15 13:12:40,451 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-02-15 13:12:40,451 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1746510262] [2023-02-15 13:12:40,452 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-02-15 13:12:40,452 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-02-15 13:12:40,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:12:40,608 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-02-15 13:12:40,608 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-02-15 13:12:40,609 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1746510262] [2023-02-15 13:12:40,609 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1746510262] provided 1 perfect and 0 imperfect interpolant sequences [2023-02-15 13:12:40,609 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-02-15 13:12:40,610 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-02-15 13:12:40,610 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [307162366] [2023-02-15 13:12:40,610 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-02-15 13:12:40,611 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-02-15 13:12:40,611 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-02-15 13:12:40,612 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-02-15 13:12:40,612 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-02-15 13:12:40,613 INFO L87 Difference]: Start difference. First operand 267 states and 297 transitions. Second operand has 3 states, 2 states have (on average 3.5) internal successors, (7), 3 states have internal predecessors, (7), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-02-15 13:12:40,739 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-02-15 13:12:40,740 INFO L93 Difference]: Finished difference Result 267 states and 299 transitions. [2023-02-15 13:12:40,740 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-02-15 13:12:40,742 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 3.5) internal successors, (7), 3 states have internal predecessors, (7), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9 [2023-02-15 13:12:40,742 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-02-15 13:12:40,746 INFO L225 Difference]: With dead ends: 267 [2023-02-15 13:12:40,746 INFO L226 Difference]: Without dead ends: 267 [2023-02-15 13:12:40,749 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-02-15 13:12:40,751 INFO L413 NwaCegarLoop]: 282 mSDtfsCounter, 23 mSDsluCounter, 181 mSDsCounter, 0 mSdLazyCounter, 105 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 23 SdHoareTripleChecker+Valid, 463 SdHoareTripleChecker+Invalid, 106 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 105 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-02-15 13:12:40,751 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [23 Valid, 463 Invalid, 106 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 105 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-02-15 13:12:40,754 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 267 states. [2023-02-15 13:12:40,765 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 267 to 265. [2023-02-15 13:12:40,768 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 265 states, 140 states have (on average 1.8642857142857143) internal successors, (261), 253 states have internal predecessors, (261), 24 states have call successors, (24), 6 states have call predecessors, (24), 5 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) [2023-02-15 13:12:40,771 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 265 states to 265 states and 295 transitions. [2023-02-15 13:12:40,771 INFO L78 Accepts]: Start accepts. Automaton has 265 states and 295 transitions. Word has length 9 [2023-02-15 13:12:40,772 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-02-15 13:12:40,772 INFO L495 AbstractCegarLoop]: Abstraction has 265 states and 295 transitions. [2023-02-15 13:12:40,772 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 3.5) internal successors, (7), 3 states have internal predecessors, (7), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-02-15 13:12:40,772 INFO L276 IsEmpty]: Start isEmpty. Operand 265 states and 295 transitions. [2023-02-15 13:12:40,773 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2023-02-15 13:12:40,773 INFO L187 NwaCegarLoop]: Found error trace [2023-02-15 13:12:40,773 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-02-15 13:12:40,773 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-02-15 13:12:40,773 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ##fun~$Pointer$~TO~VOIDErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-02-15 13:12:40,774 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2023-02-15 13:12:40,774 INFO L85 PathProgramCache]: Analyzing trace with hash -853608564, now seen corresponding path program 1 times [2023-02-15 13:12:40,774 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-02-15 13:12:40,774 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [530199367] [2023-02-15 13:12:40,774 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-02-15 13:12:40,774 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-02-15 13:12:40,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:12:40,904 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-02-15 13:12:40,904 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-02-15 13:12:40,905 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [530199367] [2023-02-15 13:12:40,905 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [530199367] provided 1 perfect and 0 imperfect interpolant sequences [2023-02-15 13:12:40,905 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-02-15 13:12:40,905 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-02-15 13:12:40,906 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [127009628] [2023-02-15 13:12:40,906 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-02-15 13:12:40,906 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-02-15 13:12:40,906 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-02-15 13:12:40,907 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-02-15 13:12:40,907 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-02-15 13:12:40,907 INFO L87 Difference]: Start difference. First operand 265 states and 295 transitions. Second operand has 5 states, 4 states have (on average 1.75) internal successors, (7), 4 states have internal predecessors, (7), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-02-15 13:12:40,982 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-02-15 13:12:40,983 INFO L93 Difference]: Finished difference Result 291 states and 329 transitions. [2023-02-15 13:12:40,983 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-02-15 13:12:40,983 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.75) internal successors, (7), 4 states have internal predecessors, (7), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9 [2023-02-15 13:12:40,983 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-02-15 13:12:40,984 INFO L225 Difference]: With dead ends: 291 [2023-02-15 13:12:40,985 INFO L226 Difference]: Without dead ends: 291 [2023-02-15 13:12:40,986 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2023-02-15 13:12:40,990 INFO L413 NwaCegarLoop]: 313 mSDtfsCounter, 19 mSDsluCounter, 887 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 22 SdHoareTripleChecker+Valid, 1200 SdHoareTripleChecker+Invalid, 66 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-02-15 13:12:40,990 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [22 Valid, 1200 Invalid, 66 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-02-15 13:12:40,992 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 291 states. [2023-02-15 13:12:41,007 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 291 to 283. [2023-02-15 13:12:41,011 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 283 states, 151 states have (on average 1.8278145695364238) internal successors, (276), 264 states have internal predecessors, (276), 29 states have call successors, (29), 8 states have call predecessors, (29), 7 states have return successors, (18), 13 states have call predecessors, (18), 15 states have call successors, (18) [2023-02-15 13:12:41,012 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 283 states to 283 states and 323 transitions. [2023-02-15 13:12:41,012 INFO L78 Accepts]: Start accepts. Automaton has 283 states and 323 transitions. Word has length 9 [2023-02-15 13:12:41,012 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-02-15 13:12:41,012 INFO L495 AbstractCegarLoop]: Abstraction has 283 states and 323 transitions. [2023-02-15 13:12:41,012 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.75) internal successors, (7), 4 states have internal predecessors, (7), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-02-15 13:12:41,013 INFO L276 IsEmpty]: Start isEmpty. Operand 283 states and 323 transitions. [2023-02-15 13:12:41,013 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2023-02-15 13:12:41,013 INFO L187 NwaCegarLoop]: Found error trace [2023-02-15 13:12:41,013 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-02-15 13:12:41,013 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-02-15 13:12:41,013 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-02-15 13:12:41,014 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2023-02-15 13:12:41,014 INFO L85 PathProgramCache]: Analyzing trace with hash 33414869, now seen corresponding path program 1 times [2023-02-15 13:12:41,014 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-02-15 13:12:41,015 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1489717399] [2023-02-15 13:12:41,015 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-02-15 13:12:41,015 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-02-15 13:12:41,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:12:41,059 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-02-15 13:12:41,059 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-02-15 13:12:41,059 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1489717399] [2023-02-15 13:12:41,059 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1489717399] provided 1 perfect and 0 imperfect interpolant sequences [2023-02-15 13:12:41,060 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-02-15 13:12:41,060 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-02-15 13:12:41,060 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2124776400] [2023-02-15 13:12:41,060 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-02-15 13:12:41,060 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-02-15 13:12:41,060 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-02-15 13:12:41,061 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-02-15 13:12:41,061 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-02-15 13:12:41,061 INFO L87 Difference]: Start difference. First operand 283 states and 323 transitions. Second operand has 3 states, 2 states have (on average 4.0) internal successors, (8), 3 states have internal predecessors, (8), 1 states have call successors, (3), 1 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-02-15 13:12:41,150 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-02-15 13:12:41,151 INFO L93 Difference]: Finished difference Result 280 states and 320 transitions. [2023-02-15 13:12:41,151 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-02-15 13:12:41,151 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 4.0) internal successors, (8), 3 states have internal predecessors, (8), 1 states have call successors, (3), 1 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2023-02-15 13:12:41,151 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-02-15 13:12:41,152 INFO L225 Difference]: With dead ends: 280 [2023-02-15 13:12:41,152 INFO L226 Difference]: Without dead ends: 280 [2023-02-15 13:12:41,153 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-02-15 13:12:41,153 INFO L413 NwaCegarLoop]: 278 mSDtfsCounter, 20 mSDsluCounter, 182 mSDsCounter, 0 mSdLazyCounter, 102 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 460 SdHoareTripleChecker+Invalid, 104 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 102 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-02-15 13:12:41,154 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 460 Invalid, 104 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 102 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-02-15 13:12:41,154 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 280 states. [2023-02-15 13:12:41,159 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 280 to 280. [2023-02-15 13:12:41,159 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 280 states, 151 states have (on average 1.8079470198675496) internal successors, (273), 261 states have internal predecessors, (273), 29 states have call successors, (29), 8 states have call predecessors, (29), 7 states have return successors, (18), 13 states have call predecessors, (18), 15 states have call successors, (18) [2023-02-15 13:12:41,160 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 280 states to 280 states and 320 transitions. [2023-02-15 13:12:41,160 INFO L78 Accepts]: Start accepts. Automaton has 280 states and 320 transitions. Word has length 11 [2023-02-15 13:12:41,160 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-02-15 13:12:41,161 INFO L495 AbstractCegarLoop]: Abstraction has 280 states and 320 transitions. [2023-02-15 13:12:41,161 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 4.0) internal successors, (8), 3 states have internal predecessors, (8), 1 states have call successors, (3), 1 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-02-15 13:12:41,161 INFO L276 IsEmpty]: Start isEmpty. Operand 280 states and 320 transitions. [2023-02-15 13:12:41,161 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2023-02-15 13:12:41,161 INFO L187 NwaCegarLoop]: Found error trace [2023-02-15 13:12:41,162 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-02-15 13:12:41,162 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-02-15 13:12:41,162 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-02-15 13:12:41,162 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2023-02-15 13:12:41,162 INFO L85 PathProgramCache]: Analyzing trace with hash 33414870, now seen corresponding path program 1 times [2023-02-15 13:12:41,163 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-02-15 13:12:41,163 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1430415053] [2023-02-15 13:12:41,163 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-02-15 13:12:41,163 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-02-15 13:12:41,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:12:41,211 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-02-15 13:12:41,212 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-02-15 13:12:41,212 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1430415053] [2023-02-15 13:12:41,212 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1430415053] provided 1 perfect and 0 imperfect interpolant sequences [2023-02-15 13:12:41,212 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-02-15 13:12:41,212 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-02-15 13:12:41,212 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1584423747] [2023-02-15 13:12:41,213 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-02-15 13:12:41,213 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-02-15 13:12:41,213 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-02-15 13:12:41,213 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-02-15 13:12:41,213 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-02-15 13:12:41,214 INFO L87 Difference]: Start difference. First operand 280 states and 320 transitions. Second operand has 3 states, 2 states have (on average 4.0) internal successors, (8), 3 states have internal predecessors, (8), 1 states have call successors, (3), 1 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-02-15 13:12:41,304 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-02-15 13:12:41,304 INFO L93 Difference]: Finished difference Result 277 states and 317 transitions. [2023-02-15 13:12:41,305 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-02-15 13:12:41,305 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 4.0) internal successors, (8), 3 states have internal predecessors, (8), 1 states have call successors, (3), 1 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2023-02-15 13:12:41,305 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-02-15 13:12:41,306 INFO L225 Difference]: With dead ends: 277 [2023-02-15 13:12:41,306 INFO L226 Difference]: Without dead ends: 277 [2023-02-15 13:12:41,307 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-02-15 13:12:41,307 INFO L413 NwaCegarLoop]: 278 mSDtfsCounter, 17 mSDsluCounter, 187 mSDsCounter, 0 mSdLazyCounter, 94 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 17 SdHoareTripleChecker+Valid, 465 SdHoareTripleChecker+Invalid, 96 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 94 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-02-15 13:12:41,307 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [17 Valid, 465 Invalid, 96 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 94 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-02-15 13:12:41,308 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 277 states. [2023-02-15 13:12:41,311 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 277 to 277. [2023-02-15 13:12:41,312 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 277 states, 151 states have (on average 1.7880794701986755) internal successors, (270), 258 states have internal predecessors, (270), 29 states have call successors, (29), 8 states have call predecessors, (29), 7 states have return successors, (18), 13 states have call predecessors, (18), 15 states have call successors, (18) [2023-02-15 13:12:41,313 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 277 states to 277 states and 317 transitions. [2023-02-15 13:12:41,313 INFO L78 Accepts]: Start accepts. Automaton has 277 states and 317 transitions. Word has length 11 [2023-02-15 13:12:41,313 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-02-15 13:12:41,313 INFO L495 AbstractCegarLoop]: Abstraction has 277 states and 317 transitions. [2023-02-15 13:12:41,314 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 4.0) internal successors, (8), 3 states have internal predecessors, (8), 1 states have call successors, (3), 1 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-02-15 13:12:41,314 INFO L276 IsEmpty]: Start isEmpty. Operand 277 states and 317 transitions. [2023-02-15 13:12:41,314 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2023-02-15 13:12:41,314 INFO L187 NwaCegarLoop]: Found error trace [2023-02-15 13:12:41,314 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-02-15 13:12:41,314 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-02-15 13:12:41,315 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting dll_insert_masterErr6REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-02-15 13:12:41,315 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2023-02-15 13:12:41,315 INFO L85 PathProgramCache]: Analyzing trace with hash -226556130, now seen corresponding path program 1 times [2023-02-15 13:12:41,315 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-02-15 13:12:41,315 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1464302389] [2023-02-15 13:12:41,315 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-02-15 13:12:41,316 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-02-15 13:12:41,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:12:41,445 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-02-15 13:12:41,445 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-02-15 13:12:41,445 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1464302389] [2023-02-15 13:12:41,445 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1464302389] provided 1 perfect and 0 imperfect interpolant sequences [2023-02-15 13:12:41,445 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-02-15 13:12:41,446 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-02-15 13:12:41,446 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1776058889] [2023-02-15 13:12:41,446 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-02-15 13:12:41,446 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-02-15 13:12:41,446 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-02-15 13:12:41,447 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-02-15 13:12:41,447 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2023-02-15 13:12:41,447 INFO L87 Difference]: Start difference. First operand 277 states and 317 transitions. Second operand has 8 states, 6 states have (on average 2.1666666666666665) internal successors, (13), 6 states have internal predecessors, (13), 3 states have call successors, (3), 3 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-02-15 13:12:41,762 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-02-15 13:12:41,762 INFO L93 Difference]: Finished difference Result 300 states and 343 transitions. [2023-02-15 13:12:41,762 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-02-15 13:12:41,763 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 2.1666666666666665) internal successors, (13), 6 states have internal predecessors, (13), 3 states have call successors, (3), 3 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2023-02-15 13:12:41,763 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-02-15 13:12:41,764 INFO L225 Difference]: With dead ends: 300 [2023-02-15 13:12:41,764 INFO L226 Difference]: Without dead ends: 300 [2023-02-15 13:12:41,764 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=67, Unknown=0, NotChecked=0, Total=90 [2023-02-15 13:12:41,765 INFO L413 NwaCegarLoop]: 266 mSDtfsCounter, 115 mSDsluCounter, 887 mSDsCounter, 0 mSdLazyCounter, 547 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 115 SdHoareTripleChecker+Valid, 1153 SdHoareTripleChecker+Invalid, 562 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 547 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-02-15 13:12:41,765 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [115 Valid, 1153 Invalid, 562 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 547 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-02-15 13:12:41,766 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 300 states. [2023-02-15 13:12:41,769 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 300 to 289. [2023-02-15 13:12:41,770 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 289 states, 162 states have (on average 1.7469135802469136) internal successors, (283), 268 states have internal predecessors, (283), 30 states have call successors, (30), 10 states have call predecessors, (30), 7 states have return successors, (19), 13 states have call predecessors, (19), 16 states have call successors, (19) [2023-02-15 13:12:41,770 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 289 states to 289 states and 332 transitions. [2023-02-15 13:12:41,771 INFO L78 Accepts]: Start accepts. Automaton has 289 states and 332 transitions. Word has length 16 [2023-02-15 13:12:41,771 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-02-15 13:12:41,771 INFO L495 AbstractCegarLoop]: Abstraction has 289 states and 332 transitions. [2023-02-15 13:12:41,771 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 2.1666666666666665) internal successors, (13), 6 states have internal predecessors, (13), 3 states have call successors, (3), 3 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-02-15 13:12:41,771 INFO L276 IsEmpty]: Start isEmpty. Operand 289 states and 332 transitions. [2023-02-15 13:12:41,771 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2023-02-15 13:12:41,772 INFO L187 NwaCegarLoop]: Found error trace [2023-02-15 13:12:41,772 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-02-15 13:12:41,772 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-02-15 13:12:41,772 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting dll_insert_masterErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-02-15 13:12:41,772 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2023-02-15 13:12:41,773 INFO L85 PathProgramCache]: Analyzing trace with hash -226556129, now seen corresponding path program 1 times [2023-02-15 13:12:41,773 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-02-15 13:12:41,773 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1697563697] [2023-02-15 13:12:41,773 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-02-15 13:12:41,773 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-02-15 13:12:41,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:12:41,929 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-02-15 13:12:41,929 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-02-15 13:12:41,930 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1697563697] [2023-02-15 13:12:41,930 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1697563697] provided 1 perfect and 0 imperfect interpolant sequences [2023-02-15 13:12:41,930 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-02-15 13:12:41,930 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-02-15 13:12:41,930 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1012892792] [2023-02-15 13:12:41,930 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-02-15 13:12:41,931 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-02-15 13:12:41,931 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-02-15 13:12:41,931 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-02-15 13:12:41,932 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2023-02-15 13:12:41,932 INFO L87 Difference]: Start difference. First operand 289 states and 332 transitions. Second operand has 7 states, 5 states have (on average 2.6) internal successors, (13), 5 states have internal predecessors, (13), 3 states have call successors, (3), 3 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-02-15 13:12:42,300 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-02-15 13:12:42,300 INFO L93 Difference]: Finished difference Result 299 states and 342 transitions. [2023-02-15 13:12:42,300 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-02-15 13:12:42,301 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 5 states have (on average 2.6) internal successors, (13), 5 states have internal predecessors, (13), 3 states have call successors, (3), 3 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2023-02-15 13:12:42,301 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-02-15 13:12:42,302 INFO L225 Difference]: With dead ends: 299 [2023-02-15 13:12:42,302 INFO L226 Difference]: Without dead ends: 299 [2023-02-15 13:12:42,302 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=53, Unknown=0, NotChecked=0, Total=72 [2023-02-15 13:12:42,303 INFO L413 NwaCegarLoop]: 260 mSDtfsCounter, 80 mSDsluCounter, 756 mSDsCounter, 0 mSdLazyCounter, 697 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 80 SdHoareTripleChecker+Valid, 1016 SdHoareTripleChecker+Invalid, 706 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 697 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-02-15 13:12:42,303 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [80 Valid, 1016 Invalid, 706 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 697 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-02-15 13:12:42,304 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 299 states. [2023-02-15 13:12:42,309 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 299 to 289. [2023-02-15 13:12:42,309 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 289 states, 162 states have (on average 1.7345679012345678) internal successors, (281), 268 states have internal predecessors, (281), 30 states have call successors, (30), 10 states have call predecessors, (30), 7 states have return successors, (19), 13 states have call predecessors, (19), 16 states have call successors, (19) [2023-02-15 13:12:42,310 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 289 states to 289 states and 330 transitions. [2023-02-15 13:12:42,310 INFO L78 Accepts]: Start accepts. Automaton has 289 states and 330 transitions. Word has length 16 [2023-02-15 13:12:42,310 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-02-15 13:12:42,310 INFO L495 AbstractCegarLoop]: Abstraction has 289 states and 330 transitions. [2023-02-15 13:12:42,311 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 5 states have (on average 2.6) internal successors, (13), 5 states have internal predecessors, (13), 3 states have call successors, (3), 3 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-02-15 13:12:42,311 INFO L276 IsEmpty]: Start isEmpty. Operand 289 states and 330 transitions. [2023-02-15 13:12:42,311 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2023-02-15 13:12:42,311 INFO L187 NwaCegarLoop]: Found error trace [2023-02-15 13:12:42,311 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-02-15 13:12:42,312 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-02-15 13:12:42,312 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting dll_insert_masterErr8REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-02-15 13:12:42,312 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2023-02-15 13:12:42,312 INFO L85 PathProgramCache]: Analyzing trace with hash 1322891007, now seen corresponding path program 1 times [2023-02-15 13:12:42,312 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-02-15 13:12:42,313 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [156427276] [2023-02-15 13:12:42,313 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-02-15 13:12:42,313 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-02-15 13:12:42,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:12:42,375 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-02-15 13:12:42,375 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-02-15 13:12:42,375 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [156427276] [2023-02-15 13:12:42,376 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [156427276] provided 1 perfect and 0 imperfect interpolant sequences [2023-02-15 13:12:42,376 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-02-15 13:12:42,376 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-02-15 13:12:42,377 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1141276228] [2023-02-15 13:12:42,379 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-02-15 13:12:42,380 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-02-15 13:12:42,380 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-02-15 13:12:42,380 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-02-15 13:12:42,380 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-02-15 13:12:42,380 INFO L87 Difference]: Start difference. First operand 289 states and 330 transitions. Second operand has 5 states, 4 states have (on average 3.75) internal successors, (15), 5 states have internal predecessors, (15), 1 states have call successors, (3), 1 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-02-15 13:12:42,547 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-02-15 13:12:42,548 INFO L93 Difference]: Finished difference Result 288 states and 329 transitions. [2023-02-15 13:12:42,548 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-02-15 13:12:42,548 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 3.75) internal successors, (15), 5 states have internal predecessors, (15), 1 states have call successors, (3), 1 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2023-02-15 13:12:42,548 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-02-15 13:12:42,549 INFO L225 Difference]: With dead ends: 288 [2023-02-15 13:12:42,549 INFO L226 Difference]: Without dead ends: 288 [2023-02-15 13:12:42,550 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-02-15 13:12:42,550 INFO L413 NwaCegarLoop]: 274 mSDtfsCounter, 40 mSDsluCounter, 539 mSDsCounter, 0 mSdLazyCounter, 290 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 40 SdHoareTripleChecker+Valid, 813 SdHoareTripleChecker+Invalid, 292 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 290 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-02-15 13:12:42,550 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [40 Valid, 813 Invalid, 292 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 290 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-02-15 13:12:42,551 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 288 states. [2023-02-15 13:12:42,554 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 288 to 288. [2023-02-15 13:12:42,555 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 288 states, 162 states have (on average 1.728395061728395) internal successors, (280), 267 states have internal predecessors, (280), 30 states have call successors, (30), 10 states have call predecessors, (30), 7 states have return successors, (19), 13 states have call predecessors, (19), 16 states have call successors, (19) [2023-02-15 13:12:42,556 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 288 states to 288 states and 329 transitions. [2023-02-15 13:12:42,556 INFO L78 Accepts]: Start accepts. Automaton has 288 states and 329 transitions. Word has length 18 [2023-02-15 13:12:42,556 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-02-15 13:12:42,556 INFO L495 AbstractCegarLoop]: Abstraction has 288 states and 329 transitions. [2023-02-15 13:12:42,556 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 3.75) internal successors, (15), 5 states have internal predecessors, (15), 1 states have call successors, (3), 1 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-02-15 13:12:42,556 INFO L276 IsEmpty]: Start isEmpty. Operand 288 states and 329 transitions. [2023-02-15 13:12:42,557 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2023-02-15 13:12:42,557 INFO L187 NwaCegarLoop]: Found error trace [2023-02-15 13:12:42,557 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-02-15 13:12:42,557 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-02-15 13:12:42,557 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting dll_insert_masterErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-02-15 13:12:42,558 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2023-02-15 13:12:42,558 INFO L85 PathProgramCache]: Analyzing trace with hash 1322891008, now seen corresponding path program 1 times [2023-02-15 13:12:42,558 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-02-15 13:12:42,558 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [114125855] [2023-02-15 13:12:42,558 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-02-15 13:12:42,558 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-02-15 13:12:42,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:12:42,629 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-02-15 13:12:42,629 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-02-15 13:12:42,629 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [114125855] [2023-02-15 13:12:42,629 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [114125855] provided 1 perfect and 0 imperfect interpolant sequences [2023-02-15 13:12:42,629 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-02-15 13:12:42,630 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-02-15 13:12:42,630 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1847780728] [2023-02-15 13:12:42,630 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-02-15 13:12:42,630 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-02-15 13:12:42,630 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-02-15 13:12:42,631 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-02-15 13:12:42,632 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2023-02-15 13:12:42,632 INFO L87 Difference]: Start difference. First operand 288 states and 329 transitions. Second operand has 6 states, 5 states have (on average 3.0) internal successors, (15), 6 states have internal predecessors, (15), 1 states have call successors, (3), 1 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-02-15 13:12:42,772 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-02-15 13:12:42,772 INFO L93 Difference]: Finished difference Result 287 states and 328 transitions. [2023-02-15 13:12:42,772 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-02-15 13:12:42,773 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 3.0) internal successors, (15), 6 states have internal predecessors, (15), 1 states have call successors, (3), 1 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2023-02-15 13:12:42,773 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-02-15 13:12:42,774 INFO L225 Difference]: With dead ends: 287 [2023-02-15 13:12:42,774 INFO L226 Difference]: Without dead ends: 287 [2023-02-15 13:12:42,774 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2023-02-15 13:12:42,774 INFO L413 NwaCegarLoop]: 276 mSDtfsCounter, 54 mSDsluCounter, 638 mSDsCounter, 0 mSdLazyCounter, 194 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 914 SdHoareTripleChecker+Invalid, 196 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 194 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-02-15 13:12:42,775 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [54 Valid, 914 Invalid, 196 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 194 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-02-15 13:12:42,775 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 287 states. [2023-02-15 13:12:42,778 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 287 to 287. [2023-02-15 13:12:42,779 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 287 states, 162 states have (on average 1.7222222222222223) internal successors, (279), 266 states have internal predecessors, (279), 30 states have call successors, (30), 10 states have call predecessors, (30), 7 states have return successors, (19), 13 states have call predecessors, (19), 16 states have call successors, (19) [2023-02-15 13:12:42,780 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 287 states to 287 states and 328 transitions. [2023-02-15 13:12:42,780 INFO L78 Accepts]: Start accepts. Automaton has 287 states and 328 transitions. Word has length 18 [2023-02-15 13:12:42,780 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-02-15 13:12:42,780 INFO L495 AbstractCegarLoop]: Abstraction has 287 states and 328 transitions. [2023-02-15 13:12:42,780 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 3.0) internal successors, (15), 6 states have internal predecessors, (15), 1 states have call successors, (3), 1 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-02-15 13:12:42,780 INFO L276 IsEmpty]: Start isEmpty. Operand 287 states and 328 transitions. [2023-02-15 13:12:42,781 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2023-02-15 13:12:42,781 INFO L187 NwaCegarLoop]: Found error trace [2023-02-15 13:12:42,781 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-02-15 13:12:42,781 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-02-15 13:12:42,781 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting dll_insert_masterErr10REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-02-15 13:12:42,782 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2023-02-15 13:12:42,782 INFO L85 PathProgramCache]: Analyzing trace with hash -12061856, now seen corresponding path program 1 times [2023-02-15 13:12:42,782 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-02-15 13:12:42,792 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [131417413] [2023-02-15 13:12:42,792 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-02-15 13:12:42,792 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-02-15 13:12:42,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:12:43,056 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-02-15 13:12:43,057 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-02-15 13:12:43,057 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [131417413] [2023-02-15 13:12:43,057 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [131417413] provided 1 perfect and 0 imperfect interpolant sequences [2023-02-15 13:12:43,057 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-02-15 13:12:43,057 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2023-02-15 13:12:43,057 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [354886056] [2023-02-15 13:12:43,057 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-02-15 13:12:43,058 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2023-02-15 13:12:43,058 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-02-15 13:12:43,058 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2023-02-15 13:12:43,059 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2023-02-15 13:12:43,059 INFO L87 Difference]: Start difference. First operand 287 states and 328 transitions. Second operand has 10 states, 9 states have (on average 1.8888888888888888) internal successors, (17), 8 states have internal predecessors, (17), 3 states have call successors, (3), 3 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-02-15 13:12:43,388 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-02-15 13:12:43,388 INFO L93 Difference]: Finished difference Result 326 states and 372 transitions. [2023-02-15 13:12:43,389 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2023-02-15 13:12:43,389 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 9 states have (on average 1.8888888888888888) internal successors, (17), 8 states have internal predecessors, (17), 3 states have call successors, (3), 3 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2023-02-15 13:12:43,389 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-02-15 13:12:43,390 INFO L225 Difference]: With dead ends: 326 [2023-02-15 13:12:43,390 INFO L226 Difference]: Without dead ends: 326 [2023-02-15 13:12:43,390 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=41, Invalid=141, Unknown=0, NotChecked=0, Total=182 [2023-02-15 13:12:43,391 INFO L413 NwaCegarLoop]: 272 mSDtfsCounter, 47 mSDsluCounter, 1508 mSDsCounter, 0 mSdLazyCounter, 535 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 48 SdHoareTripleChecker+Valid, 1780 SdHoareTripleChecker+Invalid, 551 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 535 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-02-15 13:12:43,392 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [48 Valid, 1780 Invalid, 551 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 535 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-02-15 13:12:43,393 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 326 states. [2023-02-15 13:12:43,397 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 326 to 307. [2023-02-15 13:12:43,397 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 307 states, 179 states have (on average 1.681564245810056) internal successors, (301), 283 states have internal predecessors, (301), 32 states have call successors, (32), 12 states have call predecessors, (32), 8 states have return successors, (23), 14 states have call predecessors, (23), 18 states have call successors, (23) [2023-02-15 13:12:43,398 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 307 states to 307 states and 356 transitions. [2023-02-15 13:12:43,398 INFO L78 Accepts]: Start accepts. Automaton has 307 states and 356 transitions. Word has length 20 [2023-02-15 13:12:43,404 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-02-15 13:12:43,404 INFO L495 AbstractCegarLoop]: Abstraction has 307 states and 356 transitions. [2023-02-15 13:12:43,404 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 9 states have (on average 1.8888888888888888) internal successors, (17), 8 states have internal predecessors, (17), 3 states have call successors, (3), 3 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-02-15 13:12:43,404 INFO L276 IsEmpty]: Start isEmpty. Operand 307 states and 356 transitions. [2023-02-15 13:12:43,405 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2023-02-15 13:12:43,405 INFO L187 NwaCegarLoop]: Found error trace [2023-02-15 13:12:43,405 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-02-15 13:12:43,405 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2023-02-15 13:12:43,405 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ##fun~$Pointer$~TO~VOIDErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-02-15 13:12:43,406 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2023-02-15 13:12:43,406 INFO L85 PathProgramCache]: Analyzing trace with hash 551710607, now seen corresponding path program 1 times [2023-02-15 13:12:43,406 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-02-15 13:12:43,406 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2000299691] [2023-02-15 13:12:43,406 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-02-15 13:12:43,406 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-02-15 13:12:43,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:12:43,473 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-02-15 13:12:43,474 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-02-15 13:12:43,474 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2000299691] [2023-02-15 13:12:43,474 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2000299691] provided 1 perfect and 0 imperfect interpolant sequences [2023-02-15 13:12:43,474 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-02-15 13:12:43,474 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-02-15 13:12:43,474 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1599170503] [2023-02-15 13:12:43,474 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-02-15 13:12:43,475 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-02-15 13:12:43,475 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-02-15 13:12:43,475 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-02-15 13:12:43,475 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-02-15 13:12:43,475 INFO L87 Difference]: Start difference. First operand 307 states and 356 transitions. Second operand has 3 states, 2 states have (on average 9.5) internal successors, (19), 3 states have internal predecessors, (19), 1 states have call successors, (5), 1 states have call predecessors, (5), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-02-15 13:12:43,546 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-02-15 13:12:43,546 INFO L93 Difference]: Finished difference Result 305 states and 354 transitions. [2023-02-15 13:12:43,546 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-02-15 13:12:43,547 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 9.5) internal successors, (19), 3 states have internal predecessors, (19), 1 states have call successors, (5), 1 states have call predecessors, (5), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2023-02-15 13:12:43,547 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-02-15 13:12:43,549 INFO L225 Difference]: With dead ends: 305 [2023-02-15 13:12:43,549 INFO L226 Difference]: Without dead ends: 305 [2023-02-15 13:12:43,549 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-02-15 13:12:43,549 INFO L413 NwaCegarLoop]: 274 mSDtfsCounter, 21 mSDsluCounter, 184 mSDsCounter, 0 mSdLazyCounter, 92 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 458 SdHoareTripleChecker+Invalid, 93 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 92 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-02-15 13:12:43,550 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 458 Invalid, 93 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 92 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-02-15 13:12:43,550 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 305 states. [2023-02-15 13:12:43,555 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 305 to 305. [2023-02-15 13:12:43,555 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 305 states, 179 states have (on average 1.670391061452514) internal successors, (299), 281 states have internal predecessors, (299), 32 states have call successors, (32), 12 states have call predecessors, (32), 8 states have return successors, (23), 14 states have call predecessors, (23), 18 states have call successors, (23) [2023-02-15 13:12:43,556 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 305 states to 305 states and 354 transitions. [2023-02-15 13:12:43,557 INFO L78 Accepts]: Start accepts. Automaton has 305 states and 354 transitions. Word has length 27 [2023-02-15 13:12:43,557 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-02-15 13:12:43,557 INFO L495 AbstractCegarLoop]: Abstraction has 305 states and 354 transitions. [2023-02-15 13:12:43,557 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 9.5) internal successors, (19), 3 states have internal predecessors, (19), 1 states have call successors, (5), 1 states have call predecessors, (5), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-02-15 13:12:43,557 INFO L276 IsEmpty]: Start isEmpty. Operand 305 states and 354 transitions. [2023-02-15 13:12:43,557 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2023-02-15 13:12:43,557 INFO L187 NwaCegarLoop]: Found error trace [2023-02-15 13:12:43,557 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-02-15 13:12:43,558 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2023-02-15 13:12:43,558 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ##fun~$Pointer$~TO~VOIDErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-02-15 13:12:43,558 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2023-02-15 13:12:43,558 INFO L85 PathProgramCache]: Analyzing trace with hash 67060467, now seen corresponding path program 1 times [2023-02-15 13:12:43,558 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-02-15 13:12:43,558 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1171697675] [2023-02-15 13:12:43,558 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-02-15 13:12:43,558 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-02-15 13:12:43,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:12:43,748 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-02-15 13:12:43,748 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-02-15 13:12:43,748 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1171697675] [2023-02-15 13:12:43,748 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1171697675] provided 1 perfect and 0 imperfect interpolant sequences [2023-02-15 13:12:43,748 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-02-15 13:12:43,748 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-02-15 13:12:43,748 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [721840561] [2023-02-15 13:12:43,748 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-02-15 13:12:43,749 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-02-15 13:12:43,749 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-02-15 13:12:43,749 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-02-15 13:12:43,749 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-02-15 13:12:43,749 INFO L87 Difference]: Start difference. First operand 305 states and 354 transitions. Second operand has 6 states, 4 states have (on average 6.25) internal successors, (25), 5 states have internal predecessors, (25), 2 states have call successors, (6), 2 states have call predecessors, (6), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-02-15 13:12:44,024 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-02-15 13:12:44,025 INFO L93 Difference]: Finished difference Result 304 states and 353 transitions. [2023-02-15 13:12:44,025 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-02-15 13:12:44,025 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 4 states have (on average 6.25) internal successors, (25), 5 states have internal predecessors, (25), 2 states have call successors, (6), 2 states have call predecessors, (6), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 31 [2023-02-15 13:12:44,025 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-02-15 13:12:44,026 INFO L225 Difference]: With dead ends: 304 [2023-02-15 13:12:44,026 INFO L226 Difference]: Without dead ends: 304 [2023-02-15 13:12:44,026 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2023-02-15 13:12:44,027 INFO L413 NwaCegarLoop]: 268 mSDtfsCounter, 62 mSDsluCounter, 605 mSDsCounter, 0 mSdLazyCounter, 499 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 62 SdHoareTripleChecker+Valid, 873 SdHoareTripleChecker+Invalid, 507 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 499 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-02-15 13:12:44,027 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [62 Valid, 873 Invalid, 507 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 499 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-02-15 13:12:44,027 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 304 states. [2023-02-15 13:12:44,030 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 304 to 303. [2023-02-15 13:12:44,032 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 303 states, 179 states have (on average 1.6592178770949721) internal successors, (297), 279 states have internal predecessors, (297), 32 states have call successors, (32), 12 states have call predecessors, (32), 8 states have return successors, (23), 14 states have call predecessors, (23), 18 states have call successors, (23) [2023-02-15 13:12:44,033 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 303 states to 303 states and 352 transitions. [2023-02-15 13:12:44,033 INFO L78 Accepts]: Start accepts. Automaton has 303 states and 352 transitions. Word has length 31 [2023-02-15 13:12:44,033 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-02-15 13:12:44,033 INFO L495 AbstractCegarLoop]: Abstraction has 303 states and 352 transitions. [2023-02-15 13:12:44,033 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 4 states have (on average 6.25) internal successors, (25), 5 states have internal predecessors, (25), 2 states have call successors, (6), 2 states have call predecessors, (6), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-02-15 13:12:44,033 INFO L276 IsEmpty]: Start isEmpty. Operand 303 states and 352 transitions. [2023-02-15 13:12:44,034 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2023-02-15 13:12:44,034 INFO L187 NwaCegarLoop]: Found error trace [2023-02-15 13:12:44,034 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-02-15 13:12:44,034 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2023-02-15 13:12:44,034 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ##fun~$Pointer$~TO~VOIDErr4REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-02-15 13:12:44,035 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2023-02-15 13:12:44,035 INFO L85 PathProgramCache]: Analyzing trace with hash 67060466, now seen corresponding path program 1 times [2023-02-15 13:12:44,035 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-02-15 13:12:44,035 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [815262883] [2023-02-15 13:12:44,035 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-02-15 13:12:44,035 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-02-15 13:12:44,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:12:44,141 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-02-15 13:12:44,142 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-02-15 13:12:44,142 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [815262883] [2023-02-15 13:12:44,142 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [815262883] provided 1 perfect and 0 imperfect interpolant sequences [2023-02-15 13:12:44,142 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-02-15 13:12:44,142 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-02-15 13:12:44,142 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [345597882] [2023-02-15 13:12:44,142 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-02-15 13:12:44,143 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-02-15 13:12:44,143 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-02-15 13:12:44,143 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-02-15 13:12:44,143 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2023-02-15 13:12:44,144 INFO L87 Difference]: Start difference. First operand 303 states and 352 transitions. Second operand has 7 states, 5 states have (on average 5.0) internal successors, (25), 6 states have internal predecessors, (25), 2 states have call successors, (6), 2 states have call predecessors, (6), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-02-15 13:12:44,357 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-02-15 13:12:44,357 INFO L93 Difference]: Finished difference Result 301 states and 350 transitions. [2023-02-15 13:12:44,357 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-02-15 13:12:44,358 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 5 states have (on average 5.0) internal successors, (25), 6 states have internal predecessors, (25), 2 states have call successors, (6), 2 states have call predecessors, (6), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 31 [2023-02-15 13:12:44,359 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-02-15 13:12:44,360 INFO L225 Difference]: With dead ends: 301 [2023-02-15 13:12:44,360 INFO L226 Difference]: Without dead ends: 301 [2023-02-15 13:12:44,361 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=49, Unknown=0, NotChecked=0, Total=72 [2023-02-15 13:12:44,362 INFO L413 NwaCegarLoop]: 270 mSDtfsCounter, 70 mSDsluCounter, 705 mSDsCounter, 0 mSdLazyCounter, 392 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 70 SdHoareTripleChecker+Valid, 975 SdHoareTripleChecker+Invalid, 402 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 392 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-02-15 13:12:44,362 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [70 Valid, 975 Invalid, 402 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 392 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-02-15 13:12:44,363 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 301 states. [2023-02-15 13:12:44,366 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 301 to 301. [2023-02-15 13:12:44,366 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 301 states, 179 states have (on average 1.6480446927374302) internal successors, (295), 277 states have internal predecessors, (295), 32 states have call successors, (32), 12 states have call predecessors, (32), 8 states have return successors, (23), 14 states have call predecessors, (23), 18 states have call successors, (23) [2023-02-15 13:12:44,367 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 301 states to 301 states and 350 transitions. [2023-02-15 13:12:44,367 INFO L78 Accepts]: Start accepts. Automaton has 301 states and 350 transitions. Word has length 31 [2023-02-15 13:12:44,367 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-02-15 13:12:44,368 INFO L495 AbstractCegarLoop]: Abstraction has 301 states and 350 transitions. [2023-02-15 13:12:44,368 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 5 states have (on average 5.0) internal successors, (25), 6 states have internal predecessors, (25), 2 states have call successors, (6), 2 states have call predecessors, (6), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-02-15 13:12:44,368 INFO L276 IsEmpty]: Start isEmpty. Operand 301 states and 350 transitions. [2023-02-15 13:12:44,370 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2023-02-15 13:12:44,370 INFO L187 NwaCegarLoop]: Found error trace [2023-02-15 13:12:44,371 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-02-15 13:12:44,371 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2023-02-15 13:12:44,371 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ##fun~$Pointer$~TO~VOIDErr6REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-02-15 13:12:44,371 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2023-02-15 13:12:44,371 INFO L85 PathProgramCache]: Analyzing trace with hash 20600531, now seen corresponding path program 1 times [2023-02-15 13:12:44,372 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-02-15 13:12:44,372 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [966159484] [2023-02-15 13:12:44,372 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-02-15 13:12:44,372 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-02-15 13:12:44,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:12:44,427 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-02-15 13:12:44,428 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-02-15 13:12:44,428 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [966159484] [2023-02-15 13:12:44,428 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [966159484] provided 1 perfect and 0 imperfect interpolant sequences [2023-02-15 13:12:44,428 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-02-15 13:12:44,428 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-02-15 13:12:44,428 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [662594543] [2023-02-15 13:12:44,429 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-02-15 13:12:44,430 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-02-15 13:12:44,430 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-02-15 13:12:44,430 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-02-15 13:12:44,430 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-02-15 13:12:44,430 INFO L87 Difference]: Start difference. First operand 301 states and 350 transitions. Second operand has 5 states, 4 states have (on average 6.25) internal successors, (25), 5 states have internal predecessors, (25), 1 states have call successors, (5), 1 states have call predecessors, (5), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-02-15 13:12:44,570 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-02-15 13:12:44,571 INFO L93 Difference]: Finished difference Result 300 states and 349 transitions. [2023-02-15 13:12:44,571 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-02-15 13:12:44,571 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 6.25) internal successors, (25), 5 states have internal predecessors, (25), 1 states have call successors, (5), 1 states have call predecessors, (5), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2023-02-15 13:12:44,572 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-02-15 13:12:44,576 INFO L225 Difference]: With dead ends: 300 [2023-02-15 13:12:44,576 INFO L226 Difference]: Without dead ends: 300 [2023-02-15 13:12:44,576 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-02-15 13:12:44,576 INFO L413 NwaCegarLoop]: 270 mSDtfsCounter, 38 mSDsluCounter, 531 mSDsCounter, 0 mSdLazyCounter, 281 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 801 SdHoareTripleChecker+Invalid, 282 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 281 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-02-15 13:12:44,577 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 801 Invalid, 282 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 281 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-02-15 13:12:44,578 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 300 states. [2023-02-15 13:12:44,583 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 300 to 300. [2023-02-15 13:12:44,583 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 300 states, 179 states have (on average 1.6424581005586592) internal successors, (294), 276 states have internal predecessors, (294), 32 states have call successors, (32), 12 states have call predecessors, (32), 8 states have return successors, (23), 14 states have call predecessors, (23), 18 states have call successors, (23) [2023-02-15 13:12:44,585 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 300 states to 300 states and 349 transitions. [2023-02-15 13:12:44,585 INFO L78 Accepts]: Start accepts. Automaton has 300 states and 349 transitions. Word has length 33 [2023-02-15 13:12:44,585 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-02-15 13:12:44,585 INFO L495 AbstractCegarLoop]: Abstraction has 300 states and 349 transitions. [2023-02-15 13:12:44,586 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 6.25) internal successors, (25), 5 states have internal predecessors, (25), 1 states have call successors, (5), 1 states have call predecessors, (5), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-02-15 13:12:44,586 INFO L276 IsEmpty]: Start isEmpty. Operand 300 states and 349 transitions. [2023-02-15 13:12:44,587 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2023-02-15 13:12:44,587 INFO L187 NwaCegarLoop]: Found error trace [2023-02-15 13:12:44,587 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-02-15 13:12:44,587 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2023-02-15 13:12:44,588 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ##fun~$Pointer$~TO~VOIDErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-02-15 13:12:44,589 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2023-02-15 13:12:44,589 INFO L85 PathProgramCache]: Analyzing trace with hash 20600532, now seen corresponding path program 1 times [2023-02-15 13:12:44,589 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-02-15 13:12:44,589 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [472326777] [2023-02-15 13:12:44,589 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-02-15 13:12:44,590 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-02-15 13:12:44,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:12:44,748 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-02-15 13:12:44,749 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-02-15 13:12:44,749 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [472326777] [2023-02-15 13:12:44,749 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [472326777] provided 1 perfect and 0 imperfect interpolant sequences [2023-02-15 13:12:44,749 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-02-15 13:12:44,749 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-02-15 13:12:44,749 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1374169915] [2023-02-15 13:12:44,750 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-02-15 13:12:44,750 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-02-15 13:12:44,750 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-02-15 13:12:44,750 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-02-15 13:12:44,750 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2023-02-15 13:12:44,751 INFO L87 Difference]: Start difference. First operand 300 states and 349 transitions. Second operand has 6 states, 5 states have (on average 5.0) internal successors, (25), 6 states have internal predecessors, (25), 1 states have call successors, (5), 1 states have call predecessors, (5), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-02-15 13:12:44,899 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-02-15 13:12:44,900 INFO L93 Difference]: Finished difference Result 299 states and 348 transitions. [2023-02-15 13:12:44,900 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-02-15 13:12:44,901 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 5.0) internal successors, (25), 6 states have internal predecessors, (25), 1 states have call successors, (5), 1 states have call predecessors, (5), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2023-02-15 13:12:44,901 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-02-15 13:12:44,902 INFO L225 Difference]: With dead ends: 299 [2023-02-15 13:12:44,902 INFO L226 Difference]: Without dead ends: 299 [2023-02-15 13:12:44,902 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2023-02-15 13:12:44,902 INFO L413 NwaCegarLoop]: 270 mSDtfsCounter, 36 mSDsluCounter, 816 mSDsCounter, 0 mSdLazyCounter, 259 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 1086 SdHoareTripleChecker+Invalid, 260 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 259 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-02-15 13:12:44,903 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [36 Valid, 1086 Invalid, 260 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 259 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-02-15 13:12:44,903 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 299 states. [2023-02-15 13:12:44,906 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 299 to 299. [2023-02-15 13:12:44,906 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 299 states, 179 states have (on average 1.6368715083798884) internal successors, (293), 275 states have internal predecessors, (293), 32 states have call successors, (32), 12 states have call predecessors, (32), 8 states have return successors, (23), 14 states have call predecessors, (23), 18 states have call successors, (23) [2023-02-15 13:12:44,907 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 299 states to 299 states and 348 transitions. [2023-02-15 13:12:44,907 INFO L78 Accepts]: Start accepts. Automaton has 299 states and 348 transitions. Word has length 33 [2023-02-15 13:12:44,908 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-02-15 13:12:44,908 INFO L495 AbstractCegarLoop]: Abstraction has 299 states and 348 transitions. [2023-02-15 13:12:44,908 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 5.0) internal successors, (25), 6 states have internal predecessors, (25), 1 states have call successors, (5), 1 states have call predecessors, (5), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-02-15 13:12:44,908 INFO L276 IsEmpty]: Start isEmpty. Operand 299 states and 348 transitions. [2023-02-15 13:12:44,908 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2023-02-15 13:12:44,908 INFO L187 NwaCegarLoop]: Found error trace [2023-02-15 13:12:44,909 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-02-15 13:12:44,909 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2023-02-15 13:12:44,909 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ##fun~$Pointer$~TO~VOIDErr8REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-02-15 13:12:44,909 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2023-02-15 13:12:44,909 INFO L85 PathProgramCache]: Analyzing trace with hash -1677723852, now seen corresponding path program 1 times [2023-02-15 13:12:44,909 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-02-15 13:12:44,909 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1820057009] [2023-02-15 13:12:44,910 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-02-15 13:12:44,910 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-02-15 13:12:44,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:12:45,155 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-02-15 13:12:45,155 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-02-15 13:12:45,156 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1820057009] [2023-02-15 13:12:45,156 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1820057009] provided 1 perfect and 0 imperfect interpolant sequences [2023-02-15 13:12:45,156 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-02-15 13:12:45,156 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2023-02-15 13:12:45,156 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [38939261] [2023-02-15 13:12:45,156 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-02-15 13:12:45,156 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2023-02-15 13:12:45,157 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-02-15 13:12:45,157 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2023-02-15 13:12:45,157 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2023-02-15 13:12:45,157 INFO L87 Difference]: Start difference. First operand 299 states and 348 transitions. Second operand has 9 states, 8 states have (on average 3.625) internal successors, (29), 8 states have internal predecessors, (29), 2 states have call successors, (6), 2 states have call predecessors, (6), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-02-15 13:12:45,417 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-02-15 13:12:45,417 INFO L93 Difference]: Finished difference Result 313 states and 363 transitions. [2023-02-15 13:12:45,417 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-02-15 13:12:45,417 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 8 states have (on average 3.625) internal successors, (29), 8 states have internal predecessors, (29), 2 states have call successors, (6), 2 states have call predecessors, (6), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 35 [2023-02-15 13:12:45,417 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-02-15 13:12:45,418 INFO L225 Difference]: With dead ends: 313 [2023-02-15 13:12:45,418 INFO L226 Difference]: Without dead ends: 313 [2023-02-15 13:12:45,419 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=111, Unknown=0, NotChecked=0, Total=156 [2023-02-15 13:12:45,419 INFO L413 NwaCegarLoop]: 271 mSDtfsCounter, 28 mSDsluCounter, 1316 mSDsCounter, 0 mSdLazyCounter, 384 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 1587 SdHoareTripleChecker+Invalid, 396 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 384 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-02-15 13:12:45,419 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [28 Valid, 1587 Invalid, 396 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 384 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-02-15 13:12:45,420 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 313 states. [2023-02-15 13:12:45,422 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 313 to 312. [2023-02-15 13:12:45,422 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 312 states, 191 states have (on average 1.5968586387434556) internal successors, (305), 288 states have internal predecessors, (305), 32 states have call successors, (32), 12 states have call predecessors, (32), 9 states have return successors, (25), 14 states have call predecessors, (25), 18 states have call successors, (25) [2023-02-15 13:12:45,423 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 312 states to 312 states and 362 transitions. [2023-02-15 13:12:45,424 INFO L78 Accepts]: Start accepts. Automaton has 312 states and 362 transitions. Word has length 35 [2023-02-15 13:12:45,424 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-02-15 13:12:45,424 INFO L495 AbstractCegarLoop]: Abstraction has 312 states and 362 transitions. [2023-02-15 13:12:45,424 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 8 states have (on average 3.625) internal successors, (29), 8 states have internal predecessors, (29), 2 states have call successors, (6), 2 states have call predecessors, (6), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-02-15 13:12:45,424 INFO L276 IsEmpty]: Start isEmpty. Operand 312 states and 362 transitions. [2023-02-15 13:12:45,425 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2023-02-15 13:12:45,425 INFO L187 NwaCegarLoop]: Found error trace [2023-02-15 13:12:45,425 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-02-15 13:12:45,425 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2023-02-15 13:12:45,425 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ##fun~$Pointer$~TO~VOIDErr8REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-02-15 13:12:45,426 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2023-02-15 13:12:45,426 INFO L85 PathProgramCache]: Analyzing trace with hash 1451018694, now seen corresponding path program 1 times [2023-02-15 13:12:45,426 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-02-15 13:12:45,426 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1105388846] [2023-02-15 13:12:45,426 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-02-15 13:12:45,426 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-02-15 13:12:45,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:12:45,848 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-02-15 13:12:45,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:12:45,997 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 4 proven. 11 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-02-15 13:12:45,998 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-02-15 13:12:45,998 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1105388846] [2023-02-15 13:12:45,998 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1105388846] provided 0 perfect and 1 imperfect interpolant sequences [2023-02-15 13:12:45,998 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [451356338] [2023-02-15 13:12:45,998 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-02-15 13:12:45,998 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-02-15 13:12:45,998 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2023-02-15 13:12:46,015 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-02-15 13:12:46,021 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-02-15 13:12:46,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:12:46,158 INFO L263 TraceCheckSpWp]: Trace formula consists of 495 conjuncts, 61 conjunts are in the unsatisfiable core [2023-02-15 13:12:46,173 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2023-02-15 13:12:46,281 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2023-02-15 13:12:46,320 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2023-02-15 13:12:46,427 INFO L321 Elim1Store]: treesize reduction 27, result has 25.0 percent of original size [2023-02-15 13:12:46,428 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 16 treesize of output 18 [2023-02-15 13:12:46,461 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-02-15 13:12:46,462 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2023-02-15 13:12:46,473 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-02-15 13:12:46,474 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2023-02-15 13:12:46,534 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 9 [2023-02-15 13:12:46,591 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 5 proven. 10 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-02-15 13:12:46,591 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2023-02-15 13:12:50,705 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_578 (Array Int Int)) (|v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_12| Int)) (or (= (select (store |c_#valid| |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_12| 1) (select (select (store |c_#memory_$Pointer$.base| |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_12| v_ArrVal_578) |c_##fun~$Pointer$~TO~VOID_#~10#1.base|) |c_##fun~$Pointer$~TO~VOID_#~10#1.offset|)) 1) (not (< |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_12| |c_#StackHeapBarrier|)))) is different from false [2023-02-15 13:12:50,792 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_578 (Array Int Int)) (|v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_12| Int)) (or (not (< |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_12| |c_#StackHeapBarrier|)) (= (select (store |c_#valid| |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_12| 1) (select (select (store |c_#memory_$Pointer$.base| |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_12| v_ArrVal_578) |c_dll_create_generic_~#dll~0.base|) |c_dll_create_generic_~#dll~0.offset|)) 1))) is different from false [2023-02-15 13:12:50,869 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-02-15 13:12:50,869 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 27 [2023-02-15 13:12:50,873 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 46 treesize of output 34 [2023-02-15 13:12:50,876 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 42 treesize of output 38 [2023-02-15 13:12:50,879 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 21 [2023-02-15 13:12:50,963 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-02-15 13:12:50,963 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2023-02-15 13:12:50,965 INFO L173 IndexEqualityManager]: detected equality via solver [2023-02-15 13:12:50,971 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-02-15 13:12:50,971 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 24 [2023-02-15 13:12:56,647 WARN L233 SmtUtils]: Spent 5.62s on a formula simplification that was a NOOP. DAG size: 28 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2023-02-15 13:13:03,991 WARN L233 SmtUtils]: Spent 7.22s on a formula simplification that was a NOOP. DAG size: 28 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2023-02-15 13:13:11,832 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 21 [2023-02-15 13:13:11,845 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 21 [2023-02-15 13:13:11,880 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 5 proven. 9 refuted. 0 times theorem prover too weak. 2 trivial. 1 not checked. [2023-02-15 13:13:11,880 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [451356338] provided 0 perfect and 2 imperfect interpolant sequences [2023-02-15 13:13:11,880 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-02-15 13:13:11,880 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 14, 14] total 37 [2023-02-15 13:13:11,880 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [908333266] [2023-02-15 13:13:11,881 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-02-15 13:13:11,881 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2023-02-15 13:13:11,881 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-02-15 13:13:11,882 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2023-02-15 13:13:11,882 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=112, Invalid=1119, Unknown=37, NotChecked=138, Total=1406 [2023-02-15 13:13:11,882 INFO L87 Difference]: Start difference. First operand 312 states and 362 transitions. Second operand has 38 states, 32 states have (on average 2.71875) internal successors, (87), 32 states have internal predecessors, (87), 6 states have call successors, (11), 5 states have call predecessors, (11), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2023-02-15 13:13:14,001 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-02-15 13:13:14,001 INFO L93 Difference]: Finished difference Result 316 states and 365 transitions. [2023-02-15 13:13:14,001 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2023-02-15 13:13:14,001 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 32 states have (on average 2.71875) internal successors, (87), 32 states have internal predecessors, (87), 6 states have call successors, (11), 5 states have call predecessors, (11), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) Word has length 51 [2023-02-15 13:13:14,002 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-02-15 13:13:14,002 INFO L225 Difference]: With dead ends: 316 [2023-02-15 13:13:14,002 INFO L226 Difference]: Without dead ends: 316 [2023-02-15 13:13:14,003 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 136 GetRequests, 85 SyntacticMatches, 1 SemanticMatches, 50 ConstructedPredicates, 2 IntricatePredicates, 0 DeprecatedPredicates, 403 ImplicationChecksByTransitivity, 25.7s TimeCoverageRelationStatistics Valid=372, Invalid=2047, Unknown=39, NotChecked=194, Total=2652 [2023-02-15 13:13:14,004 INFO L413 NwaCegarLoop]: 204 mSDtfsCounter, 253 mSDsluCounter, 3207 mSDsCounter, 0 mSdLazyCounter, 3276 mSolverCounterSat, 73 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 256 SdHoareTripleChecker+Valid, 3411 SdHoareTripleChecker+Invalid, 3724 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 73 IncrementalHoareTripleChecker+Valid, 3276 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 375 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2023-02-15 13:13:14,004 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [256 Valid, 3411 Invalid, 3724 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [73 Valid, 3276 Invalid, 0 Unknown, 375 Unchecked, 1.5s Time] [2023-02-15 13:13:14,004 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 316 states. [2023-02-15 13:13:14,007 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 316 to 311. [2023-02-15 13:13:14,007 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 311 states, 191 states have (on average 1.5916230366492146) internal successors, (304), 287 states have internal predecessors, (304), 32 states have call successors, (32), 12 states have call predecessors, (32), 9 states have return successors, (23), 14 states have call predecessors, (23), 18 states have call successors, (23) [2023-02-15 13:13:14,008 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 311 states to 311 states and 359 transitions. [2023-02-15 13:13:14,008 INFO L78 Accepts]: Start accepts. Automaton has 311 states and 359 transitions. Word has length 51 [2023-02-15 13:13:14,008 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-02-15 13:13:14,010 INFO L495 AbstractCegarLoop]: Abstraction has 311 states and 359 transitions. [2023-02-15 13:13:14,010 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 32 states have (on average 2.71875) internal successors, (87), 32 states have internal predecessors, (87), 6 states have call successors, (11), 5 states have call predecessors, (11), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2023-02-15 13:13:14,010 INFO L276 IsEmpty]: Start isEmpty. Operand 311 states and 359 transitions. [2023-02-15 13:13:14,011 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2023-02-15 13:13:14,011 INFO L187 NwaCegarLoop]: Found error trace [2023-02-15 13:13:14,011 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-02-15 13:13:14,029 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2023-02-15 13:13:14,217 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2023-02-15 13:13:14,217 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting ##fun~$Pointer$~TO~VOIDErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-02-15 13:13:14,217 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2023-02-15 13:13:14,218 INFO L85 PathProgramCache]: Analyzing trace with hash 1451018695, now seen corresponding path program 1 times [2023-02-15 13:13:14,218 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-02-15 13:13:14,218 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [392894727] [2023-02-15 13:13:14,218 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-02-15 13:13:14,218 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-02-15 13:13:14,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:13:14,768 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-02-15 13:13:14,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:13:14,970 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 4 proven. 11 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-02-15 13:13:14,970 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-02-15 13:13:14,970 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [392894727] [2023-02-15 13:13:14,970 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [392894727] provided 0 perfect and 1 imperfect interpolant sequences [2023-02-15 13:13:14,970 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [64694150] [2023-02-15 13:13:14,971 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-02-15 13:13:14,971 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-02-15 13:13:14,971 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2023-02-15 13:13:14,983 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-02-15 13:13:14,983 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-02-15 13:13:15,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:13:15,131 INFO L263 TraceCheckSpWp]: Trace formula consists of 495 conjuncts, 82 conjunts are in the unsatisfiable core [2023-02-15 13:13:15,135 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2023-02-15 13:13:15,154 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2023-02-15 13:13:15,353 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2023-02-15 13:13:15,357 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2023-02-15 13:13:15,511 INFO L321 Elim1Store]: treesize reduction 20, result has 39.4 percent of original size [2023-02-15 13:13:15,512 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 20 treesize of output 22 [2023-02-15 13:13:15,520 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2023-02-15 13:13:15,559 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2023-02-15 13:13:15,567 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 24 [2023-02-15 13:13:15,576 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 24 [2023-02-15 13:13:15,581 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2023-02-15 13:13:15,620 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2023-02-15 13:13:15,623 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 9 [2023-02-15 13:13:15,677 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 5 proven. 10 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-02-15 13:13:15,677 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2023-02-15 13:13:15,777 WARN L837 $PredicateComparison]: unable to prove that (and (forall ((v_ArrVal_769 (Array Int Int))) (<= 0 (+ (select (select (store |c_#memory_$Pointer$.offset| |c_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base| v_ArrVal_769) |c_##fun~$Pointer$~TO~VOID_dll_insert_slave_~dll#1.base|) |c_##fun~$Pointer$~TO~VOID_dll_insert_slave_~dll#1.offset|) 4))) (forall ((v_ArrVal_768 (Array Int Int)) (v_ArrVal_769 (Array Int Int))) (<= (+ (select (select (store |c_#memory_$Pointer$.offset| |c_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base| v_ArrVal_769) |c_##fun~$Pointer$~TO~VOID_dll_insert_slave_~dll#1.base|) |c_##fun~$Pointer$~TO~VOID_dll_insert_slave_~dll#1.offset|) 8) (select |c_#length| (select (select (store |c_#memory_$Pointer$.base| |c_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base| v_ArrVal_768) |c_##fun~$Pointer$~TO~VOID_dll_insert_slave_~dll#1.base|) |c_##fun~$Pointer$~TO~VOID_dll_insert_slave_~dll#1.offset|))))) is different from false [2023-02-15 13:13:17,149 INFO L321 Elim1Store]: treesize reduction 7, result has 12.5 percent of original size [2023-02-15 13:13:17,150 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 81 treesize of output 1 [2023-02-15 13:13:17,183 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-02-15 13:13:17,183 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 41 [2023-02-15 13:13:17,189 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-02-15 13:13:17,190 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 32 treesize of output 33 [2023-02-15 13:13:17,198 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-02-15 13:13:17,199 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 58 treesize of output 61 [2023-02-15 13:13:17,211 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-02-15 13:13:17,211 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 94 treesize of output 93 [2023-02-15 13:13:17,217 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 40 treesize of output 36 [2023-02-15 13:13:17,220 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 74 treesize of output 70 [2023-02-15 13:13:17,361 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-02-15 13:13:17,361 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 20 treesize of output 21 [2023-02-15 13:13:17,364 INFO L173 IndexEqualityManager]: detected equality via solver [2023-02-15 13:13:17,369 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-02-15 13:13:17,370 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 21 [2023-02-15 13:13:43,622 WARN L233 SmtUtils]: Spent 26.19s on a formula simplification. DAG size of input: 46 DAG size of output: 35 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2023-02-15 13:13:51,857 WARN L233 SmtUtils]: Spent 8.13s on a formula simplification. DAG size of input: 40 DAG size of output: 37 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2023-02-15 13:14:00,121 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 70 treesize of output 66 [2023-02-15 13:14:00,250 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-02-15 13:14:00,251 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 43 treesize of output 61 [2023-02-15 13:14:00,297 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 4 proven. 7 refuted. 0 times theorem prover too weak. 3 trivial. 3 not checked. [2023-02-15 13:14:00,297 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [64694150] provided 0 perfect and 2 imperfect interpolant sequences [2023-02-15 13:14:00,297 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-02-15 13:14:00,297 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 16, 14] total 40 [2023-02-15 13:14:00,298 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [730775667] [2023-02-15 13:14:00,298 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-02-15 13:14:00,298 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 41 states [2023-02-15 13:14:00,298 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-02-15 13:14:00,298 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 41 interpolants. [2023-02-15 13:14:00,299 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=109, Invalid=1453, Unknown=2, NotChecked=76, Total=1640 [2023-02-15 13:14:00,299 INFO L87 Difference]: Start difference. First operand 311 states and 359 transitions. Second operand has 41 states, 36 states have (on average 2.611111111111111) internal successors, (94), 36 states have internal predecessors, (94), 5 states have call successors, (10), 5 states have call predecessors, (10), 3 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2023-02-15 13:14:03,390 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-02-15 13:14:03,390 INFO L93 Difference]: Finished difference Result 311 states and 359 transitions. [2023-02-15 13:14:03,390 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2023-02-15 13:14:03,391 INFO L78 Accepts]: Start accepts. Automaton has has 41 states, 36 states have (on average 2.611111111111111) internal successors, (94), 36 states have internal predecessors, (94), 5 states have call successors, (10), 5 states have call predecessors, (10), 3 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2023-02-15 13:14:03,391 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-02-15 13:14:03,392 INFO L225 Difference]: With dead ends: 311 [2023-02-15 13:14:03,392 INFO L226 Difference]: Without dead ends: 311 [2023-02-15 13:14:03,392 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 134 GetRequests, 78 SyntacticMatches, 1 SemanticMatches, 55 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 344 ImplicationChecksByTransitivity, 45.5s TimeCoverageRelationStatistics Valid=455, Invalid=2627, Unknown=2, NotChecked=108, Total=3192 [2023-02-15 13:14:03,393 INFO L413 NwaCegarLoop]: 205 mSDtfsCounter, 290 mSDsluCounter, 3000 mSDsCounter, 0 mSdLazyCounter, 3678 mSolverCounterSat, 72 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 293 SdHoareTripleChecker+Valid, 3205 SdHoareTripleChecker+Invalid, 3916 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 72 IncrementalHoareTripleChecker+Valid, 3678 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 166 IncrementalHoareTripleChecker+Unchecked, 2.0s IncrementalHoareTripleChecker+Time [2023-02-15 13:14:03,393 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [293 Valid, 3205 Invalid, 3916 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [72 Valid, 3678 Invalid, 0 Unknown, 166 Unchecked, 2.0s Time] [2023-02-15 13:14:03,393 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 311 states. [2023-02-15 13:14:03,396 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 311 to 310. [2023-02-15 13:14:03,397 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 310 states, 191 states have (on average 1.5863874345549738) internal successors, (303), 286 states have internal predecessors, (303), 32 states have call successors, (32), 12 states have call predecessors, (32), 9 states have return successors, (23), 14 states have call predecessors, (23), 18 states have call successors, (23) [2023-02-15 13:14:03,397 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 310 states to 310 states and 358 transitions. [2023-02-15 13:14:03,397 INFO L78 Accepts]: Start accepts. Automaton has 310 states and 358 transitions. Word has length 51 [2023-02-15 13:14:03,398 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-02-15 13:14:03,398 INFO L495 AbstractCegarLoop]: Abstraction has 310 states and 358 transitions. [2023-02-15 13:14:03,398 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 41 states, 36 states have (on average 2.611111111111111) internal successors, (94), 36 states have internal predecessors, (94), 5 states have call successors, (10), 5 states have call predecessors, (10), 3 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2023-02-15 13:14:03,398 INFO L276 IsEmpty]: Start isEmpty. Operand 310 states and 358 transitions. [2023-02-15 13:14:03,398 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2023-02-15 13:14:03,398 INFO L187 NwaCegarLoop]: Found error trace [2023-02-15 13:14:03,399 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-02-15 13:14:03,417 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-02-15 13:14:03,604 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable17 [2023-02-15 13:14:03,605 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting dll_insert_masterErr10REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-02-15 13:14:03,605 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2023-02-15 13:14:03,605 INFO L85 PathProgramCache]: Analyzing trace with hash -470108245, now seen corresponding path program 1 times [2023-02-15 13:14:03,605 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-02-15 13:14:03,605 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [367922002] [2023-02-15 13:14:03,605 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-02-15 13:14:03,605 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-02-15 13:14:03,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:14:03,705 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-02-15 13:14:03,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:14:03,720 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 18 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-02-15 13:14:03,720 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-02-15 13:14:03,720 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [367922002] [2023-02-15 13:14:03,720 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [367922002] provided 0 perfect and 1 imperfect interpolant sequences [2023-02-15 13:14:03,720 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1690081683] [2023-02-15 13:14:03,720 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-02-15 13:14:03,721 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-02-15 13:14:03,721 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2023-02-15 13:14:03,722 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-02-15 13:14:03,724 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-02-15 13:14:03,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:14:03,874 INFO L263 TraceCheckSpWp]: Trace formula consists of 524 conjuncts, 4 conjunts are in the unsatisfiable core [2023-02-15 13:14:03,880 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2023-02-15 13:14:03,890 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-02-15 13:14:03,891 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-02-15 13:14:03,891 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1690081683] provided 1 perfect and 0 imperfect interpolant sequences [2023-02-15 13:14:03,891 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-02-15 13:14:03,891 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [6] total 6 [2023-02-15 13:14:03,891 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [366095945] [2023-02-15 13:14:03,891 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-02-15 13:14:03,892 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-02-15 13:14:03,892 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-02-15 13:14:03,893 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-02-15 13:14:03,893 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-02-15 13:14:03,893 INFO L87 Difference]: Start difference. First operand 310 states and 358 transitions. Second operand has 5 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (8), 4 states have call predecessors, (8), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-02-15 13:14:03,943 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-02-15 13:14:03,944 INFO L93 Difference]: Finished difference Result 296 states and 332 transitions. [2023-02-15 13:14:03,944 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-02-15 13:14:03,944 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (8), 4 states have call predecessors, (8), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 54 [2023-02-15 13:14:03,944 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-02-15 13:14:03,945 INFO L225 Difference]: With dead ends: 296 [2023-02-15 13:14:03,945 INFO L226 Difference]: Without dead ends: 296 [2023-02-15 13:14:03,945 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 62 GetRequests, 57 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2023-02-15 13:14:03,946 INFO L413 NwaCegarLoop]: 277 mSDtfsCounter, 28 mSDsluCounter, 801 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 1078 SdHoareTripleChecker+Invalid, 36 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-02-15 13:14:03,947 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [28 Valid, 1078 Invalid, 36 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-02-15 13:14:03,948 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 296 states. [2023-02-15 13:14:03,950 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 296 to 296. [2023-02-15 13:14:03,950 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 296 states, 180 states have (on average 1.5944444444444446) internal successors, (287), 275 states have internal predecessors, (287), 29 states have call successors, (29), 11 states have call predecessors, (29), 9 states have return successors, (16), 12 states have call predecessors, (16), 15 states have call successors, (16) [2023-02-15 13:14:03,951 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 296 states to 296 states and 332 transitions. [2023-02-15 13:14:03,951 INFO L78 Accepts]: Start accepts. Automaton has 296 states and 332 transitions. Word has length 54 [2023-02-15 13:14:03,952 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-02-15 13:14:03,952 INFO L495 AbstractCegarLoop]: Abstraction has 296 states and 332 transitions. [2023-02-15 13:14:03,952 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (8), 4 states have call predecessors, (8), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-02-15 13:14:03,952 INFO L276 IsEmpty]: Start isEmpty. Operand 296 states and 332 transitions. [2023-02-15 13:14:03,952 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2023-02-15 13:14:03,952 INFO L187 NwaCegarLoop]: Found error trace [2023-02-15 13:14:03,953 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-02-15 13:14:03,960 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2023-02-15 13:14:04,158 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-02-15 13:14:04,159 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting dll_insert_masterErr12REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-02-15 13:14:04,159 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2023-02-15 13:14:04,159 INFO L85 PathProgramCache]: Analyzing trace with hash -996489836, now seen corresponding path program 1 times [2023-02-15 13:14:04,159 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-02-15 13:14:04,160 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [971733410] [2023-02-15 13:14:04,160 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-02-15 13:14:04,160 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-02-15 13:14:04,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:14:04,553 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-02-15 13:14:04,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:14:04,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2023-02-15 13:14:04,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:14:04,921 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-02-15 13:14:04,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:14:05,037 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-02-15 13:14:05,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:14:05,288 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 6 proven. 13 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-02-15 13:14:05,288 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-02-15 13:14:05,288 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [971733410] [2023-02-15 13:14:05,288 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [971733410] provided 0 perfect and 1 imperfect interpolant sequences [2023-02-15 13:14:05,288 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [370142088] [2023-02-15 13:14:05,288 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-02-15 13:14:05,288 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-02-15 13:14:05,289 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2023-02-15 13:14:05,297 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-02-15 13:14:05,299 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2023-02-15 13:14:05,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:14:05,468 INFO L263 TraceCheckSpWp]: Trace formula consists of 550 conjuncts, 58 conjunts are in the unsatisfiable core [2023-02-15 13:14:05,470 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2023-02-15 13:14:05,550 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2023-02-15 13:14:05,596 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 4 [2023-02-15 13:14:05,881 WARN L859 $PredicateComparison]: unable to prove that (exists ((|##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base| Int) (v_ArrVal_1295 (Array Int Int))) (and (< |##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base| |c_#StackHeapBarrier|) (= |c_##fun~$Pointer$~TO~VOID_dll_insert_slave_~next~0#1.base| (select (select (store |c_old(#memory_$Pointer$.base)| |##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base| v_ArrVal_1295) |c_##fun~$Pointer$~TO~VOID_#in~10#1.base|) |c_##fun~$Pointer$~TO~VOID_#in~10#1.offset|)))) is different from true [2023-02-15 13:14:05,887 WARN L859 $PredicateComparison]: unable to prove that (exists ((|##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base| Int) (v_ArrVal_1295 (Array Int Int))) (and (< |##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base| |c_#StackHeapBarrier|) (= (select (select (store |c_old(#memory_$Pointer$.base)| |##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base| v_ArrVal_1295) |c_##fun~$Pointer$~TO~VOID_#in~10#1.base|) |c_##fun~$Pointer$~TO~VOID_#in~10#1.offset|) 0))) is different from true [2023-02-15 13:14:05,901 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-02-15 13:14:05,902 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 6 proven. 8 refuted. 0 times theorem prover too weak. 2 trivial. 5 not checked. [2023-02-15 13:14:05,902 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2023-02-15 13:14:06,273 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1318 (Array Int Int)) (|v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_40| Int)) (or (not (< |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_40| |c_#StackHeapBarrier|)) (not (= (select (select (store |c_#memory_$Pointer$.base| |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_40| v_ArrVal_1318) |c_dll_create_generic_~#dll~0.base|) |c_dll_create_generic_~#dll~0.offset|) 0)))) is different from false [2023-02-15 13:14:06,274 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [370142088] provided 0 perfect and 1 imperfect interpolant sequences [2023-02-15 13:14:06,274 INFO L184 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2023-02-15 13:14:06,274 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 19] total 32 [2023-02-15 13:14:06,274 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [122238590] [2023-02-15 13:14:06,275 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2023-02-15 13:14:06,275 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2023-02-15 13:14:06,275 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-02-15 13:14:06,275 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2023-02-15 13:14:06,276 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=81, Invalid=797, Unknown=4, NotChecked=174, Total=1056 [2023-02-15 13:14:06,276 INFO L87 Difference]: Start difference. First operand 296 states and 332 transitions. Second operand has 32 states, 29 states have (on average 2.6206896551724137) internal successors, (76), 28 states have internal predecessors, (76), 5 states have call successors, (11), 3 states have call predecessors, (11), 5 states have return successors, (7), 3 states have call predecessors, (7), 5 states have call successors, (7) [2023-02-15 13:14:10,471 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-02-15 13:14:10,472 INFO L93 Difference]: Finished difference Result 300 states and 335 transitions. [2023-02-15 13:14:10,472 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2023-02-15 13:14:10,472 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 29 states have (on average 2.6206896551724137) internal successors, (76), 28 states have internal predecessors, (76), 5 states have call successors, (11), 3 states have call predecessors, (11), 5 states have return successors, (7), 3 states have call predecessors, (7), 5 states have call successors, (7) Word has length 64 [2023-02-15 13:14:10,472 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-02-15 13:14:10,473 INFO L225 Difference]: With dead ends: 300 [2023-02-15 13:14:10,473 INFO L226 Difference]: Without dead ends: 296 [2023-02-15 13:14:10,474 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 119 GetRequests, 70 SyntacticMatches, 1 SemanticMatches, 48 ConstructedPredicates, 3 IntricatePredicates, 0 DeprecatedPredicates, 369 ImplicationChecksByTransitivity, 3.3s TimeCoverageRelationStatistics Valid=258, Invalid=1904, Unknown=12, NotChecked=276, Total=2450 [2023-02-15 13:14:10,474 INFO L413 NwaCegarLoop]: 196 mSDtfsCounter, 175 mSDsluCounter, 3335 mSDsCounter, 0 mSdLazyCounter, 2691 mSolverCounterSat, 31 mSolverCounterUnsat, 8 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 177 SdHoareTripleChecker+Valid, 3531 SdHoareTripleChecker+Invalid, 3297 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 2691 IncrementalHoareTripleChecker+Invalid, 8 IncrementalHoareTripleChecker+Unknown, 567 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2023-02-15 13:14:10,474 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [177 Valid, 3531 Invalid, 3297 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 2691 Invalid, 8 Unknown, 567 Unchecked, 1.4s Time] [2023-02-15 13:14:10,475 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 296 states. [2023-02-15 13:14:10,479 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 296 to 296. [2023-02-15 13:14:10,481 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 296 states, 180 states have (on average 1.5888888888888888) internal successors, (286), 275 states have internal predecessors, (286), 29 states have call successors, (29), 11 states have call predecessors, (29), 9 states have return successors, (16), 12 states have call predecessors, (16), 15 states have call successors, (16) [2023-02-15 13:14:10,483 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 296 states to 296 states and 331 transitions. [2023-02-15 13:14:10,483 INFO L78 Accepts]: Start accepts. Automaton has 296 states and 331 transitions. Word has length 64 [2023-02-15 13:14:10,484 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-02-15 13:14:10,484 INFO L495 AbstractCegarLoop]: Abstraction has 296 states and 331 transitions. [2023-02-15 13:14:10,484 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 29 states have (on average 2.6206896551724137) internal successors, (76), 28 states have internal predecessors, (76), 5 states have call successors, (11), 3 states have call predecessors, (11), 5 states have return successors, (7), 3 states have call predecessors, (7), 5 states have call successors, (7) [2023-02-15 13:14:10,486 INFO L276 IsEmpty]: Start isEmpty. Operand 296 states and 331 transitions. [2023-02-15 13:14:10,486 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2023-02-15 13:14:10,486 INFO L187 NwaCegarLoop]: Found error trace [2023-02-15 13:14:10,487 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-02-15 13:14:10,502 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2023-02-15 13:14:10,692 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19,5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-02-15 13:14:10,692 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting dll_insert_masterErr12REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-02-15 13:14:10,693 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2023-02-15 13:14:10,693 INFO L85 PathProgramCache]: Analyzing trace with hash 2033150353, now seen corresponding path program 1 times [2023-02-15 13:14:10,693 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-02-15 13:14:10,693 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [650947127] [2023-02-15 13:14:10,693 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-02-15 13:14:10,695 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-02-15 13:14:10,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:14:11,299 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-02-15 13:14:11,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:14:11,758 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2023-02-15 13:14:11,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:14:14,257 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-02-15 13:14:14,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:14:14,833 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-02-15 13:14:14,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:14:16,541 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 7 proven. 13 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-02-15 13:14:16,541 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-02-15 13:14:16,541 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [650947127] [2023-02-15 13:14:16,542 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [650947127] provided 0 perfect and 1 imperfect interpolant sequences [2023-02-15 13:14:16,542 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [716061363] [2023-02-15 13:14:16,542 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-02-15 13:14:16,542 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-02-15 13:14:16,542 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2023-02-15 13:14:16,549 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-02-15 13:14:16,568 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2023-02-15 13:14:16,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:14:16,757 INFO L263 TraceCheckSpWp]: Trace formula consists of 563 conjuncts, 35 conjunts are in the unsatisfiable core [2023-02-15 13:14:16,766 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2023-02-15 13:14:17,084 WARN L859 $PredicateComparison]: unable to prove that (exists ((|##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base| Int)) (= |c_#valid| (store |c_old(#valid)| |##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base| 1))) is different from true [2023-02-15 13:14:17,299 INFO L321 Elim1Store]: treesize reduction 101, result has 24.1 percent of original size [2023-02-15 13:14:17,299 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 35 treesize of output 50 [2023-02-15 13:14:17,305 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 7 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 13 not checked. [2023-02-15 13:14:17,305 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2023-02-15 13:14:17,456 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [716061363] provided 0 perfect and 1 imperfect interpolant sequences [2023-02-15 13:14:17,456 INFO L184 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2023-02-15 13:14:17,456 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [28, 12] total 38 [2023-02-15 13:14:17,457 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1750189784] [2023-02-15 13:14:17,457 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2023-02-15 13:14:17,457 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 39 states [2023-02-15 13:14:17,457 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-02-15 13:14:17,458 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 39 interpolants. [2023-02-15 13:14:17,458 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=157, Invalid=1328, Unknown=1, NotChecked=74, Total=1560 [2023-02-15 13:14:17,458 INFO L87 Difference]: Start difference. First operand 296 states and 331 transitions. Second operand has 39 states, 34 states have (on average 2.911764705882353) internal successors, (99), 36 states have internal predecessors, (99), 8 states have call successors, (11), 3 states have call predecessors, (11), 7 states have return successors, (8), 7 states have call predecessors, (8), 7 states have call successors, (8) [2023-02-15 13:14:20,799 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-02-15 13:14:20,799 INFO L93 Difference]: Finished difference Result 327 states and 375 transitions. [2023-02-15 13:14:20,799 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2023-02-15 13:14:20,799 INFO L78 Accepts]: Start accepts. Automaton has has 39 states, 34 states have (on average 2.911764705882353) internal successors, (99), 36 states have internal predecessors, (99), 8 states have call successors, (11), 3 states have call predecessors, (11), 7 states have return successors, (8), 7 states have call predecessors, (8), 7 states have call successors, (8) Word has length 65 [2023-02-15 13:14:20,800 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-02-15 13:14:20,810 INFO L225 Difference]: With dead ends: 327 [2023-02-15 13:14:20,810 INFO L226 Difference]: Without dead ends: 327 [2023-02-15 13:14:20,811 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 124 GetRequests, 67 SyntacticMatches, 1 SemanticMatches, 56 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 586 ImplicationChecksByTransitivity, 2.6s TimeCoverageRelationStatistics Valid=367, Invalid=2828, Unknown=1, NotChecked=110, Total=3306 [2023-02-15 13:14:20,812 INFO L413 NwaCegarLoop]: 187 mSDtfsCounter, 355 mSDsluCounter, 1661 mSDsCounter, 0 mSdLazyCounter, 3367 mSolverCounterSat, 86 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 355 SdHoareTripleChecker+Valid, 1848 SdHoareTripleChecker+Invalid, 3733 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 86 IncrementalHoareTripleChecker+Valid, 3367 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 280 IncrementalHoareTripleChecker+Unchecked, 2.0s IncrementalHoareTripleChecker+Time [2023-02-15 13:14:20,812 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [355 Valid, 1848 Invalid, 3733 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [86 Valid, 3367 Invalid, 0 Unknown, 280 Unchecked, 2.0s Time] [2023-02-15 13:14:20,813 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 327 states. [2023-02-15 13:14:20,829 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 327 to 307. [2023-02-15 13:14:20,830 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 307 states, 189 states have (on average 1.5767195767195767) internal successors, (298), 282 states have internal predecessors, (298), 29 states have call successors, (29), 11 states have call predecessors, (29), 11 states have return successors, (19), 16 states have call predecessors, (19), 15 states have call successors, (19) [2023-02-15 13:14:20,835 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 307 states to 307 states and 346 transitions. [2023-02-15 13:14:20,835 INFO L78 Accepts]: Start accepts. Automaton has 307 states and 346 transitions. Word has length 65 [2023-02-15 13:14:20,835 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-02-15 13:14:20,835 INFO L495 AbstractCegarLoop]: Abstraction has 307 states and 346 transitions. [2023-02-15 13:14:20,836 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 39 states, 34 states have (on average 2.911764705882353) internal successors, (99), 36 states have internal predecessors, (99), 8 states have call successors, (11), 3 states have call predecessors, (11), 7 states have return successors, (8), 7 states have call predecessors, (8), 7 states have call successors, (8) [2023-02-15 13:14:20,836 INFO L276 IsEmpty]: Start isEmpty. Operand 307 states and 346 transitions. [2023-02-15 13:14:20,836 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2023-02-15 13:14:20,836 INFO L187 NwaCegarLoop]: Found error trace [2023-02-15 13:14:20,836 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-02-15 13:14:20,846 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2023-02-15 13:14:21,040 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20,6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-02-15 13:14:21,041 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting dll_insert_masterErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-02-15 13:14:21,041 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2023-02-15 13:14:21,041 INFO L85 PathProgramCache]: Analyzing trace with hash 2033150354, now seen corresponding path program 1 times [2023-02-15 13:14:21,041 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-02-15 13:14:21,041 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [815524216] [2023-02-15 13:14:21,041 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-02-15 13:14:21,041 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-02-15 13:14:21,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:14:21,396 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-02-15 13:14:21,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-02-15 13:14:21,692 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2023-02-15 13:14:21,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat