./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/ldv-memsafety/memleaks_test18_3.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version 6b4ec56b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/ldv-memsafety/memleaks_test18_3.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9 --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 1df58a12292e53aa25870e709e17978d63a0e61d4dd56fb439981d66ecb6b925 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-6b4ec56 [2022-11-20 20:33:03,541 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-20 20:33:03,545 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-20 20:33:03,596 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-20 20:33:03,598 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-20 20:33:03,603 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-20 20:33:03,607 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-20 20:33:03,611 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-20 20:33:03,614 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-20 20:33:03,621 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-20 20:33:03,623 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-20 20:33:03,627 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-20 20:33:03,627 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-20 20:33:03,631 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-20 20:33:03,633 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-20 20:33:03,637 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-20 20:33:03,639 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-20 20:33:03,640 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-20 20:33:03,642 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-20 20:33:03,651 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-20 20:33:03,653 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-20 20:33:03,655 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-20 20:33:03,657 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-20 20:33:03,659 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-20 20:33:03,672 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-20 20:33:03,672 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-20 20:33:03,673 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-20 20:33:03,675 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-20 20:33:03,676 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-20 20:33:03,678 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-20 20:33:03,679 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-20 20:33:03,680 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-20 20:33:03,682 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-20 20:33:03,685 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-20 20:33:03,686 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-20 20:33:03,687 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-20 20:33:03,688 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-20 20:33:03,688 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-20 20:33:03,689 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-20 20:33:03,691 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-20 20:33:03,692 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-20 20:33:03,693 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf [2022-11-20 20:33:03,747 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-20 20:33:03,748 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-20 20:33:03,749 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-20 20:33:03,749 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-20 20:33:03,750 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-20 20:33:03,751 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-20 20:33:03,751 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-20 20:33:03,751 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-20 20:33:03,752 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-20 20:33:03,752 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-20 20:33:03,753 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-20 20:33:03,754 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-20 20:33:03,754 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-20 20:33:03,755 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-20 20:33:03,755 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-20 20:33:03,755 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-20 20:33:03,756 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-20 20:33:03,756 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-20 20:33:03,757 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-20 20:33:03,757 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-20 20:33:03,757 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-20 20:33:03,758 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-20 20:33:03,758 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-20 20:33:03,758 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-20 20:33:03,759 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-20 20:33:03,759 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-20 20:33:03,759 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-11-20 20:33:03,760 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-11-20 20:33:03,760 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-11-20 20:33:03,760 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-20 20:33:03,761 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-11-20 20:33:03,761 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-20 20:33:03,761 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-20 20:33:03,762 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-20 20:33:03,762 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-20 20:33:03,762 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-20 20:33:03,763 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-20 20:33:03,778 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-20 20:33:03,778 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-20 20:33:03,778 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-20 20:33:03,779 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-20 20:33:03,779 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-20 20:33:03,779 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1df58a12292e53aa25870e709e17978d63a0e61d4dd56fb439981d66ecb6b925 [2022-11-20 20:33:04,184 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-20 20:33:04,224 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-20 20:33:04,227 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-20 20:33:04,229 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-20 20:33:04,229 INFO L275 PluginConnector]: CDTParser initialized [2022-11-20 20:33:04,231 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/../../sv-benchmarks/c/ldv-memsafety/memleaks_test18_3.i [2022-11-20 20:33:07,427 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-20 20:33:07,876 INFO L351 CDTParser]: Found 1 translation units. [2022-11-20 20:33:07,877 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/sv-benchmarks/c/ldv-memsafety/memleaks_test18_3.i [2022-11-20 20:33:07,893 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/data/e07d0b567/b729132d1421406498f41827e36fc127/FLAG9ff1c80ff [2022-11-20 20:33:07,911 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/data/e07d0b567/b729132d1421406498f41827e36fc127 [2022-11-20 20:33:07,914 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-20 20:33:07,916 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-20 20:33:07,918 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-20 20:33:07,918 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-20 20:33:07,926 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-20 20:33:07,927 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 08:33:07" (1/1) ... [2022-11-20 20:33:07,929 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@c953fb1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:33:07, skipping insertion in model container [2022-11-20 20:33:07,930 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 08:33:07" (1/1) ... [2022-11-20 20:33:07,940 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-20 20:33:07,997 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-20 20:33:08,616 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-20 20:33:08,651 ERROR L326 MainTranslator]: Unsupported Syntax: Found a cast between two array/pointer types of different sizes while using memory model HoenickeLindenmann_Original (while Not using bitvector translation) [2022-11-20 20:33:08,652 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieTranslatorObserver@79276215 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:33:08, skipping insertion in model container [2022-11-20 20:33:08,653 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-20 20:33:08,653 INFO L184 ToolchainWalker]: Toolchain execution was canceled (user or tool) before executing de.uni_freiburg.informatik.ultimate.boogie.procedureinliner [2022-11-20 20:33:08,657 INFO L158 Benchmark]: Toolchain (without parser) took 739.85ms. Allocated memory is still 155.2MB. Free memory was 126.8MB in the beginning and 113.2MB in the end (delta: 13.5MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2022-11-20 20:33:08,657 INFO L158 Benchmark]: CDTParser took 0.36ms. Allocated memory is still 113.2MB. Free memory is still 84.5MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-20 20:33:08,659 INFO L158 Benchmark]: CACSL2BoogieTranslator took 735.56ms. Allocated memory is still 155.2MB. Free memory was 126.3MB in the beginning and 113.3MB in the end (delta: 13.0MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2022-11-20 20:33:08,661 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.36ms. Allocated memory is still 113.2MB. Free memory is still 84.5MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 735.56ms. Allocated memory is still 155.2MB. Free memory was 126.3MB in the beginning and 113.3MB in the end (delta: 13.0MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - UnsupportedSyntaxResult [Line: 576]: Unsupported Syntax Found a cast between two array/pointer types of different sizes while using memory model HoenickeLindenmann_Original (while Not using bitvector translation) RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/ldv-memsafety/memleaks_test18_3.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9 --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 1df58a12292e53aa25870e709e17978d63a0e61d4dd56fb439981d66ecb6b925 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-6b4ec56 [2022-11-20 20:33:11,459 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-20 20:33:11,462 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-20 20:33:11,509 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-20 20:33:11,518 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-20 20:33:11,523 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-20 20:33:11,529 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-20 20:33:11,532 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-20 20:33:11,536 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-20 20:33:11,542 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-20 20:33:11,544 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-20 20:33:11,546 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-20 20:33:11,548 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-20 20:33:11,551 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-20 20:33:11,553 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-20 20:33:11,557 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-20 20:33:11,559 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-20 20:33:11,560 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-20 20:33:11,563 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-20 20:33:11,569 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-20 20:33:11,575 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-20 20:33:11,578 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-20 20:33:11,583 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-20 20:33:11,585 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-20 20:33:11,589 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-20 20:33:11,594 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-20 20:33:11,595 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-20 20:33:11,597 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-20 20:33:11,598 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-20 20:33:11,600 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-20 20:33:11,600 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-20 20:33:11,602 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-20 20:33:11,605 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-20 20:33:11,606 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-20 20:33:11,608 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-20 20:33:11,608 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-20 20:33:11,609 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-20 20:33:11,610 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-20 20:33:11,610 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-20 20:33:11,612 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-20 20:33:11,613 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-20 20:33:11,619 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Bitvector.epf [2022-11-20 20:33:11,658 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-20 20:33:11,660 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-20 20:33:11,661 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-20 20:33:11,662 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-20 20:33:11,663 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-20 20:33:11,663 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-20 20:33:11,664 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-20 20:33:11,664 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-20 20:33:11,665 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-20 20:33:11,665 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-20 20:33:11,666 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-20 20:33:11,667 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-20 20:33:11,668 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-20 20:33:11,668 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-20 20:33:11,669 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-20 20:33:11,669 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-20 20:33:11,669 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-20 20:33:11,670 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-20 20:33:11,670 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-20 20:33:11,671 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-20 20:33:11,671 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-11-20 20:33:11,671 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-11-20 20:33:11,672 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-11-20 20:33:11,672 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-20 20:33:11,672 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-11-20 20:33:11,673 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-11-20 20:33:11,673 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-11-20 20:33:11,673 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-20 20:33:11,674 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-20 20:33:11,674 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-20 20:33:11,675 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-20 20:33:11,675 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-20 20:33:11,676 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-20 20:33:11,676 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-20 20:33:11,676 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-20 20:33:11,677 INFO L138 SettingsManager]: * Trace refinement strategy=WALRUS [2022-11-20 20:33:11,677 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2022-11-20 20:33:11,677 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-20 20:33:11,678 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-11-20 20:33:11,678 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1df58a12292e53aa25870e709e17978d63a0e61d4dd56fb439981d66ecb6b925 [2022-11-20 20:33:12,141 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-20 20:33:12,174 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-20 20:33:12,177 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-20 20:33:12,179 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-20 20:33:12,180 INFO L275 PluginConnector]: CDTParser initialized [2022-11-20 20:33:12,182 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/../../sv-benchmarks/c/ldv-memsafety/memleaks_test18_3.i [2022-11-20 20:33:15,653 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-20 20:33:16,001 INFO L351 CDTParser]: Found 1 translation units. [2022-11-20 20:33:16,001 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/sv-benchmarks/c/ldv-memsafety/memleaks_test18_3.i [2022-11-20 20:33:16,015 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/data/fcbd00c5f/945b99280e9f4f0da37428da092bdfc0/FLAG7ee3bfb01 [2022-11-20 20:33:16,039 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/data/fcbd00c5f/945b99280e9f4f0da37428da092bdfc0 [2022-11-20 20:33:16,044 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-20 20:33:16,046 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-20 20:33:16,048 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-20 20:33:16,048 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-20 20:33:16,052 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-20 20:33:16,053 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 08:33:16" (1/1) ... [2022-11-20 20:33:16,055 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@20181c88 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:33:16, skipping insertion in model container [2022-11-20 20:33:16,055 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 08:33:16" (1/1) ... [2022-11-20 20:33:16,063 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-20 20:33:16,137 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-20 20:33:16,651 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-20 20:33:16,702 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-11-20 20:33:16,712 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-20 20:33:16,793 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-20 20:33:16,810 INFO L203 MainTranslator]: Completed pre-run [2022-11-20 20:33:16,898 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-20 20:33:16,966 INFO L208 MainTranslator]: Completed translation [2022-11-20 20:33:16,967 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:33:16 WrapperNode [2022-11-20 20:33:16,967 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-20 20:33:16,969 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-20 20:33:16,969 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-20 20:33:16,969 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-20 20:33:16,978 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:33:16" (1/1) ... [2022-11-20 20:33:17,017 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:33:16" (1/1) ... [2022-11-20 20:33:17,055 INFO L138 Inliner]: procedures = 165, calls = 70, calls flagged for inlining = 21, calls inlined = 3, statements flattened = 31 [2022-11-20 20:33:17,056 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-20 20:33:17,058 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-20 20:33:17,058 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-20 20:33:17,059 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-20 20:33:17,077 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:33:16" (1/1) ... [2022-11-20 20:33:17,078 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:33:16" (1/1) ... [2022-11-20 20:33:17,097 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:33:16" (1/1) ... [2022-11-20 20:33:17,098 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:33:16" (1/1) ... [2022-11-20 20:33:17,104 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:33:16" (1/1) ... [2022-11-20 20:33:17,116 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:33:16" (1/1) ... [2022-11-20 20:33:17,120 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:33:16" (1/1) ... [2022-11-20 20:33:17,133 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:33:16" (1/1) ... [2022-11-20 20:33:17,136 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-20 20:33:17,137 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-20 20:33:17,137 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-20 20:33:17,137 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-20 20:33:17,138 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:33:16" (1/1) ... [2022-11-20 20:33:17,149 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-20 20:33:17,170 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:33:17,189 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-20 20:33:17,227 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-20 20:33:17,267 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-11-20 20:33:17,269 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-11-20 20:33:17,270 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-11-20 20:33:17,270 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-20 20:33:17,270 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-11-20 20:33:17,270 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-11-20 20:33:17,271 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-20 20:33:17,271 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-20 20:33:17,462 INFO L235 CfgBuilder]: Building ICFG [2022-11-20 20:33:17,465 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-20 20:33:17,681 INFO L276 CfgBuilder]: Performing block encoding [2022-11-20 20:33:17,688 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-20 20:33:17,689 INFO L300 CfgBuilder]: Removed 1 assume(true) statements. [2022-11-20 20:33:17,691 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 08:33:17 BoogieIcfgContainer [2022-11-20 20:33:17,692 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-20 20:33:17,694 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-20 20:33:17,695 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-20 20:33:17,699 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-20 20:33:17,699 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.11 08:33:16" (1/3) ... [2022-11-20 20:33:17,700 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@53e86e42 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 08:33:17, skipping insertion in model container [2022-11-20 20:33:17,700 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 08:33:16" (2/3) ... [2022-11-20 20:33:17,701 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@53e86e42 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 08:33:17, skipping insertion in model container [2022-11-20 20:33:17,701 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 08:33:17" (3/3) ... [2022-11-20 20:33:17,703 INFO L112 eAbstractionObserver]: Analyzing ICFG memleaks_test18_3.i [2022-11-20 20:33:17,728 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-20 20:33:17,728 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2022-11-20 20:33:17,812 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-20 20:33:17,827 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@77639f82, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-20 20:33:17,827 INFO L358 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2022-11-20 20:33:17,835 INFO L276 IsEmpty]: Start isEmpty. Operand has 21 states, 14 states have (on average 1.5) internal successors, (21), 17 states have internal predecessors, (21), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-20 20:33:17,847 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-20 20:33:17,847 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:33:17,848 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:33:17,849 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:33:17,856 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:33:17,856 INFO L85 PathProgramCache]: Analyzing trace with hash -74700687, now seen corresponding path program 1 times [2022-11-20 20:33:17,874 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:33:17,875 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [143351731] [2022-11-20 20:33:17,877 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:33:17,877 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:33:17,878 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:33:17,887 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:33:17,927 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2022-11-20 20:33:18,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:33:18,041 INFO L263 TraceCheckSpWp]: Trace formula consists of 42 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-20 20:33:18,048 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:33:18,170 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 20:33:18,171 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-20 20:33:18,172 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:33:18,172 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [143351731] [2022-11-20 20:33:18,173 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [143351731] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 20:33:18,173 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 20:33:18,174 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-20 20:33:18,176 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [174486637] [2022-11-20 20:33:18,177 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 20:33:18,183 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-20 20:33:18,183 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:33:18,221 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-20 20:33:18,222 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-20 20:33:18,225 INFO L87 Difference]: Start difference. First operand has 21 states, 14 states have (on average 1.5) internal successors, (21), 17 states have internal predecessors, (21), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Second operand has 5 states, 5 states have (on average 1.8) internal successors, (9), 4 states have internal predecessors, (9), 1 states have call successors, (1), 1 states have call predecessors, (1), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 20:33:18,342 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:33:18,343 INFO L93 Difference]: Finished difference Result 37 states and 43 transitions. [2022-11-20 20:33:18,344 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-20 20:33:18,346 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 1.8) internal successors, (9), 4 states have internal predecessors, (9), 1 states have call successors, (1), 1 states have call predecessors, (1), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 11 [2022-11-20 20:33:18,359 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:33:18,368 INFO L225 Difference]: With dead ends: 37 [2022-11-20 20:33:18,368 INFO L226 Difference]: Without dead ends: 33 [2022-11-20 20:33:18,370 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-20 20:33:18,386 INFO L413 NwaCegarLoop]: 24 mSDtfsCounter, 12 mSDsluCounter, 59 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 14 SdHoareTripleChecker+Valid, 83 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-20 20:33:18,399 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [14 Valid, 83 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-20 20:33:18,436 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33 states. [2022-11-20 20:33:18,486 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33 to 23. [2022-11-20 20:33:18,488 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23 states, 16 states have (on average 1.3125) internal successors, (21), 18 states have internal predecessors, (21), 2 states have call successors, (2), 1 states have call predecessors, (2), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 20:33:18,489 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23 states to 23 states and 27 transitions. [2022-11-20 20:33:18,491 INFO L78 Accepts]: Start accepts. Automaton has 23 states and 27 transitions. Word has length 11 [2022-11-20 20:33:18,491 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:33:18,492 INFO L495 AbstractCegarLoop]: Abstraction has 23 states and 27 transitions. [2022-11-20 20:33:18,492 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 1.8) internal successors, (9), 4 states have internal predecessors, (9), 1 states have call successors, (1), 1 states have call predecessors, (1), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 20:33:18,492 INFO L276 IsEmpty]: Start isEmpty. Operand 23 states and 27 transitions. [2022-11-20 20:33:18,494 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-11-20 20:33:18,499 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:33:18,499 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:33:18,527 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (2)] Ended with exit code 0 [2022-11-20 20:33:18,707 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:33:18,707 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:33:18,708 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:33:18,708 INFO L85 PathProgramCache]: Analyzing trace with hash 812802994, now seen corresponding path program 1 times [2022-11-20 20:33:18,709 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:33:18,709 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2137270008] [2022-11-20 20:33:18,710 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:33:18,710 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:33:18,710 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:33:18,712 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:33:18,759 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2022-11-20 20:33:18,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:33:18,822 INFO L263 TraceCheckSpWp]: Trace formula consists of 36 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-20 20:33:18,824 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:33:18,892 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 20:33:18,893 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-20 20:33:18,893 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:33:18,893 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2137270008] [2022-11-20 20:33:18,894 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2137270008] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 20:33:18,894 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 20:33:18,894 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-20 20:33:18,895 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [151950688] [2022-11-20 20:33:18,895 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 20:33:18,896 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-20 20:33:18,899 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:33:18,899 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-20 20:33:18,902 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-20 20:33:18,902 INFO L87 Difference]: Start difference. First operand 23 states and 27 transitions. Second operand has 4 states, 3 states have (on average 3.0) internal successors, (9), 4 states have internal predecessors, (9), 1 states have call successors, (1), 1 states have call predecessors, (1), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 20:33:19,008 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:33:19,008 INFO L93 Difference]: Finished difference Result 32 states and 38 transitions. [2022-11-20 20:33:19,009 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-20 20:33:19,011 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 3.0) internal successors, (9), 4 states have internal predecessors, (9), 1 states have call successors, (1), 1 states have call predecessors, (1), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 11 [2022-11-20 20:33:19,012 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:33:19,015 INFO L225 Difference]: With dead ends: 32 [2022-11-20 20:33:19,016 INFO L226 Difference]: Without dead ends: 30 [2022-11-20 20:33:19,018 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-20 20:33:19,020 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 8 mSDsluCounter, 34 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 66 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-20 20:33:19,022 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [8 Valid, 66 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-20 20:33:19,024 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 30 states. [2022-11-20 20:33:19,031 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 30 to 28. [2022-11-20 20:33:19,031 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28 states, 20 states have (on average 1.3) internal successors, (26), 22 states have internal predecessors, (26), 3 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (6), 4 states have call predecessors, (6), 3 states have call successors, (6) [2022-11-20 20:33:19,033 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28 states to 28 states and 35 transitions. [2022-11-20 20:33:19,033 INFO L78 Accepts]: Start accepts. Automaton has 28 states and 35 transitions. Word has length 11 [2022-11-20 20:33:19,033 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:33:19,034 INFO L495 AbstractCegarLoop]: Abstraction has 28 states and 35 transitions. [2022-11-20 20:33:19,034 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 3.0) internal successors, (9), 4 states have internal predecessors, (9), 1 states have call successors, (1), 1 states have call predecessors, (1), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 20:33:19,034 INFO L276 IsEmpty]: Start isEmpty. Operand 28 states and 35 transitions. [2022-11-20 20:33:19,035 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2022-11-20 20:33:19,035 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:33:19,035 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:33:19,051 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (3)] Ended with exit code 0 [2022-11-20 20:33:19,249 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:33:19,250 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:33:19,250 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:33:19,251 INFO L85 PathProgramCache]: Analyzing trace with hash 1979292102, now seen corresponding path program 1 times [2022-11-20 20:33:19,251 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:33:19,251 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [397722499] [2022-11-20 20:33:19,252 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:33:19,252 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:33:19,252 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:33:19,253 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:33:19,259 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2022-11-20 20:33:19,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:33:19,355 INFO L263 TraceCheckSpWp]: Trace formula consists of 42 conjuncts, 3 conjunts are in the unsatisfiable core [2022-11-20 20:33:19,357 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:33:19,445 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 20:33:19,445 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-20 20:33:19,445 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:33:19,446 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [397722499] [2022-11-20 20:33:19,446 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [397722499] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 20:33:19,446 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 20:33:19,446 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-20 20:33:19,447 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1221515628] [2022-11-20 20:33:19,447 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 20:33:19,448 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-20 20:33:19,449 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:33:19,449 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-20 20:33:19,450 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-20 20:33:19,450 INFO L87 Difference]: Start difference. First operand 28 states and 35 transitions. Second operand has 4 states, 4 states have (on average 2.5) internal successors, (10), 4 states have internal predecessors, (10), 1 states have call successors, (1), 1 states have call predecessors, (1), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 20:33:19,529 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:33:19,529 INFO L93 Difference]: Finished difference Result 40 states and 53 transitions. [2022-11-20 20:33:19,530 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-20 20:33:19,530 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 2.5) internal successors, (10), 4 states have internal predecessors, (10), 1 states have call successors, (1), 1 states have call predecessors, (1), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 12 [2022-11-20 20:33:19,531 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:33:19,532 INFO L225 Difference]: With dead ends: 40 [2022-11-20 20:33:19,532 INFO L226 Difference]: Without dead ends: 40 [2022-11-20 20:33:19,532 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-11-20 20:33:19,534 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 17 mSDsluCounter, 16 mSDsCounter, 0 mSdLazyCounter, 15 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 19 SdHoareTripleChecker+Valid, 33 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 15 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-20 20:33:19,535 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [19 Valid, 33 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 15 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-20 20:33:19,536 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 40 states. [2022-11-20 20:33:19,541 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 40 to 29. [2022-11-20 20:33:19,541 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 21 states have (on average 1.2857142857142858) internal successors, (27), 23 states have internal predecessors, (27), 3 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (6), 4 states have call predecessors, (6), 3 states have call successors, (6) [2022-11-20 20:33:19,543 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 36 transitions. [2022-11-20 20:33:19,543 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 36 transitions. Word has length 12 [2022-11-20 20:33:19,543 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:33:19,544 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 36 transitions. [2022-11-20 20:33:19,544 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 2.5) internal successors, (10), 4 states have internal predecessors, (10), 1 states have call successors, (1), 1 states have call predecessors, (1), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 20:33:19,544 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 36 transitions. [2022-11-20 20:33:19,545 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-20 20:33:19,545 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:33:19,546 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:33:19,566 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2022-11-20 20:33:19,769 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:33:19,769 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:33:19,770 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:33:19,770 INFO L85 PathProgramCache]: Analyzing trace with hash -938120081, now seen corresponding path program 1 times [2022-11-20 20:33:19,770 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:33:19,771 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1177144957] [2022-11-20 20:33:19,771 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:33:19,771 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:33:19,771 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:33:19,778 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:33:19,782 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2022-11-20 20:33:19,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:33:19,889 INFO L263 TraceCheckSpWp]: Trace formula consists of 61 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-20 20:33:19,893 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:33:19,938 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:33:20,107 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_10 (_ BitVec 1))) (= |c_#valid| (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_10))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:33:20,205 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:33:20,205 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:33:20,223 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 2 not checked. [2022-11-20 20:33:20,224 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:33:20,592 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 2 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 20:33:20,592 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:33:20,593 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1177144957] [2022-11-20 20:33:20,593 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1177144957] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-20 20:33:20,593 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [375928177] [2022-11-20 20:33:20,593 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:33:20,594 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:33:20,594 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:33:20,599 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:33:20,614 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (6)] Waiting until timeout for monitored process [2022-11-20 20:33:20,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:33:20,759 INFO L263 TraceCheckSpWp]: Trace formula consists of 61 conjuncts, 10 conjunts are in the unsatisfiable core [2022-11-20 20:33:20,766 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:33:20,780 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:33:20,841 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (= (store |c_old(#valid)| |ldv_malloc_#res.base| (_ bv1 1)) |c_#valid|)) is different from true [2022-11-20 20:33:20,875 INFO L321 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2022-11-20 20:33:20,875 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 14 treesize of output 20 [2022-11-20 20:33:20,900 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 2 not checked. [2022-11-20 20:33:20,900 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:33:21,101 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 2 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 20:33:21,102 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [375928177] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-20 20:33:21,102 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [564056637] [2022-11-20 20:33:21,103 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:33:21,103 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:33:21,103 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:33:21,111 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:33:21,119 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-11-20 20:33:21,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:33:21,209 INFO L263 TraceCheckSpWp]: Trace formula consists of 61 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-20 20:33:21,216 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:33:21,224 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:33:21,271 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_28 (_ BitVec 1))) (= |c_#valid| (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_28))))) is different from true [2022-11-20 20:33:21,322 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:33:21,323 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:33:21,353 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 2 not checked. [2022-11-20 20:33:21,353 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:33:21,603 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 2 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 20:33:21,604 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [564056637] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-20 20:33:21,604 INFO L184 FreeRefinementEngine]: Found 0 perfect and 6 imperfect interpolant sequences. [2022-11-20 20:33:21,604 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 6, 5, 6, 5] total 9 [2022-11-20 20:33:21,605 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [307326467] [2022-11-20 20:33:21,620 INFO L85 oduleStraightlineAll]: Using 6 imperfect interpolants to construct interpolant automaton [2022-11-20 20:33:21,620 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-20 20:33:21,621 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:33:21,621 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-20 20:33:21,622 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=33, Unknown=3, NotChecked=36, Total=90 [2022-11-20 20:33:21,622 INFO L87 Difference]: Start difference. First operand 29 states and 36 transitions. Second operand has 10 states, 9 states have (on average 2.2222222222222223) internal successors, (20), 9 states have internal predecessors, (20), 2 states have call successors, (3), 3 states have call predecessors, (3), 5 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-20 20:33:23,886 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:33:23,886 INFO L93 Difference]: Finished difference Result 36 states and 46 transitions. [2022-11-20 20:33:23,887 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-20 20:33:23,887 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 9 states have (on average 2.2222222222222223) internal successors, (20), 9 states have internal predecessors, (20), 2 states have call successors, (3), 3 states have call predecessors, (3), 5 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 17 [2022-11-20 20:33:23,887 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:33:23,888 INFO L225 Difference]: With dead ends: 36 [2022-11-20 20:33:23,888 INFO L226 Difference]: Without dead ends: 36 [2022-11-20 20:33:23,889 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 97 GetRequests, 79 SyntacticMatches, 9 SemanticMatches, 9 ConstructedPredicates, 3 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 2.3s TimeCoverageRelationStatistics Valid=22, Invalid=43, Unknown=3, NotChecked=42, Total=110 [2022-11-20 20:33:23,890 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 8 mSDsluCounter, 36 mSDsCounter, 0 mSdLazyCounter, 55 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 54 SdHoareTripleChecker+Invalid, 146 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 55 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 88 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-20 20:33:23,890 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [8 Valid, 54 Invalid, 146 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 55 Invalid, 0 Unknown, 88 Unchecked, 0.2s Time] [2022-11-20 20:33:23,891 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36 states. [2022-11-20 20:33:23,902 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36 to 35. [2022-11-20 20:33:23,904 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 26 states have (on average 1.3076923076923077) internal successors, (34), 27 states have internal predecessors, (34), 4 states have call successors, (4), 1 states have call predecessors, (4), 2 states have return successors, (8), 6 states have call predecessors, (8), 4 states have call successors, (8) [2022-11-20 20:33:23,905 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 46 transitions. [2022-11-20 20:33:23,907 INFO L78 Accepts]: Start accepts. Automaton has 35 states and 46 transitions. Word has length 17 [2022-11-20 20:33:23,907 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:33:23,908 INFO L495 AbstractCegarLoop]: Abstraction has 35 states and 46 transitions. [2022-11-20 20:33:23,908 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 9 states have (on average 2.2222222222222223) internal successors, (20), 9 states have internal predecessors, (20), 2 states have call successors, (3), 3 states have call predecessors, (3), 5 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-20 20:33:23,909 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 46 transitions. [2022-11-20 20:33:23,910 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-20 20:33:23,910 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:33:23,911 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:33:23,927 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Ended with exit code 0 [2022-11-20 20:33:24,119 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (6)] Ended with exit code 0 [2022-11-20 20:33:24,327 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2022-11-20 20:33:24,518 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true,6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:33:24,518 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:33:24,519 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:33:24,519 INFO L85 PathProgramCache]: Analyzing trace with hash -938120080, now seen corresponding path program 1 times [2022-11-20 20:33:24,520 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:33:24,520 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1984896730] [2022-11-20 20:33:24,520 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:33:24,520 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:33:24,521 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:33:24,531 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:33:24,540 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2022-11-20 20:33:24,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:33:24,629 INFO L263 TraceCheckSpWp]: Trace formula consists of 61 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-20 20:33:24,635 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:33:24,674 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:33:24,682 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:33:24,987 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_39 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_39) |c_#length|)))) is different from true [2022-11-20 20:33:25,029 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:33:25,032 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:33:25,052 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:33:25,053 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:33:25,108 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 2 not checked. [2022-11-20 20:33:25,108 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:33:26,164 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:33:26,164 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1984896730] [2022-11-20 20:33:26,165 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1984896730] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:33:26,165 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1890052995] [2022-11-20 20:33:26,165 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:33:26,165 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:33:26,165 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:33:26,167 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:33:26,195 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (9)] Waiting until timeout for monitored process [2022-11-20 20:33:26,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:33:26,328 INFO L263 TraceCheckSpWp]: Trace formula consists of 61 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-20 20:33:26,335 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:33:26,354 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:33:26,361 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:33:26,495 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_49 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_49) |c_#length|)))) is different from true [2022-11-20 20:33:26,545 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:33:26,547 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:33:26,563 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:33:26,564 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:33:26,611 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 2 not checked. [2022-11-20 20:33:26,611 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:33:29,076 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [1890052995] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:33:29,077 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [616627047] [2022-11-20 20:33:29,077 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:33:29,077 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:33:29,077 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:33:29,079 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:33:29,103 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-11-20 20:33:29,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:33:29,171 INFO L263 TraceCheckSpWp]: Trace formula consists of 61 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-20 20:33:29,174 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:33:29,188 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:33:29,196 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:33:29,308 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_59 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_59) |c_#length|)))) is different from true [2022-11-20 20:33:29,338 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:33:29,339 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:33:29,353 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:33:29,354 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:33:29,376 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 2 not checked. [2022-11-20 20:33:29,377 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:33:31,734 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [616627047] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:33:31,734 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:33:31,735 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 9, 9] total 11 [2022-11-20 20:33:31,735 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [49165840] [2022-11-20 20:33:31,735 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:33:31,735 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-11-20 20:33:31,736 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:33:31,736 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-11-20 20:33:31,736 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=90, Unknown=3, NotChecked=60, Total=182 [2022-11-20 20:33:31,737 INFO L87 Difference]: Start difference. First operand 35 states and 46 transitions. Second operand has 12 states, 10 states have (on average 1.7) internal successors, (17), 11 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 4 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 20:33:32,200 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:33:32,200 INFO L93 Difference]: Finished difference Result 43 states and 54 transitions. [2022-11-20 20:33:32,201 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-20 20:33:32,201 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 10 states have (on average 1.7) internal successors, (17), 11 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 4 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 17 [2022-11-20 20:33:32,201 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:33:32,202 INFO L225 Difference]: With dead ends: 43 [2022-11-20 20:33:32,202 INFO L226 Difference]: Without dead ends: 43 [2022-11-20 20:33:32,203 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 59 GetRequests, 43 SyntacticMatches, 2 SemanticMatches, 14 ConstructedPredicates, 3 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 5.7s TimeCoverageRelationStatistics Valid=37, Invalid=128, Unknown=3, NotChecked=72, Total=240 [2022-11-20 20:33:32,204 INFO L413 NwaCegarLoop]: 23 mSDtfsCounter, 18 mSDsluCounter, 69 mSDsCounter, 0 mSdLazyCounter, 124 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 92 SdHoareTripleChecker+Invalid, 240 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 124 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 109 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-20 20:33:32,204 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 92 Invalid, 240 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 124 Invalid, 0 Unknown, 109 Unchecked, 0.3s Time] [2022-11-20 20:33:32,205 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43 states. [2022-11-20 20:33:32,210 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43 to 38. [2022-11-20 20:33:32,211 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 28 states have (on average 1.2857142857142858) internal successors, (36), 29 states have internal predecessors, (36), 5 states have call successors, (5), 1 states have call predecessors, (5), 2 states have return successors, (10), 7 states have call predecessors, (10), 5 states have call successors, (10) [2022-11-20 20:33:32,212 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 51 transitions. [2022-11-20 20:33:32,212 INFO L78 Accepts]: Start accepts. Automaton has 38 states and 51 transitions. Word has length 17 [2022-11-20 20:33:32,213 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:33:32,213 INFO L495 AbstractCegarLoop]: Abstraction has 38 states and 51 transitions. [2022-11-20 20:33:32,213 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 10 states have (on average 1.7) internal successors, (17), 11 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 4 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 20:33:32,213 INFO L276 IsEmpty]: Start isEmpty. Operand 38 states and 51 transitions. [2022-11-20 20:33:32,214 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-11-20 20:33:32,214 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:33:32,215 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:33:32,236 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (8)] Forceful destruction successful, exit code 0 [2022-11-20 20:33:32,434 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Ended with exit code 0 [2022-11-20 20:33:32,631 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (9)] Ended with exit code 0 [2022-11-20 20:33:32,829 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true,9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt [2022-11-20 20:33:32,829 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:33:32,830 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:33:32,830 INFO L85 PathProgramCache]: Analyzing trace with hash -1231523088, now seen corresponding path program 1 times [2022-11-20 20:33:32,830 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:33:32,830 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1028991378] [2022-11-20 20:33:32,831 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:33:32,831 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:33:32,831 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:33:32,833 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:33:32,839 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (11)] Waiting until timeout for monitored process [2022-11-20 20:33:32,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:33:32,910 INFO L263 TraceCheckSpWp]: Trace formula consists of 55 conjuncts, 7 conjunts are in the unsatisfiable core [2022-11-20 20:33:32,912 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:33:32,983 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 20:33:32,983 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-20 20:33:32,983 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:33:32,983 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1028991378] [2022-11-20 20:33:32,983 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1028991378] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 20:33:32,984 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 20:33:32,984 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-20 20:33:32,984 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2098235757] [2022-11-20 20:33:32,984 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 20:33:32,984 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-20 20:33:32,985 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:33:32,985 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-20 20:33:32,985 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-20 20:33:32,986 INFO L87 Difference]: Start difference. First operand 38 states and 51 transitions. Second operand has 5 states, 5 states have (on average 2.6) internal successors, (13), 4 states have internal predecessors, (13), 2 states have call successors, (2), 2 states have call predecessors, (2), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-20 20:33:33,032 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:33:33,032 INFO L93 Difference]: Finished difference Result 26 states and 30 transitions. [2022-11-20 20:33:33,033 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-20 20:33:33,034 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 2.6) internal successors, (13), 4 states have internal predecessors, (13), 2 states have call successors, (2), 2 states have call predecessors, (2), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 17 [2022-11-20 20:33:33,034 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:33:33,035 INFO L225 Difference]: With dead ends: 26 [2022-11-20 20:33:33,035 INFO L226 Difference]: Without dead ends: 24 [2022-11-20 20:33:33,035 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-20 20:33:33,036 INFO L413 NwaCegarLoop]: 23 mSDtfsCounter, 0 mSDsluCounter, 56 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 79 SdHoareTripleChecker+Invalid, 13 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-20 20:33:33,036 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 79 Invalid, 13 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-20 20:33:33,037 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24 states. [2022-11-20 20:33:33,040 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24 to 24. [2022-11-20 20:33:33,040 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 24 states, 17 states have (on average 1.1764705882352942) internal successors, (20), 19 states have internal predecessors, (20), 3 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-11-20 20:33:33,041 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24 states to 24 states and 28 transitions. [2022-11-20 20:33:33,041 INFO L78 Accepts]: Start accepts. Automaton has 24 states and 28 transitions. Word has length 17 [2022-11-20 20:33:33,041 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:33:33,041 INFO L495 AbstractCegarLoop]: Abstraction has 24 states and 28 transitions. [2022-11-20 20:33:33,042 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 2.6) internal successors, (13), 4 states have internal predecessors, (13), 2 states have call successors, (2), 2 states have call predecessors, (2), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-20 20:33:33,042 INFO L276 IsEmpty]: Start isEmpty. Operand 24 states and 28 transitions. [2022-11-20 20:33:33,042 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-11-20 20:33:33,042 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:33:33,048 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:33:33,068 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (11)] Forceful destruction successful, exit code 0 [2022-11-20 20:33:33,259 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:33:33,259 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:33:33,259 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:33:33,260 INFO L85 PathProgramCache]: Analyzing trace with hash -1382319161, now seen corresponding path program 1 times [2022-11-20 20:33:33,260 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:33:33,260 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [704811155] [2022-11-20 20:33:33,260 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:33:33,260 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:33:33,261 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:33:33,262 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:33:33,263 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (12)] Waiting until timeout for monitored process [2022-11-20 20:33:33,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:33:33,355 INFO L263 TraceCheckSpWp]: Trace formula consists of 77 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-20 20:33:33,357 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:33:33,444 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-20 20:33:33,445 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:33:33,553 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-20 20:33:33,554 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:33:33,554 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [704811155] [2022-11-20 20:33:33,554 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [704811155] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-20 20:33:33,554 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [321249627] [2022-11-20 20:33:33,554 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:33:33,554 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:33:33,554 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:33:33,556 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:33:33,575 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (13)] Waiting until timeout for monitored process [2022-11-20 20:33:33,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:33:33,713 INFO L263 TraceCheckSpWp]: Trace formula consists of 77 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-20 20:33:33,715 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:33:33,805 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-20 20:33:33,806 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:33:33,863 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-20 20:33:33,863 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [321249627] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-20 20:33:33,863 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [233479861] [2022-11-20 20:33:33,863 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:33:33,864 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:33:33,864 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:33:33,871 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:33:33,901 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2022-11-20 20:33:33,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:33:33,982 INFO L263 TraceCheckSpWp]: Trace formula consists of 77 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-20 20:33:33,984 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:33:34,048 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-20 20:33:34,048 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:33:34,098 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-20 20:33:34,098 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [233479861] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-20 20:33:34,098 INFO L184 FreeRefinementEngine]: Found 0 perfect and 6 imperfect interpolant sequences. [2022-11-20 20:33:34,098 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5, 5, 5, 5] total 8 [2022-11-20 20:33:34,099 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1902014342] [2022-11-20 20:33:34,099 INFO L85 oduleStraightlineAll]: Using 6 imperfect interpolants to construct interpolant automaton [2022-11-20 20:33:34,099 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-20 20:33:34,100 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:33:34,100 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-20 20:33:34,100 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-20 20:33:34,100 INFO L87 Difference]: Start difference. First operand 24 states and 28 transitions. Second operand has 8 states, 8 states have (on average 2.75) internal successors, (22), 8 states have internal predecessors, (22), 4 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2022-11-20 20:33:34,290 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:33:34,290 INFO L93 Difference]: Finished difference Result 38 states and 46 transitions. [2022-11-20 20:33:34,291 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-20 20:33:34,291 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 2.75) internal successors, (22), 8 states have internal predecessors, (22), 4 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) Word has length 21 [2022-11-20 20:33:34,292 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:33:34,292 INFO L225 Difference]: With dead ends: 38 [2022-11-20 20:33:34,293 INFO L226 Difference]: Without dead ends: 38 [2022-11-20 20:33:34,293 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 122 GetRequests, 114 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=38, Invalid=52, Unknown=0, NotChecked=0, Total=90 [2022-11-20 20:33:34,294 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 47 mSDsluCounter, 45 mSDsCounter, 0 mSdLazyCounter, 43 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 48 SdHoareTripleChecker+Valid, 65 SdHoareTripleChecker+Invalid, 55 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 43 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-20 20:33:34,294 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [48 Valid, 65 Invalid, 55 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 43 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-20 20:33:34,295 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38 states. [2022-11-20 20:33:34,300 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38 to 36. [2022-11-20 20:33:34,300 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 27 states have (on average 1.1851851851851851) internal successors, (32), 29 states have internal predecessors, (32), 5 states have call successors, (5), 1 states have call predecessors, (5), 2 states have return successors, (9), 5 states have call predecessors, (9), 5 states have call successors, (9) [2022-11-20 20:33:34,301 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 46 transitions. [2022-11-20 20:33:34,302 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 46 transitions. Word has length 21 [2022-11-20 20:33:34,302 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:33:34,302 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 46 transitions. [2022-11-20 20:33:34,303 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 2.75) internal successors, (22), 8 states have internal predecessors, (22), 4 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2022-11-20 20:33:34,303 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 46 transitions. [2022-11-20 20:33:34,304 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-20 20:33:34,304 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:33:34,304 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:33:34,312 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (13)] Forceful destruction successful, exit code 0 [2022-11-20 20:33:34,512 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Forceful destruction successful, exit code 0 [2022-11-20 20:33:34,716 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (12)] Forceful destruction successful, exit code 0 [2022-11-20 20:33:34,907 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt,14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true,12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:33:34,907 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:33:34,908 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:33:34,908 INFO L85 PathProgramCache]: Analyzing trace with hash -704273649, now seen corresponding path program 1 times [2022-11-20 20:33:34,908 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:33:34,908 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [761469355] [2022-11-20 20:33:34,908 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:33:34,908 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:33:34,909 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:33:34,910 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:33:34,914 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (15)] Waiting until timeout for monitored process [2022-11-20 20:33:35,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:33:35,026 INFO L263 TraceCheckSpWp]: Trace formula consists of 96 conjuncts, 28 conjunts are in the unsatisfiable core [2022-11-20 20:33:35,030 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:33:35,057 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:33:35,067 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:33:35,306 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_109 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_109))))) is different from true [2022-11-20 20:33:35,339 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:33:35,340 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:33:35,361 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:33:35,362 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:33:35,529 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_110 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_110) |c_#length|)))) is different from true [2022-11-20 20:33:35,569 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:33:35,570 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:33:35,589 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:33:35,590 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:33:35,644 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 2 proven. 6 refuted. 0 times theorem prover too weak. 2 trivial. 6 not checked. [2022-11-20 20:33:35,644 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:33:38,148 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:33:38,148 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [761469355] [2022-11-20 20:33:38,148 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [761469355] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:33:38,148 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1622113039] [2022-11-20 20:33:38,148 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:33:38,149 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:33:38,149 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:33:38,151 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:33:38,153 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (16)] Waiting until timeout for monitored process [2022-11-20 20:33:38,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:33:38,370 INFO L263 TraceCheckSpWp]: Trace formula consists of 96 conjuncts, 28 conjunts are in the unsatisfiable core [2022-11-20 20:33:38,374 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:33:38,388 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:33:38,421 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:33:38,526 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_128 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_128) |c_#length|)))) is different from true [2022-11-20 20:33:38,552 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:33:38,553 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:33:38,568 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:33:38,568 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:33:38,672 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_129 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_129))))) is different from true [2022-11-20 20:33:38,701 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:33:38,703 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:33:38,723 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:33:38,724 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:33:38,741 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 2 proven. 6 refuted. 0 times theorem prover too weak. 2 trivial. 6 not checked. [2022-11-20 20:33:38,741 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:33:41,064 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [1622113039] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:33:41,064 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1496315953] [2022-11-20 20:33:41,064 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:33:41,065 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:33:41,065 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:33:41,066 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:33:41,068 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2022-11-20 20:33:41,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:33:41,185 INFO L263 TraceCheckSpWp]: Trace formula consists of 96 conjuncts, 29 conjunts are in the unsatisfiable core [2022-11-20 20:33:41,190 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:33:41,214 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:33:41,224 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:33:41,362 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_147 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_147))))) is different from true [2022-11-20 20:33:41,391 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:33:41,392 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:33:41,408 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:33:41,409 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:33:41,510 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_148 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_148))))) is different from true [2022-11-20 20:33:41,538 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:33:41,539 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:33:41,554 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:33:41,555 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:33:41,582 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 2 proven. 6 refuted. 0 times theorem prover too weak. 2 trivial. 6 not checked. [2022-11-20 20:33:41,582 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:33:43,924 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1496315953] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:33:43,924 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:33:43,924 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 12, 12] total 16 [2022-11-20 20:33:43,925 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1240994167] [2022-11-20 20:33:43,925 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:33:43,926 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-20 20:33:43,926 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:33:43,927 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-20 20:33:43,927 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=131, Unknown=6, NotChecked=162, Total=342 [2022-11-20 20:33:43,928 INFO L87 Difference]: Start difference. First operand 36 states and 46 transitions. Second operand has 17 states, 15 states have (on average 1.8) internal successors, (27), 16 states have internal predecessors, (27), 3 states have call successors, (3), 2 states have call predecessors, (3), 7 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-11-20 20:33:44,528 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:33:44,528 INFO L93 Difference]: Finished difference Result 40 states and 49 transitions. [2022-11-20 20:33:44,529 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-20 20:33:44,529 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 15 states have (on average 1.8) internal successors, (27), 16 states have internal predecessors, (27), 3 states have call successors, (3), 2 states have call predecessors, (3), 7 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 26 [2022-11-20 20:33:44,529 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:33:44,530 INFO L225 Difference]: With dead ends: 40 [2022-11-20 20:33:44,530 INFO L226 Difference]: Without dead ends: 40 [2022-11-20 20:33:44,531 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 86 GetRequests, 65 SyntacticMatches, 2 SemanticMatches, 19 ConstructedPredicates, 6 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 7.2s TimeCoverageRelationStatistics Valid=51, Invalid=177, Unknown=6, NotChecked=186, Total=420 [2022-11-20 20:33:44,531 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 13 mSDsluCounter, 73 mSDsCounter, 0 mSdLazyCounter, 154 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 13 SdHoareTripleChecker+Valid, 90 SdHoareTripleChecker+Invalid, 338 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 154 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 176 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-20 20:33:44,531 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [13 Valid, 90 Invalid, 338 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 154 Invalid, 0 Unknown, 176 Unchecked, 0.3s Time] [2022-11-20 20:33:44,532 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 40 states. [2022-11-20 20:33:44,536 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 40 to 36. [2022-11-20 20:33:44,536 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 27 states have (on average 1.1481481481481481) internal successors, (31), 29 states have internal predecessors, (31), 5 states have call successors, (5), 1 states have call predecessors, (5), 2 states have return successors, (9), 5 states have call predecessors, (9), 5 states have call successors, (9) [2022-11-20 20:33:44,537 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 45 transitions. [2022-11-20 20:33:44,538 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 45 transitions. Word has length 26 [2022-11-20 20:33:44,538 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:33:44,538 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 45 transitions. [2022-11-20 20:33:44,539 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 15 states have (on average 1.8) internal successors, (27), 16 states have internal predecessors, (27), 3 states have call successors, (3), 2 states have call predecessors, (3), 7 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-11-20 20:33:44,539 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 45 transitions. [2022-11-20 20:33:44,540 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2022-11-20 20:33:44,540 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:33:44,540 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:33:44,556 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Forceful destruction successful, exit code 0 [2022-11-20 20:33:44,759 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (16)] Forceful destruction successful, exit code 0 [2022-11-20 20:33:44,971 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (15)] Forceful destruction successful, exit code 0 [2022-11-20 20:33:45,150 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true,16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt,15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:33:45,150 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:33:45,151 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:33:45,151 INFO L85 PathProgramCache]: Analyzing trace with hash -1383108784, now seen corresponding path program 2 times [2022-11-20 20:33:45,151 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:33:45,151 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2036714558] [2022-11-20 20:33:45,152 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-11-20 20:33:45,152 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:33:45,152 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:33:45,153 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:33:45,154 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (18)] Waiting until timeout for monitored process [2022-11-20 20:33:45,290 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-11-20 20:33:45,290 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:33:45,295 INFO L263 TraceCheckSpWp]: Trace formula consists of 131 conjuncts, 36 conjunts are in the unsatisfiable core [2022-11-20 20:33:45,308 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:33:45,339 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:33:45,350 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:33:45,556 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_174 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_174) |c_#length|)))) is different from true [2022-11-20 20:33:45,580 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:33:45,582 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:33:45,602 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:33:45,603 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:33:45,771 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_175 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_175) |c_#length|)))) is different from true [2022-11-20 20:33:45,796 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:33:45,797 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:33:45,815 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:33:45,816 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:33:45,989 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_176 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_176) |c_#length|)))) is different from true [2022-11-20 20:33:46,018 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:33:46,019 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:33:46,051 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:33:46,051 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:33:46,107 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 3 proven. 16 refuted. 0 times theorem prover too weak. 6 trivial. 12 not checked. [2022-11-20 20:33:46,107 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:33:46,667 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:33:46,667 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2036714558] [2022-11-20 20:33:46,667 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2036714558] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:33:46,667 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [983963904] [2022-11-20 20:33:46,668 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-11-20 20:33:46,668 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:33:46,668 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:33:46,669 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:33:46,671 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (19)] Waiting until timeout for monitored process [2022-11-20 20:33:46,923 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-11-20 20:33:46,923 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:33:46,929 INFO L263 TraceCheckSpWp]: Trace formula consists of 131 conjuncts, 36 conjunts are in the unsatisfiable core [2022-11-20 20:33:46,933 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:33:46,946 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:33:46,956 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:33:47,071 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_202 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_202) |c_#length|)))) is different from true [2022-11-20 20:33:47,096 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:33:47,097 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:33:47,116 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:33:47,119 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:33:47,227 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_203 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_203))))) is different from true [2022-11-20 20:33:47,255 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:33:47,257 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:33:47,271 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:33:47,272 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:33:47,391 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_204 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_204))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:33:47,419 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:33:47,421 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:33:47,441 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:33:47,442 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:33:47,458 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 3 proven. 16 refuted. 0 times theorem prover too weak. 6 trivial. 12 not checked. [2022-11-20 20:33:47,458 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:33:49,874 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [983963904] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:33:49,874 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1498531426] [2022-11-20 20:33:49,874 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-11-20 20:33:49,875 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:33:49,875 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:33:49,876 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:33:49,881 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2022-11-20 20:33:50,000 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-11-20 20:33:50,000 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:33:50,004 INFO L263 TraceCheckSpWp]: Trace formula consists of 131 conjuncts, 36 conjunts are in the unsatisfiable core [2022-11-20 20:33:50,007 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:33:50,020 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:33:50,031 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:33:50,142 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_230 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_230) |c_#length|)))) is different from true [2022-11-20 20:33:50,166 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:33:50,167 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:33:50,182 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:33:50,182 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:33:50,306 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_231 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_231) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:33:50,330 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:33:50,332 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:33:50,356 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:33:50,357 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:33:50,461 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_232 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_232) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:33:50,497 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:33:50,498 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:33:50,513 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:33:50,513 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:33:50,544 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 3 proven. 16 refuted. 0 times theorem prover too weak. 6 trivial. 12 not checked. [2022-11-20 20:33:50,544 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:33:50,864 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1498531426] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:33:50,864 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:33:50,867 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 15, 15] total 21 [2022-11-20 20:33:50,872 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [481436968] [2022-11-20 20:33:50,872 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:33:50,873 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-11-20 20:33:50,873 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:33:50,873 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-11-20 20:33:50,874 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=57, Invalid=180, Unknown=9, NotChecked=306, Total=552 [2022-11-20 20:33:50,874 INFO L87 Difference]: Start difference. First operand 36 states and 45 transitions. Second operand has 22 states, 20 states have (on average 1.85) internal successors, (37), 21 states have internal predecessors, (37), 4 states have call successors, (4), 2 states have call predecessors, (4), 10 states have return successors, (10), 4 states have call predecessors, (10), 4 states have call successors, (10) [2022-11-20 20:33:51,796 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:33:51,796 INFO L93 Difference]: Finished difference Result 42 states and 50 transitions. [2022-11-20 20:33:51,797 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-20 20:33:51,797 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 20 states have (on average 1.85) internal successors, (37), 21 states have internal predecessors, (37), 4 states have call successors, (4), 2 states have call predecessors, (4), 10 states have return successors, (10), 4 states have call predecessors, (10), 4 states have call successors, (10) Word has length 35 [2022-11-20 20:33:51,798 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:33:51,798 INFO L225 Difference]: With dead ends: 42 [2022-11-20 20:33:51,799 INFO L226 Difference]: Without dead ends: 42 [2022-11-20 20:33:51,799 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 113 GetRequests, 87 SyntacticMatches, 2 SemanticMatches, 24 ConstructedPredicates, 9 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 3.4s TimeCoverageRelationStatistics Valid=65, Invalid=234, Unknown=9, NotChecked=342, Total=650 [2022-11-20 20:33:51,800 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 15 mSDsluCounter, 119 mSDsCounter, 0 mSdLazyCounter, 273 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 139 SdHoareTripleChecker+Invalid, 604 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 273 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 322 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-20 20:33:51,801 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 139 Invalid, 604 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 273 Invalid, 0 Unknown, 322 Unchecked, 0.6s Time] [2022-11-20 20:33:51,802 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 42 states. [2022-11-20 20:33:51,814 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 42 to 36. [2022-11-20 20:33:51,816 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 27 states have (on average 1.1111111111111112) internal successors, (30), 29 states have internal predecessors, (30), 5 states have call successors, (5), 1 states have call predecessors, (5), 2 states have return successors, (9), 5 states have call predecessors, (9), 5 states have call successors, (9) [2022-11-20 20:33:51,817 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 44 transitions. [2022-11-20 20:33:51,817 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 44 transitions. Word has length 35 [2022-11-20 20:33:51,818 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:33:51,818 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 44 transitions. [2022-11-20 20:33:51,818 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 20 states have (on average 1.85) internal successors, (37), 21 states have internal predecessors, (37), 4 states have call successors, (4), 2 states have call predecessors, (4), 10 states have return successors, (10), 4 states have call predecessors, (10), 4 states have call successors, (10) [2022-11-20 20:33:51,819 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 44 transitions. [2022-11-20 20:33:51,821 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-20 20:33:51,821 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:33:51,821 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 3, 3, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:33:51,839 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (18)] Forceful destruction successful, exit code 0 [2022-11-20 20:33:52,041 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Forceful destruction successful, exit code 0 [2022-11-20 20:33:52,238 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (19)] Forceful destruction successful, exit code 0 [2022-11-20 20:33:52,435 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true,19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt [2022-11-20 20:33:52,436 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:33:52,436 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:33:52,436 INFO L85 PathProgramCache]: Analyzing trace with hash -856630225, now seen corresponding path program 3 times [2022-11-20 20:33:52,437 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:33:52,437 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [970259721] [2022-11-20 20:33:52,437 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-20 20:33:52,438 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:33:52,438 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:33:52,439 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:33:52,449 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (21)] Waiting until timeout for monitored process [2022-11-20 20:33:52,699 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-20 20:33:52,699 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:33:52,705 INFO L263 TraceCheckSpWp]: Trace formula consists of 166 conjuncts, 44 conjunts are in the unsatisfiable core [2022-11-20 20:33:52,709 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:33:52,740 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:33:52,748 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:33:52,946 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_266 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_266))))) is different from true [2022-11-20 20:33:52,967 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:33:52,968 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:33:52,989 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:33:52,989 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:33:53,163 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_267 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_267) |c_#length|)))) is different from true [2022-11-20 20:33:53,191 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:33:53,192 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:33:53,212 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:33:53,213 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:33:53,389 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_268 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_268) |c_#length|)))) is different from true [2022-11-20 20:33:53,443 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:33:53,444 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:33:53,459 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:33:53,459 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:33:53,658 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_269 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_269))))) is different from true [2022-11-20 20:33:53,684 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:33:53,686 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:33:53,709 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:33:53,709 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:33:53,775 INFO L134 CoverageAnalysis]: Checked inductivity of 67 backedges. 4 proven. 31 refuted. 0 times theorem prover too weak. 12 trivial. 20 not checked. [2022-11-20 20:33:53,775 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:33:54,332 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:33:54,333 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [970259721] [2022-11-20 20:33:54,333 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [970259721] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:33:54,333 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1167745444] [2022-11-20 20:33:54,333 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-20 20:33:54,333 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:33:54,333 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:33:54,337 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:33:54,351 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (22)] Waiting until timeout for monitored process [2022-11-20 20:33:54,916 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-20 20:33:54,916 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:33:54,940 INFO L263 TraceCheckSpWp]: Trace formula consists of 166 conjuncts, 53 conjunts are in the unsatisfiable core [2022-11-20 20:33:54,944 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:33:54,971 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:33:54,979 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:33:55,194 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-20 20:33:55,194 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-11-20 20:33:55,216 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:33:55,216 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:33:55,509 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-20 20:33:55,510 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-11-20 20:33:55,535 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:33:55,535 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:33:55,784 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:33:55,784 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:33:55,796 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:33:56,019 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_309 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_309) |c_#length|)))) is different from true [2022-11-20 20:33:56,044 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:33:56,046 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:33:56,065 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:33:56,066 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:33:56,084 INFO L134 CoverageAnalysis]: Checked inductivity of 67 backedges. 4 proven. 37 refuted. 0 times theorem prover too weak. 18 trivial. 8 not checked. [2022-11-20 20:33:56,084 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:33:58,783 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [1167745444] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:33:58,783 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1883560156] [2022-11-20 20:33:58,783 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-20 20:33:58,784 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:33:58,784 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:33:58,786 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:33:58,789 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2022-11-20 20:33:58,988 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-20 20:33:58,988 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:33:58,993 INFO L263 TraceCheckSpWp]: Trace formula consists of 166 conjuncts, 45 conjunts are in the unsatisfiable core [2022-11-20 20:33:59,001 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:33:59,013 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:33:59,020 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:33:59,118 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_343 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_343) |c_#length|)))) is different from true [2022-11-20 20:33:59,144 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:33:59,145 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:33:59,163 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:33:59,163 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:33:59,262 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_344 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_344))))) is different from true [2022-11-20 20:33:59,308 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:33:59,310 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:33:59,331 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:33:59,332 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:33:59,428 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_345 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_345))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:33:59,454 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:33:59,455 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:33:59,472 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:33:59,473 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:33:59,574 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_346 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_346) |c_#length|)))) is different from true [2022-11-20 20:33:59,599 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:33:59,600 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:33:59,616 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:33:59,616 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:33:59,641 INFO L134 CoverageAnalysis]: Checked inductivity of 67 backedges. 4 proven. 31 refuted. 0 times theorem prover too weak. 12 trivial. 20 not checked. [2022-11-20 20:33:59,641 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:34:00,064 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1883560156] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:34:00,064 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:34:00,064 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 19, 18] total 30 [2022-11-20 20:34:00,065 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1513916167] [2022-11-20 20:34:00,065 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:34:00,065 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-11-20 20:34:00,066 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:34:00,066 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-11-20 20:34:00,067 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=91, Invalid=488, Unknown=9, NotChecked=468, Total=1056 [2022-11-20 20:34:00,067 INFO L87 Difference]: Start difference. First operand 36 states and 44 transitions. Second operand has 31 states, 29 states have (on average 1.6896551724137931) internal successors, (49), 27 states have internal predecessors, (49), 5 states have call successors, (5), 2 states have call predecessors, (5), 11 states have return successors, (13), 8 states have call predecessors, (13), 5 states have call successors, (13) [2022-11-20 20:34:01,948 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:34:01,948 INFO L93 Difference]: Finished difference Result 57 states and 71 transitions. [2022-11-20 20:34:01,949 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-11-20 20:34:01,950 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 29 states have (on average 1.6896551724137931) internal successors, (49), 27 states have internal predecessors, (49), 5 states have call successors, (5), 2 states have call predecessors, (5), 11 states have return successors, (13), 8 states have call predecessors, (13), 5 states have call successors, (13) Word has length 44 [2022-11-20 20:34:01,950 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:34:01,951 INFO L225 Difference]: With dead ends: 57 [2022-11-20 20:34:01,951 INFO L226 Difference]: Without dead ends: 57 [2022-11-20 20:34:01,959 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 143 GetRequests, 103 SyntacticMatches, 4 SemanticMatches, 36 ConstructedPredicates, 9 IntricatePredicates, 0 DeprecatedPredicates, 139 ImplicationChecksByTransitivity, 4.8s TimeCoverageRelationStatistics Valid=121, Invalid=718, Unknown=9, NotChecked=558, Total=1406 [2022-11-20 20:34:01,960 INFO L413 NwaCegarLoop]: 21 mSDtfsCounter, 25 mSDsluCounter, 168 mSDsCounter, 0 mSdLazyCounter, 613 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 25 SdHoareTripleChecker+Valid, 189 SdHoareTripleChecker+Invalid, 1118 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 613 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 486 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2022-11-20 20:34:01,962 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [25 Valid, 189 Invalid, 1118 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 613 Invalid, 0 Unknown, 486 Unchecked, 1.2s Time] [2022-11-20 20:34:01,963 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57 states. [2022-11-20 20:34:01,971 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57 to 39. [2022-11-20 20:34:01,977 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39 states, 29 states have (on average 1.103448275862069) internal successors, (32), 31 states have internal predecessors, (32), 6 states have call successors, (6), 1 states have call predecessors, (6), 2 states have return successors, (11), 6 states have call predecessors, (11), 6 states have call successors, (11) [2022-11-20 20:34:01,978 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39 states to 39 states and 49 transitions. [2022-11-20 20:34:01,980 INFO L78 Accepts]: Start accepts. Automaton has 39 states and 49 transitions. Word has length 44 [2022-11-20 20:34:01,982 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:34:01,983 INFO L495 AbstractCegarLoop]: Abstraction has 39 states and 49 transitions. [2022-11-20 20:34:01,983 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 29 states have (on average 1.6896551724137931) internal successors, (49), 27 states have internal predecessors, (49), 5 states have call successors, (5), 2 states have call predecessors, (5), 11 states have return successors, (13), 8 states have call predecessors, (13), 5 states have call successors, (13) [2022-11-20 20:34:01,984 INFO L276 IsEmpty]: Start isEmpty. Operand 39 states and 49 transitions. [2022-11-20 20:34:01,985 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-11-20 20:34:01,989 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:34:01,990 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:34:01,998 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Forceful destruction successful, exit code 0 [2022-11-20 20:34:02,194 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (22)] Forceful destruction successful, exit code 0 [2022-11-20 20:34:02,401 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (21)] Forceful destruction successful, exit code 0 [2022-11-20 20:34:02,591 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 23 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true,22 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt,21 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:34:02,591 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:34:02,592 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:34:02,592 INFO L85 PathProgramCache]: Analyzing trace with hash -206900218, now seen corresponding path program 2 times [2022-11-20 20:34:02,592 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:34:02,592 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1730496698] [2022-11-20 20:34:02,592 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-11-20 20:34:02,593 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:34:02,593 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:34:02,594 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:34:02,598 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (24)] Waiting until timeout for monitored process [2022-11-20 20:34:02,751 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-11-20 20:34:02,751 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:34:02,759 INFO L263 TraceCheckSpWp]: Trace formula consists of 182 conjuncts, 7 conjunts are in the unsatisfiable core [2022-11-20 20:34:02,761 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:34:02,971 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 0 proven. 34 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2022-11-20 20:34:02,971 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:34:03,339 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 0 proven. 34 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2022-11-20 20:34:03,339 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:34:03,339 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1730496698] [2022-11-20 20:34:03,340 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1730496698] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-20 20:34:03,340 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1478600914] [2022-11-20 20:34:03,340 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-11-20 20:34:03,340 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:34:03,340 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:34:03,342 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:34:03,363 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (25)] Waiting until timeout for monitored process [2022-11-20 20:34:03,673 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-11-20 20:34:03,673 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:34:03,677 INFO L263 TraceCheckSpWp]: Trace formula consists of 182 conjuncts, 7 conjunts are in the unsatisfiable core [2022-11-20 20:34:03,679 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:34:03,831 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 0 proven. 34 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2022-11-20 20:34:03,832 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:34:03,970 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 0 proven. 34 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2022-11-20 20:34:03,970 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [1478600914] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-20 20:34:03,970 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2120677680] [2022-11-20 20:34:03,971 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-11-20 20:34:03,971 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:34:03,971 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:34:03,972 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:34:03,995 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Waiting until timeout for monitored process [2022-11-20 20:34:04,127 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-11-20 20:34:04,127 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:34:04,131 INFO L263 TraceCheckSpWp]: Trace formula consists of 182 conjuncts, 7 conjunts are in the unsatisfiable core [2022-11-20 20:34:04,132 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:34:04,264 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 0 proven. 34 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2022-11-20 20:34:04,265 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:34:04,398 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 0 proven. 34 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2022-11-20 20:34:04,398 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2120677680] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-20 20:34:04,398 INFO L184 FreeRefinementEngine]: Found 0 perfect and 6 imperfect interpolant sequences. [2022-11-20 20:34:04,398 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 8, 8, 8, 8, 8] total 14 [2022-11-20 20:34:04,399 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [536151497] [2022-11-20 20:34:04,399 INFO L85 oduleStraightlineAll]: Using 6 imperfect interpolants to construct interpolant automaton [2022-11-20 20:34:04,400 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-20 20:34:04,400 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:34:04,400 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-20 20:34:04,401 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=61, Invalid=121, Unknown=0, NotChecked=0, Total=182 [2022-11-20 20:34:04,401 INFO L87 Difference]: Start difference. First operand 39 states and 49 transitions. Second operand has 14 states, 14 states have (on average 3.2857142857142856) internal successors, (46), 14 states have internal predecessors, (46), 10 states have call successors, (10), 1 states have call predecessors, (10), 1 states have return successors, (10), 10 states have call predecessors, (10), 10 states have call successors, (10) [2022-11-20 20:34:05,138 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:34:05,139 INFO L93 Difference]: Finished difference Result 71 states and 91 transitions. [2022-11-20 20:34:05,139 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-20 20:34:05,140 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 3.2857142857142856) internal successors, (46), 14 states have internal predecessors, (46), 10 states have call successors, (10), 1 states have call predecessors, (10), 1 states have return successors, (10), 10 states have call predecessors, (10), 10 states have call successors, (10) Word has length 48 [2022-11-20 20:34:05,140 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:34:05,141 INFO L225 Difference]: With dead ends: 71 [2022-11-20 20:34:05,141 INFO L226 Difference]: Without dead ends: 71 [2022-11-20 20:34:05,142 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 287 GetRequests, 270 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 45 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=131, Invalid=211, Unknown=0, NotChecked=0, Total=342 [2022-11-20 20:34:05,142 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 160 mSDsluCounter, 98 mSDsCounter, 0 mSdLazyCounter, 163 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 161 SdHoareTripleChecker+Valid, 130 SdHoareTripleChecker+Invalid, 203 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 163 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-20 20:34:05,142 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [161 Valid, 130 Invalid, 203 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 163 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-20 20:34:05,143 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 71 states. [2022-11-20 20:34:05,151 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 71 to 66. [2022-11-20 20:34:05,151 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66 states, 51 states have (on average 1.1568627450980393) internal successors, (59), 53 states have internal predecessors, (59), 11 states have call successors, (11), 1 states have call predecessors, (11), 2 states have return successors, (21), 11 states have call predecessors, (21), 11 states have call successors, (21) [2022-11-20 20:34:05,153 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 91 transitions. [2022-11-20 20:34:05,153 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 91 transitions. Word has length 48 [2022-11-20 20:34:05,153 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:34:05,154 INFO L495 AbstractCegarLoop]: Abstraction has 66 states and 91 transitions. [2022-11-20 20:34:05,154 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 3.2857142857142856) internal successors, (46), 14 states have internal predecessors, (46), 10 states have call successors, (10), 1 states have call predecessors, (10), 1 states have return successors, (10), 10 states have call predecessors, (10), 10 states have call successors, (10) [2022-11-20 20:34:05,154 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 91 transitions. [2022-11-20 20:34:05,155 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-20 20:34:05,156 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:34:05,156 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 5, 5, 5, 4, 4, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:34:05,170 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (24)] Forceful destruction successful, exit code 0 [2022-11-20 20:34:05,373 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Forceful destruction successful, exit code 0 [2022-11-20 20:34:05,570 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (25)] Forceful destruction successful, exit code 0 [2022-11-20 20:34:05,767 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 24 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,26 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true,25 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt [2022-11-20 20:34:05,768 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:34:05,768 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:34:05,768 INFO L85 PathProgramCache]: Analyzing trace with hash 845314608, now seen corresponding path program 4 times [2022-11-20 20:34:05,769 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:34:05,769 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1952102303] [2022-11-20 20:34:05,769 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-20 20:34:05,769 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:34:05,769 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:34:05,770 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:34:05,774 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (27)] Waiting until timeout for monitored process [2022-11-20 20:34:05,984 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-20 20:34:05,984 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:34:05,992 INFO L263 TraceCheckSpWp]: Trace formula consists of 201 conjuncts, 52 conjunts are in the unsatisfiable core [2022-11-20 20:34:05,996 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:34:06,018 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:34:06,026 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:34:06,231 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_490 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_490) |c_#length|)))) is different from true [2022-11-20 20:34:06,256 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:06,257 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:06,271 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:06,271 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:06,472 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_491 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_491))))) is different from true [2022-11-20 20:34:06,498 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:06,500 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:06,515 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:06,516 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:06,697 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_492 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_492) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:34:06,723 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:06,724 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:06,740 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:06,740 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:06,922 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_493 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_493))))) is different from true [2022-11-20 20:34:06,947 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:06,948 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:06,963 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:06,964 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:07,152 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_494 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_494) |c_#length|)))) is different from true [2022-11-20 20:34:07,186 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:07,187 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:07,207 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:07,208 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:07,276 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 5 proven. 51 refuted. 0 times theorem prover too weak. 20 trivial. 30 not checked. [2022-11-20 20:34:07,276 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:34:07,846 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:34:07,846 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1952102303] [2022-11-20 20:34:07,847 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1952102303] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:34:07,847 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [217546074] [2022-11-20 20:34:07,847 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-20 20:34:07,847 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:34:07,847 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:34:07,848 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:34:07,850 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (28)] Waiting until timeout for monitored process [2022-11-20 20:34:08,191 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-20 20:34:08,192 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:34:08,197 INFO L263 TraceCheckSpWp]: Trace formula consists of 201 conjuncts, 52 conjunts are in the unsatisfiable core [2022-11-20 20:34:08,201 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:34:08,216 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:34:08,229 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:34:08,341 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_536 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_536) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:34:08,367 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:08,368 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:08,383 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:08,383 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:08,482 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_537 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_537))))) is different from true [2022-11-20 20:34:08,523 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:08,525 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:08,543 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:08,543 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:08,643 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_538 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_538))))) is different from true [2022-11-20 20:34:08,668 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:08,669 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:08,690 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:08,690 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:08,783 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_539 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_539) |c_#length|)))) is different from true [2022-11-20 20:34:08,807 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:08,807 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:08,821 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:08,821 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:08,911 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_540 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_540) |c_#length|)))) is different from true [2022-11-20 20:34:08,941 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:08,943 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:08,964 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:08,965 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:08,983 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 5 proven. 51 refuted. 0 times theorem prover too weak. 20 trivial. 30 not checked. [2022-11-20 20:34:08,983 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:34:11,474 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [217546074] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:34:11,475 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1674152941] [2022-11-20 20:34:11,475 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-20 20:34:11,475 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:34:11,475 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:34:11,476 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:34:11,479 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Waiting until timeout for monitored process [2022-11-20 20:34:11,660 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-20 20:34:11,660 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:34:11,665 INFO L263 TraceCheckSpWp]: Trace formula consists of 201 conjuncts, 54 conjunts are in the unsatisfiable core [2022-11-20 20:34:11,670 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:34:11,685 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:34:11,697 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:34:11,811 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_582 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_582))))) is different from true [2022-11-20 20:34:11,839 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:11,841 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:11,855 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:11,856 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:11,943 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_583 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_583) |c_#length|)))) is different from true [2022-11-20 20:34:11,972 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:11,974 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:11,988 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:11,989 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:12,091 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_584 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_584))))) is different from true [2022-11-20 20:34:12,120 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:12,121 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:12,142 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:12,143 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:12,337 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:12,338 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:12,371 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:34:12,371 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:34:12,710 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_587 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_587) |c_#length|)))) is different from true [2022-11-20 20:34:12,764 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:12,766 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:12,799 INFO L321 Elim1Store]: treesize reduction 12, result has 42.9 percent of original size [2022-11-20 20:34:12,800 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 20 treesize of output 22 [2022-11-20 20:34:12,820 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 5 proven. 53 refuted. 0 times theorem prover too weak. 20 trivial. 28 not checked. [2022-11-20 20:34:12,820 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:34:15,171 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1674152941] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:34:15,171 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:34:15,172 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 21, 21] total 33 [2022-11-20 20:34:15,172 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [69446877] [2022-11-20 20:34:15,172 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:34:15,173 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 34 states [2022-11-20 20:34:15,173 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:34:15,173 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 34 interpolants. [2022-11-20 20:34:15,174 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=97, Invalid=407, Unknown=14, NotChecked=742, Total=1260 [2022-11-20 20:34:15,174 INFO L87 Difference]: Start difference. First operand 66 states and 91 transitions. Second operand has 34 states, 32 states have (on average 1.90625) internal successors, (61), 33 states have internal predecessors, (61), 7 states have call successors, (7), 2 states have call predecessors, (7), 16 states have return successors, (16), 7 states have call predecessors, (16), 7 states have call successors, (16) [2022-11-20 20:34:16,698 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:34:16,698 INFO L93 Difference]: Finished difference Result 80 states and 107 transitions. [2022-11-20 20:34:16,699 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-11-20 20:34:16,699 INFO L78 Accepts]: Start accepts. Automaton has has 34 states, 32 states have (on average 1.90625) internal successors, (61), 33 states have internal predecessors, (61), 7 states have call successors, (7), 2 states have call predecessors, (7), 16 states have return successors, (16), 7 states have call predecessors, (16), 7 states have call successors, (16) Word has length 53 [2022-11-20 20:34:16,699 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:34:16,701 INFO L225 Difference]: With dead ends: 80 [2022-11-20 20:34:16,701 INFO L226 Difference]: Without dead ends: 80 [2022-11-20 20:34:16,702 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 167 GetRequests, 129 SyntacticMatches, 2 SemanticMatches, 36 ConstructedPredicates, 14 IntricatePredicates, 0 DeprecatedPredicates, 60 ImplicationChecksByTransitivity, 6.4s TimeCoverageRelationStatistics Valid=106, Invalid=488, Unknown=14, NotChecked=798, Total=1406 [2022-11-20 20:34:16,702 INFO L413 NwaCegarLoop]: 24 mSDtfsCounter, 20 mSDsluCounter, 187 mSDsCounter, 0 mSdLazyCounter, 403 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 211 SdHoareTripleChecker+Invalid, 1122 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 403 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 707 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-20 20:34:16,703 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 211 Invalid, 1122 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 403 Invalid, 0 Unknown, 707 Unchecked, 0.8s Time] [2022-11-20 20:34:16,703 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 80 states. [2022-11-20 20:34:16,710 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 80 to 73. [2022-11-20 20:34:16,711 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 73 states, 57 states have (on average 1.1403508771929824) internal successors, (65), 58 states have internal predecessors, (65), 12 states have call successors, (12), 1 states have call predecessors, (12), 2 states have return successors, (23), 13 states have call predecessors, (23), 12 states have call successors, (23) [2022-11-20 20:34:16,712 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 100 transitions. [2022-11-20 20:34:16,713 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 100 transitions. Word has length 53 [2022-11-20 20:34:16,713 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:34:16,713 INFO L495 AbstractCegarLoop]: Abstraction has 73 states and 100 transitions. [2022-11-20 20:34:16,714 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 34 states, 32 states have (on average 1.90625) internal successors, (61), 33 states have internal predecessors, (61), 7 states have call successors, (7), 2 states have call predecessors, (7), 16 states have return successors, (16), 7 states have call predecessors, (16), 7 states have call successors, (16) [2022-11-20 20:34:16,714 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 100 transitions. [2022-11-20 20:34:16,715 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-20 20:34:16,715 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:34:16,716 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 5, 5, 5, 5, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:34:16,723 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (28)] Forceful destruction successful, exit code 0 [2022-11-20 20:34:16,940 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (27)] Forceful destruction successful, exit code 0 [2022-11-20 20:34:17,125 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Forceful destruction successful, exit code 0 [2022-11-20 20:34:17,320 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 28 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt,27 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,29 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:34:17,320 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:34:17,321 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:34:17,321 INFO L85 PathProgramCache]: Analyzing trace with hash 846238129, now seen corresponding path program 1 times [2022-11-20 20:34:17,321 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:34:17,321 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [626238734] [2022-11-20 20:34:17,321 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:34:17,321 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:34:17,321 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:34:17,323 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:34:17,327 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (30)] Waiting until timeout for monitored process [2022-11-20 20:34:17,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:34:17,564 INFO L263 TraceCheckSpWp]: Trace formula consists of 195 conjuncts, 47 conjunts are in the unsatisfiable core [2022-11-20 20:34:17,569 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:34:17,596 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:34:17,615 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:34:17,827 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_627 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_627) |c_#length|)))) is different from true [2022-11-20 20:34:17,850 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:17,852 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:17,870 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:17,871 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:18,020 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_628 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_628) |c_#length|)))) is different from true [2022-11-20 20:34:18,043 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:18,044 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:18,061 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:18,061 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:18,253 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_629 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_629))))) is different from true [2022-11-20 20:34:18,293 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:18,294 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:18,309 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:18,309 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:18,502 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_630 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_630) |c_#length|)))) is different from true [2022-11-20 20:34:18,529 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:18,530 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:18,545 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:18,545 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:18,777 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 5 proven. 61 refuted. 0 times theorem prover too weak. 12 trivial. 28 not checked. [2022-11-20 20:34:18,777 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:34:24,160 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:34:24,161 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [626238734] [2022-11-20 20:34:24,161 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [626238734] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:34:24,161 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1081346115] [2022-11-20 20:34:24,161 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:34:24,161 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:34:24,161 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:34:24,162 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:34:24,164 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (31)] Waiting until timeout for monitored process [2022-11-20 20:34:24,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:34:24,493 INFO L263 TraceCheckSpWp]: Trace formula consists of 195 conjuncts, 47 conjunts are in the unsatisfiable core [2022-11-20 20:34:24,497 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:34:24,508 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:34:24,515 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:34:24,627 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_670 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_670))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:34:24,653 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:24,654 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:24,674 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:24,674 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:24,769 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_671 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_671) |c_#length|)))) is different from true [2022-11-20 20:34:24,792 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:24,793 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:24,808 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:24,809 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:24,903 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_672 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_672))))) is different from true [2022-11-20 20:34:24,937 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:24,938 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:24,957 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:24,958 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:25,036 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_673 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_673) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:34:25,054 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:25,055 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:25,067 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:25,068 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:25,144 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 5 proven. 61 refuted. 0 times theorem prover too weak. 12 trivial. 28 not checked. [2022-11-20 20:34:25,144 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:34:31,958 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [1081346115] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:34:31,958 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1153571134] [2022-11-20 20:34:31,958 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 20:34:31,958 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:34:31,959 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:34:31,960 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:34:31,970 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Waiting until timeout for monitored process [2022-11-20 20:34:32,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:34:32,121 INFO L263 TraceCheckSpWp]: Trace formula consists of 195 conjuncts, 48 conjunts are in the unsatisfiable core [2022-11-20 20:34:32,125 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:34:32,141 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:34:32,146 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:34:32,241 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_713 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_713) |c_#length|)))) is different from true [2022-11-20 20:34:32,265 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:32,266 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:32,282 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:32,282 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:32,378 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_714 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_714))))) is different from true [2022-11-20 20:34:32,400 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:32,401 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:32,416 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:32,416 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:32,518 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_715 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_715) |c_#length|)))) is different from true [2022-11-20 20:34:32,564 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:32,565 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:32,578 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:32,578 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:32,670 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_716 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_716) |c_#length|)))) is different from true [2022-11-20 20:34:32,693 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:32,694 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:32,713 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:32,713 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:32,802 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 5 proven. 61 refuted. 0 times theorem prover too weak. 12 trivial. 28 not checked. [2022-11-20 20:34:32,802 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:34:44,218 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1153571134] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:34:44,219 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:34:44,219 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 20, 20] total 28 [2022-11-20 20:34:44,220 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1197614632] [2022-11-20 20:34:44,221 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:34:44,221 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2022-11-20 20:34:44,222 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:34:44,222 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2022-11-20 20:34:44,223 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=119, Invalid=509, Unknown=20, NotChecked=684, Total=1332 [2022-11-20 20:34:44,223 INFO L87 Difference]: Start difference. First operand 73 states and 100 transitions. Second operand has 29 states, 27 states have (on average 2.0) internal successors, (54), 28 states have internal predecessors, (54), 6 states have call successors, (6), 3 states have call predecessors, (6), 14 states have return successors, (14), 6 states have call predecessors, (14), 6 states have call successors, (14) [2022-11-20 20:34:45,927 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:34:45,927 INFO L93 Difference]: Finished difference Result 82 states and 108 transitions. [2022-11-20 20:34:45,928 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-11-20 20:34:45,928 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 27 states have (on average 2.0) internal successors, (54), 28 states have internal predecessors, (54), 6 states have call successors, (6), 3 states have call predecessors, (6), 14 states have return successors, (14), 6 states have call predecessors, (14), 6 states have call successors, (14) Word has length 53 [2022-11-20 20:34:45,928 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:34:45,929 INFO L225 Difference]: With dead ends: 82 [2022-11-20 20:34:45,929 INFO L226 Difference]: Without dead ends: 82 [2022-11-20 20:34:45,929 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 194 GetRequests, 156 SyntacticMatches, 1 SemanticMatches, 37 ConstructedPredicates, 12 IntricatePredicates, 0 DeprecatedPredicates, 63 ImplicationChecksByTransitivity, 23.6s TimeCoverageRelationStatistics Valid=131, Invalid=599, Unknown=20, NotChecked=732, Total=1482 [2022-11-20 20:34:45,930 INFO L413 NwaCegarLoop]: 25 mSDtfsCounter, 19 mSDsluCounter, 184 mSDsCounter, 0 mSdLazyCounter, 464 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 19 SdHoareTripleChecker+Valid, 209 SdHoareTripleChecker+Invalid, 1077 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 464 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 594 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-11-20 20:34:45,930 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [19 Valid, 209 Invalid, 1077 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 464 Invalid, 0 Unknown, 594 Unchecked, 0.9s Time] [2022-11-20 20:34:45,931 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82 states. [2022-11-20 20:34:45,937 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82 to 66. [2022-11-20 20:34:45,937 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66 states, 51 states have (on average 1.1372549019607843) internal successors, (58), 53 states have internal predecessors, (58), 11 states have call successors, (11), 1 states have call predecessors, (11), 2 states have return successors, (21), 11 states have call predecessors, (21), 11 states have call successors, (21) [2022-11-20 20:34:45,938 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 90 transitions. [2022-11-20 20:34:45,939 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 90 transitions. Word has length 53 [2022-11-20 20:34:45,939 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:34:45,939 INFO L495 AbstractCegarLoop]: Abstraction has 66 states and 90 transitions. [2022-11-20 20:34:45,939 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 27 states have (on average 2.0) internal successors, (54), 28 states have internal predecessors, (54), 6 states have call successors, (6), 3 states have call predecessors, (6), 14 states have return successors, (14), 6 states have call predecessors, (14), 6 states have call successors, (14) [2022-11-20 20:34:45,940 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 90 transitions. [2022-11-20 20:34:45,941 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2022-11-20 20:34:45,941 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:34:45,941 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 6, 6, 6, 6, 5, 5, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:34:45,951 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Forceful destruction successful, exit code 0 [2022-11-20 20:34:46,152 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (31)] Forceful destruction successful, exit code 0 [2022-11-20 20:34:46,358 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (30)] Forceful destruction successful, exit code 0 [2022-11-20 20:34:46,549 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 32 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true,31 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt,30 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:34:46,550 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:34:46,550 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:34:46,551 INFO L85 PathProgramCache]: Analyzing trace with hash -1540616881, now seen corresponding path program 5 times [2022-11-20 20:34:46,551 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:34:46,551 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [977936183] [2022-11-20 20:34:46,551 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2022-11-20 20:34:46,551 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:34:46,552 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:34:46,553 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:34:46,592 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (33)] Waiting until timeout for monitored process [2022-11-20 20:34:46,883 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 7 check-sat command(s) [2022-11-20 20:34:46,884 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:34:46,894 INFO L263 TraceCheckSpWp]: Trace formula consists of 236 conjuncts, 64 conjunts are in the unsatisfiable core [2022-11-20 20:34:46,902 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:34:46,927 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:34:47,205 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-20 20:34:47,205 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-11-20 20:34:47,725 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_767 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_767) |c_#length|)))) is different from true [2022-11-20 20:34:47,759 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:47,794 INFO L321 Elim1Store]: treesize reduction 19, result has 32.1 percent of original size [2022-11-20 20:34:47,795 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 24 treesize of output 31 [2022-11-20 20:34:47,824 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:47,825 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:48,179 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_768 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_768))))) is different from true [2022-11-20 20:34:48,208 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:48,209 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:48,228 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:48,228 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:48,421 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_769 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_769) |c_#length|)))) is different from true [2022-11-20 20:34:48,444 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:48,446 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:48,459 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:48,460 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:48,703 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_770 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_770) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:34:48,736 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:48,737 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:48,755 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:48,756 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:48,996 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_771 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_771))))) is different from true [2022-11-20 20:34:49,016 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:49,018 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:49,036 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:49,036 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:49,137 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 12 proven. 82 refuted. 0 times theorem prover too weak. 20 trivial. 40 not checked. [2022-11-20 20:34:49,137 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:34:51,772 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:34:51,772 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [977936183] [2022-11-20 20:34:51,772 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [977936183] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:34:51,772 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1914979679] [2022-11-20 20:34:51,773 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2022-11-20 20:34:51,773 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:34:51,773 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:34:51,774 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:34:51,775 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (34)] Waiting until timeout for monitored process [2022-11-20 20:34:52,312 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 7 check-sat command(s) [2022-11-20 20:34:52,312 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:34:52,340 INFO L263 TraceCheckSpWp]: Trace formula consists of 236 conjuncts, 65 conjunts are in the unsatisfiable core [2022-11-20 20:34:52,345 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:34:52,357 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:34:52,471 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-20 20:34:52,471 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-11-20 20:34:52,656 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_822 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_822) |c_#length|)))) is different from true [2022-11-20 20:34:52,684 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:52,722 INFO L321 Elim1Store]: treesize reduction 19, result has 32.1 percent of original size [2022-11-20 20:34:52,722 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 24 treesize of output 31 [2022-11-20 20:34:52,748 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:52,748 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:52,884 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_823 (_ BitVec 1))) (= |c_#valid| (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_823))) (exists ((v_ArrVal_824 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_824))))) is different from true [2022-11-20 20:34:52,949 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:34:52,950 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:34:52,960 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:53,075 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_826 (_ BitVec 1))) (= (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_826) |c_#valid|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_825 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_825))))) is different from true [2022-11-20 20:34:53,142 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:34:53,142 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:34:53,153 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:53,241 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_827 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_827) |c_#length|)))) is different from true [2022-11-20 20:34:53,264 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:53,265 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:53,282 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:53,283 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:53,369 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_828 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_828))))) is different from true [2022-11-20 20:34:53,389 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:53,390 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:53,405 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:53,406 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:53,427 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 12 proven. 82 refuted. 0 times theorem prover too weak. 20 trivial. 40 not checked. [2022-11-20 20:34:53,428 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:34:55,976 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [1914979679] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:34:55,976 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1685453825] [2022-11-20 20:34:55,976 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2022-11-20 20:34:55,977 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:34:55,977 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:34:55,978 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:34:55,987 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Waiting until timeout for monitored process [2022-11-20 20:34:56,713 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 7 check-sat command(s) [2022-11-20 20:34:56,714 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:34:56,721 INFO L263 TraceCheckSpWp]: Trace formula consists of 236 conjuncts, 62 conjunts are in the unsatisfiable core [2022-11-20 20:34:56,726 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:34:56,738 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:34:56,750 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:34:57,122 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_878 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_878))))) is different from true [2022-11-20 20:34:57,143 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:57,146 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:57,164 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:57,164 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:57,257 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_880 (_ BitVec 1))) (= (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_880) |c_#valid|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_879 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_879) |c_#length|)))) is different from true [2022-11-20 20:34:57,281 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:57,282 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:57,318 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:34:57,318 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:34:57,444 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_881 (_ BitVec 1))) (= |c_#valid| (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_881))) (exists ((v_ArrVal_882 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_882) |c_#length|)))) is different from true [2022-11-20 20:34:57,520 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:34:57,521 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:34:57,529 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:57,650 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_883 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_883) |c_#length|)) (exists ((v_ArrVal_884 (_ BitVec 1))) (= (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_884) |c_#valid|)))) is different from true [2022-11-20 20:34:57,679 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:57,680 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:57,723 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:34:57,723 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:34:57,839 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_885 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_885) |c_#length|)))) is different from true [2022-11-20 20:34:57,863 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:57,865 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:57,887 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:57,887 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:58,008 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_886 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_886) |c_#length|)))) is different from true [2022-11-20 20:34:58,034 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:34:58,035 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:34:58,048 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:34:58,049 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:34:58,067 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 6 proven. 76 refuted. 0 times theorem prover too weak. 30 trivial. 42 not checked. [2022-11-20 20:34:58,067 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:34:58,542 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1685453825] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:34:58,542 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:34:58,542 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [29, 27, 21] total 43 [2022-11-20 20:34:58,543 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1813363940] [2022-11-20 20:34:58,543 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:34:58,544 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 44 states [2022-11-20 20:34:58,544 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:34:58,544 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 44 interpolants. [2022-11-20 20:34:58,545 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=122, Invalid=795, Unknown=17, NotChecked=1136, Total=2070 [2022-11-20 20:34:58,546 INFO L87 Difference]: Start difference. First operand 66 states and 90 transitions. Second operand has 44 states, 42 states have (on average 1.9285714285714286) internal successors, (81), 40 states have internal predecessors, (81), 9 states have call successors, (9), 3 states have call predecessors, (9), 19 states have return successors, (19), 12 states have call predecessors, (19), 9 states have call successors, (19) [2022-11-20 20:35:01,899 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:35:01,899 INFO L93 Difference]: Finished difference Result 98 states and 132 transitions. [2022-11-20 20:35:01,900 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2022-11-20 20:35:01,900 INFO L78 Accepts]: Start accepts. Automaton has has 44 states, 42 states have (on average 1.9285714285714286) internal successors, (81), 40 states have internal predecessors, (81), 9 states have call successors, (9), 3 states have call predecessors, (9), 19 states have return successors, (19), 12 states have call predecessors, (19), 9 states have call successors, (19) Word has length 62 [2022-11-20 20:35:01,901 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:35:01,902 INFO L225 Difference]: With dead ends: 98 [2022-11-20 20:35:01,902 INFO L226 Difference]: Without dead ends: 98 [2022-11-20 20:35:01,903 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 199 GetRequests, 147 SyntacticMatches, 2 SemanticMatches, 50 ConstructedPredicates, 16 IntricatePredicates, 0 DeprecatedPredicates, 157 ImplicationChecksByTransitivity, 8.4s TimeCoverageRelationStatistics Valid=160, Invalid=1147, Unknown=17, NotChecked=1328, Total=2652 [2022-11-20 20:35:01,904 INFO L413 NwaCegarLoop]: 25 mSDtfsCounter, 25 mSDsluCounter, 255 mSDsCounter, 0 mSdLazyCounter, 761 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 25 SdHoareTripleChecker+Valid, 280 SdHoareTripleChecker+Invalid, 1746 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 761 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 965 IncrementalHoareTripleChecker+Unchecked, 1.6s IncrementalHoareTripleChecker+Time [2022-11-20 20:35:01,905 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [25 Valid, 280 Invalid, 1746 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 761 Invalid, 0 Unknown, 965 Unchecked, 1.6s Time] [2022-11-20 20:35:01,905 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 98 states. [2022-11-20 20:35:01,911 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 98 to 93. [2022-11-20 20:35:01,911 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 93 states, 73 states have (on average 1.095890410958904) internal successors, (80), 74 states have internal predecessors, (80), 16 states have call successors, (16), 1 states have call predecessors, (16), 2 states have return successors, (31), 17 states have call predecessors, (31), 16 states have call successors, (31) [2022-11-20 20:35:01,913 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 93 states to 93 states and 127 transitions. [2022-11-20 20:35:01,913 INFO L78 Accepts]: Start accepts. Automaton has 93 states and 127 transitions. Word has length 62 [2022-11-20 20:35:01,914 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:35:01,914 INFO L495 AbstractCegarLoop]: Abstraction has 93 states and 127 transitions. [2022-11-20 20:35:01,914 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 44 states, 42 states have (on average 1.9285714285714286) internal successors, (81), 40 states have internal predecessors, (81), 9 states have call successors, (9), 3 states have call predecessors, (9), 19 states have return successors, (19), 12 states have call predecessors, (19), 9 states have call successors, (19) [2022-11-20 20:35:01,914 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 127 transitions. [2022-11-20 20:35:01,916 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2022-11-20 20:35:01,916 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:35:01,917 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 6, 6, 6, 6, 6, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:35:01,930 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (34)] Ended with exit code 0 [2022-11-20 20:35:02,129 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Forceful destruction successful, exit code 0 [2022-11-20 20:35:02,331 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (33)] Forceful destruction successful, exit code 0 [2022-11-20 20:35:02,522 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 34 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt,35 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true,33 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:35:02,523 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:35:02,523 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:35:02,523 INFO L85 PathProgramCache]: Analyzing trace with hash 818690128, now seen corresponding path program 2 times [2022-11-20 20:35:02,523 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:35:02,523 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1500429209] [2022-11-20 20:35:02,523 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-11-20 20:35:02,524 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:35:02,524 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:35:02,525 INFO L229 MonitoredProcess]: Starting monitored process 36 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:35:02,527 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (36)] Waiting until timeout for monitored process [2022-11-20 20:35:02,754 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-11-20 20:35:02,754 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:35:02,764 INFO L263 TraceCheckSpWp]: Trace formula consists of 230 conjuncts, 57 conjunts are in the unsatisfiable core [2022-11-20 20:35:02,773 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:35:02,804 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:35:02,811 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:35:03,027 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_934 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_934) |c_#length|)))) is different from true [2022-11-20 20:35:03,069 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:03,070 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:03,086 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:03,086 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:03,418 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_935 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_935) |c_#length|)))) is different from true [2022-11-20 20:35:03,444 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:03,447 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:03,466 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:03,466 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:03,639 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_936 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_936) |c_#length|)))) is different from true [2022-11-20 20:35:03,661 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:03,662 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:03,681 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:03,682 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:03,877 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_937 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_937))))) is different from true [2022-11-20 20:35:03,906 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:03,907 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:03,925 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:03,926 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:04,138 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_938 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_938))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:35:04,160 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:04,161 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:04,183 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:04,183 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:04,253 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 6 proven. 78 refuted. 0 times theorem prover too weak. 30 trivial. 40 not checked. [2022-11-20 20:35:04,253 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:35:06,844 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:35:06,844 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1500429209] [2022-11-20 20:35:06,845 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1500429209] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:35:06,845 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1609169040] [2022-11-20 20:35:06,845 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-11-20 20:35:06,845 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:35:06,845 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:35:06,846 INFO L229 MonitoredProcess]: Starting monitored process 37 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:35:06,848 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (37)] Waiting until timeout for monitored process [2022-11-20 20:35:07,205 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-11-20 20:35:07,206 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:35:07,211 INFO L263 TraceCheckSpWp]: Trace formula consists of 230 conjuncts, 57 conjunts are in the unsatisfiable core [2022-11-20 20:35:07,218 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:35:07,233 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:35:07,241 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:35:07,345 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_986 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_986) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:35:07,364 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:07,365 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:07,382 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:07,383 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:07,569 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_987 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_987) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:35:07,593 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:07,594 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:07,608 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:07,609 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:07,705 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_988 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_988) |c_#length|)))) is different from true [2022-11-20 20:35:07,729 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:07,730 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:07,749 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:07,749 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:07,853 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_989 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_989) |c_#length|)))) is different from true [2022-11-20 20:35:07,872 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:07,873 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:07,900 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:07,901 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:07,990 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_990 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_990) |c_#length|)))) is different from true [2022-11-20 20:35:08,015 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:08,016 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:08,033 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:08,033 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:08,059 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 6 proven. 78 refuted. 0 times theorem prover too weak. 30 trivial. 40 not checked. [2022-11-20 20:35:08,059 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:35:10,460 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [1609169040] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:35:10,461 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1522505508] [2022-11-20 20:35:10,461 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-11-20 20:35:10,461 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:35:10,461 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:35:10,462 INFO L229 MonitoredProcess]: Starting monitored process 38 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:35:10,464 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Waiting until timeout for monitored process [2022-11-20 20:35:10,641 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-11-20 20:35:10,641 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:35:10,646 INFO L263 TraceCheckSpWp]: Trace formula consists of 230 conjuncts, 56 conjunts are in the unsatisfiable core [2022-11-20 20:35:10,652 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:35:10,662 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:35:10,671 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:35:10,795 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1038 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1038))))) is different from true [2022-11-20 20:35:10,817 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:10,817 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:10,832 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:10,832 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:11,106 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1039 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1039) |c_#length|)))) is different from true [2022-11-20 20:35:11,131 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:11,132 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:11,145 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:11,146 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:11,236 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1040 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1040))))) is different from true [2022-11-20 20:35:11,277 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:11,278 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:11,296 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:11,296 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:11,395 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1041 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1041))))) is different from true [2022-11-20 20:35:11,419 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:11,420 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:11,449 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:11,449 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:11,554 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1042 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1042) |c_#length|)))) is different from true [2022-11-20 20:35:11,574 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:11,577 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:11,595 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:11,596 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:11,622 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 14 proven. 80 refuted. 0 times theorem prover too weak. 20 trivial. 40 not checked. [2022-11-20 20:35:11,623 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:35:12,113 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1522505508] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:35:12,113 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:35:12,113 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 22, 24] total 34 [2022-11-20 20:35:12,113 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [971418599] [2022-11-20 20:35:12,113 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:35:12,114 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 35 states [2022-11-20 20:35:12,114 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:35:12,115 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2022-11-20 20:35:12,115 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=96, Invalid=410, Unknown=16, NotChecked=810, Total=1332 [2022-11-20 20:35:12,116 INFO L87 Difference]: Start difference. First operand 93 states and 127 transitions. Second operand has 35 states, 33 states have (on average 2.1515151515151514) internal successors, (71), 34 states have internal predecessors, (71), 8 states have call successors, (8), 3 states have call predecessors, (8), 18 states have return successors, (18), 8 states have call predecessors, (18), 8 states have call successors, (18) [2022-11-20 20:35:14,253 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:35:14,254 INFO L93 Difference]: Finished difference Result 132 states and 173 transitions. [2022-11-20 20:35:14,259 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-11-20 20:35:14,259 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 33 states have (on average 2.1515151515151514) internal successors, (71), 34 states have internal predecessors, (71), 8 states have call successors, (8), 3 states have call predecessors, (8), 18 states have return successors, (18), 8 states have call predecessors, (18), 8 states have call successors, (18) Word has length 62 [2022-11-20 20:35:14,260 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:35:14,261 INFO L225 Difference]: With dead ends: 132 [2022-11-20 20:35:14,261 INFO L226 Difference]: Without dead ends: 132 [2022-11-20 20:35:14,262 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 194 GetRequests, 155 SyntacticMatches, 2 SemanticMatches, 37 ConstructedPredicates, 15 IntricatePredicates, 0 DeprecatedPredicates, 45 ImplicationChecksByTransitivity, 6.6s TimeCoverageRelationStatistics Valid=105, Invalid=491, Unknown=16, NotChecked=870, Total=1482 [2022-11-20 20:35:14,263 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 20 mSDsluCounter, 242 mSDsCounter, 0 mSdLazyCounter, 627 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 270 SdHoareTripleChecker+Invalid, 1505 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 627 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 861 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-11-20 20:35:14,263 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 270 Invalid, 1505 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 627 Invalid, 0 Unknown, 861 Unchecked, 1.3s Time] [2022-11-20 20:35:14,264 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 132 states. [2022-11-20 20:35:14,269 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 132 to 66. [2022-11-20 20:35:14,270 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66 states, 51 states have (on average 1.1176470588235294) internal successors, (57), 53 states have internal predecessors, (57), 11 states have call successors, (11), 1 states have call predecessors, (11), 2 states have return successors, (21), 11 states have call predecessors, (21), 11 states have call successors, (21) [2022-11-20 20:35:14,271 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 89 transitions. [2022-11-20 20:35:14,271 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 89 transitions. Word has length 62 [2022-11-20 20:35:14,272 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:35:14,272 INFO L495 AbstractCegarLoop]: Abstraction has 66 states and 89 transitions. [2022-11-20 20:35:14,272 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 35 states, 33 states have (on average 2.1515151515151514) internal successors, (71), 34 states have internal predecessors, (71), 8 states have call successors, (8), 3 states have call predecessors, (8), 18 states have return successors, (18), 8 states have call predecessors, (18), 8 states have call successors, (18) [2022-11-20 20:35:14,272 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 89 transitions. [2022-11-20 20:35:14,273 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2022-11-20 20:35:14,274 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:35:14,274 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 7, 7, 7, 7, 6, 6, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:35:14,281 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Forceful destruction successful, exit code 0 [2022-11-20 20:35:14,491 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (36)] Forceful destruction successful, exit code 0 [2022-11-20 20:35:14,686 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (37)] Forceful destruction successful, exit code 0 [2022-11-20 20:35:14,883 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 38 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true,36 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,37 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt [2022-11-20 20:35:14,883 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:35:14,884 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:35:14,884 INFO L85 PathProgramCache]: Analyzing trace with hash -446919408, now seen corresponding path program 6 times [2022-11-20 20:35:14,884 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:35:14,884 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [192099550] [2022-11-20 20:35:14,884 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2022-11-20 20:35:14,885 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:35:14,885 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:35:14,886 INFO L229 MonitoredProcess]: Starting monitored process 39 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:35:14,888 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (39)] Waiting until timeout for monitored process [2022-11-20 20:35:15,289 INFO L228 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 8 check-sat command(s) [2022-11-20 20:35:15,289 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:35:15,299 INFO L263 TraceCheckSpWp]: Trace formula consists of 271 conjuncts, 68 conjunts are in the unsatisfiable core [2022-11-20 20:35:15,303 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:35:15,323 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:35:15,332 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:35:15,504 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1100 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1100) |c_#length|)))) is different from true [2022-11-20 20:35:15,521 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:15,522 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:15,550 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:15,550 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:15,693 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1101 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1101) |c_#length|)))) is different from true [2022-11-20 20:35:15,714 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:15,714 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:15,730 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:15,731 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:15,927 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1102 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1102))))) is different from true [2022-11-20 20:35:15,952 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:15,953 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:15,970 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:15,971 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:16,128 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1103 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1103) |c_#length|)))) is different from true [2022-11-20 20:35:16,147 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:16,147 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:16,160 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:16,161 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:16,354 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1104 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1104) |c_#length|)))) is different from true [2022-11-20 20:35:16,373 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:16,373 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:16,390 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:16,390 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:16,565 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_1105 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1105))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:35:16,582 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:16,595 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:16,610 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:16,611 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:16,795 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_1106 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1106))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:35:16,816 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:16,818 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:16,831 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:16,831 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:16,895 INFO L134 CoverageAnalysis]: Checked inductivity of 211 backedges. 7 proven. 106 refuted. 0 times theorem prover too weak. 42 trivial. 56 not checked. [2022-11-20 20:35:16,895 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:35:25,535 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:35:25,535 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [192099550] [2022-11-20 20:35:25,535 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [192099550] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:35:25,535 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1541213935] [2022-11-20 20:35:25,535 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2022-11-20 20:35:25,535 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:35:25,535 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:35:25,536 INFO L229 MonitoredProcess]: Starting monitored process 40 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:35:25,539 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (40)] Waiting until timeout for monitored process [2022-11-20 20:35:26,912 INFO L228 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 8 check-sat command(s) [2022-11-20 20:35:26,912 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:35:26,924 INFO L263 TraceCheckSpWp]: Trace formula consists of 271 conjuncts, 81 conjunts are in the unsatisfiable core [2022-11-20 20:35:26,928 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:35:26,940 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:35:26,948 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:35:27,194 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:35:27,194 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:35:27,224 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:27,775 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1167 (_ BitVec 1))) (= (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_1167) |c_#valid|)) (exists ((v_ArrVal_1168 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1168) |c_#length|)))) is different from true [2022-11-20 20:35:27,894 INFO L321 Elim1Store]: treesize reduction 44, result has 34.3 percent of original size [2022-11-20 20:35:27,895 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 26 treesize of output 43 [2022-11-20 20:35:27,913 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:28,357 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-20 20:35:28,358 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-11-20 20:35:28,437 INFO L321 Elim1Store]: treesize reduction 44, result has 34.3 percent of original size [2022-11-20 20:35:28,438 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 26 treesize of output 43 [2022-11-20 20:35:29,242 INFO L321 Elim1Store]: treesize reduction 12, result has 42.9 percent of original size [2022-11-20 20:35:29,243 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 20 treesize of output 22 [2022-11-20 20:35:29,253 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:29,678 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:29,679 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:29,689 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:29,973 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1176 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1176) |c_#length|)))) is different from true [2022-11-20 20:35:29,992 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:29,993 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:30,011 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:30,012 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:30,100 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1177 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1177))))) is different from true [2022-11-20 20:35:30,132 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:30,133 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:30,146 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:30,146 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:30,162 INFO L134 CoverageAnalysis]: Checked inductivity of 211 backedges. 7 proven. 120 refuted. 4 times theorem prover too weak. 44 trivial. 36 not checked. [2022-11-20 20:35:30,163 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:35:30,673 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [1541213935] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:35:30,673 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [956790197] [2022-11-20 20:35:30,673 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2022-11-20 20:35:30,673 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:35:30,673 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:35:30,674 INFO L229 MonitoredProcess]: Starting monitored process 41 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:35:30,677 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (41)] Waiting until timeout for monitored process [2022-11-20 20:35:34,634 INFO L228 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 8 check-sat command(s) [2022-11-20 20:35:34,634 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:35:34,645 INFO L263 TraceCheckSpWp]: Trace formula consists of 271 conjuncts, 71 conjunts are in the unsatisfiable core [2022-11-20 20:35:34,650 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:35:34,666 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:35:34,677 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:35:34,784 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_1235 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1235) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:35:34,806 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:34,807 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:34,826 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:34,826 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:34,932 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1236 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1236) |c_#length|)) (exists ((v_ArrVal_1237 (_ BitVec 1))) (= |c_#valid| (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_1237))))) is different from true [2022-11-20 20:35:34,995 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:35:34,996 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:35:35,002 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:35,159 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1238 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1238) |c_#length|)))) is different from true [2022-11-20 20:35:35,182 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:35,183 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:35,201 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:35,201 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:35,298 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1239 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1239) |c_#length|)))) is different from true [2022-11-20 20:35:35,319 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:35,320 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:35,339 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:35,339 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:35,435 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1240 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1240) |c_#length|)))) is different from true [2022-11-20 20:35:35,472 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:35,473 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:35,491 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:35,492 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:35,576 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1241 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1241))))) is different from true [2022-11-20 20:35:35,595 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:35,596 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:35,615 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:35,616 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:35,711 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1242 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1242) |c_#length|)))) is different from true [2022-11-20 20:35:35,730 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:35,731 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:35,745 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:35,745 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:35,769 INFO L134 CoverageAnalysis]: Checked inductivity of 211 backedges. 7 proven. 106 refuted. 0 times theorem prover too weak. 42 trivial. 56 not checked. [2022-11-20 20:35:35,769 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:35:38,649 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [956790197] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:35:38,649 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:35:38,649 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [27, 31, 26] total 52 [2022-11-20 20:35:38,650 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [999196309] [2022-11-20 20:35:38,650 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:35:38,650 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 53 states [2022-11-20 20:35:38,651 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:35:38,651 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 53 interpolants. [2022-11-20 20:35:38,652 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=182, Invalid=1272, Unknown=20, NotChecked=1496, Total=2970 [2022-11-20 20:35:38,652 INFO L87 Difference]: Start difference. First operand 66 states and 89 transitions. Second operand has 53 states, 51 states have (on average 1.8235294117647058) internal successors, (93), 48 states have internal predecessors, (93), 11 states have call successors, (11), 2 states have call predecessors, (11), 21 states have return successors, (22), 14 states have call predecessors, (22), 11 states have call successors, (22) [2022-11-20 20:35:41,643 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:35:41,643 INFO L93 Difference]: Finished difference Result 125 states and 166 transitions. [2022-11-20 20:35:41,643 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-11-20 20:35:41,644 INFO L78 Accepts]: Start accepts. Automaton has has 53 states, 51 states have (on average 1.8235294117647058) internal successors, (93), 48 states have internal predecessors, (93), 11 states have call successors, (11), 2 states have call predecessors, (11), 21 states have return successors, (22), 14 states have call predecessors, (22), 11 states have call successors, (22) Word has length 71 [2022-11-20 20:35:41,644 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:35:41,645 INFO L225 Difference]: With dead ends: 125 [2022-11-20 20:35:41,645 INFO L226 Difference]: Without dead ends: 125 [2022-11-20 20:35:41,646 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 223 GetRequests, 162 SyntacticMatches, 4 SemanticMatches, 57 ConstructedPredicates, 17 IntricatePredicates, 0 DeprecatedPredicates, 430 ImplicationChecksByTransitivity, 15.5s TimeCoverageRelationStatistics Valid=207, Invalid=1563, Unknown=20, NotChecked=1632, Total=3422 [2022-11-20 20:35:41,647 INFO L413 NwaCegarLoop]: 25 mSDtfsCounter, 30 mSDsluCounter, 239 mSDsCounter, 0 mSdLazyCounter, 740 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 30 SdHoareTripleChecker+Valid, 264 SdHoareTripleChecker+Invalid, 2039 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 740 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 1274 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2022-11-20 20:35:41,648 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [30 Valid, 264 Invalid, 2039 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 740 Invalid, 0 Unknown, 1274 Unchecked, 1.5s Time] [2022-11-20 20:35:41,648 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 125 states. [2022-11-20 20:35:41,654 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 125 to 108. [2022-11-20 20:35:41,655 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 108 states, 85 states have (on average 1.0705882352941176) internal successors, (91), 86 states have internal predecessors, (91), 19 states have call successors, (19), 1 states have call predecessors, (19), 2 states have return successors, (37), 20 states have call predecessors, (37), 19 states have call successors, (37) [2022-11-20 20:35:41,657 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 108 states to 108 states and 147 transitions. [2022-11-20 20:35:41,657 INFO L78 Accepts]: Start accepts. Automaton has 108 states and 147 transitions. Word has length 71 [2022-11-20 20:35:41,657 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:35:41,658 INFO L495 AbstractCegarLoop]: Abstraction has 108 states and 147 transitions. [2022-11-20 20:35:41,658 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 53 states, 51 states have (on average 1.8235294117647058) internal successors, (93), 48 states have internal predecessors, (93), 11 states have call successors, (11), 2 states have call predecessors, (11), 21 states have return successors, (22), 14 states have call predecessors, (22), 11 states have call successors, (22) [2022-11-20 20:35:41,658 INFO L276 IsEmpty]: Start isEmpty. Operand 108 states and 147 transitions. [2022-11-20 20:35:41,660 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2022-11-20 20:35:41,660 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:35:41,661 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 7, 7, 7, 7, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:35:41,678 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (39)] Forceful destruction successful, exit code 0 [2022-11-20 20:35:41,881 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (40)] Forceful destruction successful, exit code 0 [2022-11-20 20:35:42,086 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (41)] Forceful destruction successful, exit code 0 [2022-11-20 20:35:42,277 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 39 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,40 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt,41 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:35:42,277 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:35:42,277 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:35:42,277 INFO L85 PathProgramCache]: Analyzing trace with hash 1837944047, now seen corresponding path program 3 times [2022-11-20 20:35:42,278 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:35:42,278 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1442450917] [2022-11-20 20:35:42,278 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-20 20:35:42,278 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:35:42,278 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:35:42,279 INFO L229 MonitoredProcess]: Starting monitored process 42 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:35:42,281 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (42)] Waiting until timeout for monitored process [2022-11-20 20:35:42,621 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 8 check-sat command(s) [2022-11-20 20:35:42,621 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:35:42,631 INFO L263 TraceCheckSpWp]: Trace formula consists of 265 conjuncts, 62 conjunts are in the unsatisfiable core [2022-11-20 20:35:42,636 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:35:42,660 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:35:42,851 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| |c_ldv_malloc_#in~size|) |c_#length|)) is different from true [2022-11-20 20:35:42,890 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-20 20:35:42,890 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-11-20 20:35:43,303 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1298 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1298) |c_#length|)))) is different from true [2022-11-20 20:35:43,329 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:43,363 INFO L321 Elim1Store]: treesize reduction 19, result has 32.1 percent of original size [2022-11-20 20:35:43,363 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 24 treesize of output 31 [2022-11-20 20:35:43,390 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:43,391 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:43,708 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1299 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1299) |c_#length|)))) is different from true [2022-11-20 20:35:43,733 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:43,734 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 18 [2022-11-20 20:35:43,756 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:43,756 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:44,217 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1300 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1300) |c_#length|)))) is different from true [2022-11-20 20:35:44,262 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:44,263 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 18 [2022-11-20 20:35:44,291 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:44,291 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:44,573 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1301 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1301) |c_#length|)))) is different from true [2022-11-20 20:35:44,594 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:44,595 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 18 [2022-11-20 20:35:44,619 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:44,619 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:44,984 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1302 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1302) |c_#length|)))) is different from true [2022-11-20 20:35:45,029 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:45,033 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:45,049 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:45,050 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:45,149 INFO L134 CoverageAnalysis]: Checked inductivity of 211 backedges. 19 proven. 117 refuted. 0 times theorem prover too weak. 21 trivial. 54 not checked. [2022-11-20 20:35:45,149 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:35:45,839 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:35:45,839 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1442450917] [2022-11-20 20:35:45,839 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1442450917] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:35:45,839 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1491098126] [2022-11-20 20:35:45,839 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-20 20:35:45,840 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:35:45,840 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:35:45,841 INFO L229 MonitoredProcess]: Starting monitored process 43 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:35:45,843 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (43)] Waiting until timeout for monitored process [2022-11-20 20:35:46,513 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 8 check-sat command(s) [2022-11-20 20:35:46,513 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:35:46,521 INFO L263 TraceCheckSpWp]: Trace formula consists of 265 conjuncts, 75 conjunts are in the unsatisfiable core [2022-11-20 20:35:46,526 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:35:46,537 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:35:46,548 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:35:47,060 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:47,061 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:47,074 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:47,502 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1360 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1360) |c_#length|)))) is different from true [2022-11-20 20:35:47,530 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:47,531 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:47,548 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:47,548 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:48,011 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-20 20:35:48,011 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-11-20 20:35:49,307 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:49,308 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:49,357 INFO L321 Elim1Store]: treesize reduction 19, result has 32.1 percent of original size [2022-11-20 20:35:49,358 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 24 treesize of output 31 [2022-11-20 20:35:49,911 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_1365 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1365) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:35:49,937 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:49,938 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:49,960 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:49,960 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:50,175 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1366 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1366) |c_#length|)))) is different from true [2022-11-20 20:35:50,195 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:50,196 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:50,214 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:50,215 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:50,234 INFO L134 CoverageAnalysis]: Checked inductivity of 211 backedges. 17 proven. 135 refuted. 0 times theorem prover too weak. 23 trivial. 36 not checked. [2022-11-20 20:35:50,234 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:35:50,825 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [1491098126] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:35:50,825 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1559523450] [2022-11-20 20:35:50,826 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-20 20:35:50,826 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:35:50,826 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:35:50,827 INFO L229 MonitoredProcess]: Starting monitored process 44 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:35:50,829 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (44)] Waiting until timeout for monitored process [2022-11-20 20:35:51,427 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 8 check-sat command(s) [2022-11-20 20:35:51,428 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:35:51,435 INFO L263 TraceCheckSpWp]: Trace formula consists of 265 conjuncts, 64 conjunts are in the unsatisfiable core [2022-11-20 20:35:51,439 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:35:51,450 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:35:51,458 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:35:51,567 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1422 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1422) |c_#length|)))) is different from true [2022-11-20 20:35:51,592 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:51,592 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:51,606 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:51,607 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:51,696 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_1423 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1423))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:35:51,720 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:51,721 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:51,748 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:51,748 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:51,960 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1424 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1424) |c_#length|)))) is different from true [2022-11-20 20:35:51,992 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:51,995 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:52,010 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:52,010 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:52,397 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1425 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1425))))) is different from true [2022-11-20 20:35:52,418 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:52,421 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:52,436 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:52,437 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:52,667 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1426 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1426) |c_#length|)))) is different from true [2022-11-20 20:35:52,703 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:52,705 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:52,719 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:52,719 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:52,809 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1427 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1427))))) is different from true [2022-11-20 20:35:52,829 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:35:52,830 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:35:52,848 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:35:52,849 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:35:52,868 INFO L134 CoverageAnalysis]: Checked inductivity of 211 backedges. 13 proven. 114 refuted. 0 times theorem prover too weak. 30 trivial. 54 not checked. [2022-11-20 20:35:52,868 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:35:55,353 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1559523450] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:35:55,354 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:35:55,354 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [31, 32, 27] total 64 [2022-11-20 20:35:55,354 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [856594130] [2022-11-20 20:35:55,354 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:35:55,355 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 65 states [2022-11-20 20:35:55,355 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:35:55,356 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 65 interpolants. [2022-11-20 20:35:55,358 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=207, Invalid=2490, Unknown=15, NotChecked=1710, Total=4422 [2022-11-20 20:35:55,359 INFO L87 Difference]: Start difference. First operand 108 states and 147 transitions. Second operand has 65 states, 63 states have (on average 1.8253968253968254) internal successors, (115), 60 states have internal predecessors, (115), 17 states have call successors, (17), 3 states have call predecessors, (17), 20 states have return successors, (23), 19 states have call predecessors, (23), 17 states have call successors, (23) [2022-11-20 20:36:03,372 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:36:03,372 INFO L93 Difference]: Finished difference Result 220 states and 291 transitions. [2022-11-20 20:36:03,373 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2022-11-20 20:36:03,373 INFO L78 Accepts]: Start accepts. Automaton has has 65 states, 63 states have (on average 1.8253968253968254) internal successors, (115), 60 states have internal predecessors, (115), 17 states have call successors, (17), 3 states have call predecessors, (17), 20 states have return successors, (23), 19 states have call predecessors, (23), 17 states have call successors, (23) Word has length 71 [2022-11-20 20:36:03,374 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:36:03,375 INFO L225 Difference]: With dead ends: 220 [2022-11-20 20:36:03,375 INFO L226 Difference]: Without dead ends: 220 [2022-11-20 20:36:03,379 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 257 GetRequests, 155 SyntacticMatches, 3 SemanticMatches, 99 ConstructedPredicates, 15 IntricatePredicates, 0 DeprecatedPredicates, 2208 ImplicationChecksByTransitivity, 11.2s TimeCoverageRelationStatistics Valid=490, Invalid=6865, Unknown=15, NotChecked=2730, Total=10100 [2022-11-20 20:36:03,379 INFO L413 NwaCegarLoop]: 43 mSDtfsCounter, 93 mSDsluCounter, 624 mSDsCounter, 0 mSdLazyCounter, 2040 mSolverCounterSat, 68 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 96 SdHoareTripleChecker+Valid, 667 SdHoareTripleChecker+Invalid, 3721 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 68 IncrementalHoareTripleChecker+Valid, 2040 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 1613 IncrementalHoareTripleChecker+Unchecked, 4.2s IncrementalHoareTripleChecker+Time [2022-11-20 20:36:03,380 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [96 Valid, 667 Invalid, 3721 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [68 Valid, 2040 Invalid, 0 Unknown, 1613 Unchecked, 4.2s Time] [2022-11-20 20:36:03,380 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 220 states. [2022-11-20 20:36:03,389 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 220 to 113. [2022-11-20 20:36:03,389 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 113 states, 89 states have (on average 1.0674157303370786) internal successors, (95), 90 states have internal predecessors, (95), 20 states have call successors, (20), 1 states have call predecessors, (20), 2 states have return successors, (39), 21 states have call predecessors, (39), 20 states have call successors, (39) [2022-11-20 20:36:03,391 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 113 states to 113 states and 154 transitions. [2022-11-20 20:36:03,391 INFO L78 Accepts]: Start accepts. Automaton has 113 states and 154 transitions. Word has length 71 [2022-11-20 20:36:03,392 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:36:03,392 INFO L495 AbstractCegarLoop]: Abstraction has 113 states and 154 transitions. [2022-11-20 20:36:03,392 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 65 states, 63 states have (on average 1.8253968253968254) internal successors, (115), 60 states have internal predecessors, (115), 17 states have call successors, (17), 3 states have call predecessors, (17), 20 states have return successors, (23), 19 states have call predecessors, (23), 17 states have call successors, (23) [2022-11-20 20:36:03,393 INFO L276 IsEmpty]: Start isEmpty. Operand 113 states and 154 transitions. [2022-11-20 20:36:03,394 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2022-11-20 20:36:03,395 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:36:03,395 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 7, 7, 7, 6, 6, 6, 2, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:36:03,401 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (43)] Forceful destruction successful, exit code 0 [2022-11-20 20:36:03,622 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (42)] Forceful destruction successful, exit code 0 [2022-11-20 20:36:03,808 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (44)] Forceful destruction successful, exit code 0 [2022-11-20 20:36:04,001 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 43 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt,42 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,44 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:36:04,001 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:36:04,002 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:36:04,002 INFO L85 PathProgramCache]: Analyzing trace with hash -1212258768, now seen corresponding path program 4 times [2022-11-20 20:36:04,002 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:36:04,002 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [504436723] [2022-11-20 20:36:04,003 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-20 20:36:04,003 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:36:04,003 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:36:04,004 INFO L229 MonitoredProcess]: Starting monitored process 45 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:36:04,009 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (45)] Waiting until timeout for monitored process [2022-11-20 20:36:04,294 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-20 20:36:04,295 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:36:04,305 INFO L263 TraceCheckSpWp]: Trace formula consists of 259 conjuncts, 62 conjunts are in the unsatisfiable core [2022-11-20 20:36:04,309 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:36:04,333 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:36:04,343 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:36:04,549 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1481 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1481) |c_#length|)))) is different from true [2022-11-20 20:36:04,570 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:04,571 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:04,585 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:04,585 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:04,753 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_1482 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1482) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:36:04,774 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:04,775 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:04,794 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:04,794 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:04,978 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1483 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1483))))) is different from true [2022-11-20 20:36:05,002 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:05,003 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:05,021 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:05,022 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:05,522 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1484 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1484))))) is different from true [2022-11-20 20:36:05,544 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:05,545 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:05,559 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:05,559 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:05,776 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1485 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1485) |c_#length|)))) is different from true [2022-11-20 20:36:05,800 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:05,801 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:05,825 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:05,826 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:05,920 INFO L134 CoverageAnalysis]: Checked inductivity of 211 backedges. 7 proven. 110 refuted. 0 times theorem prover too weak. 44 trivial. 50 not checked. [2022-11-20 20:36:05,921 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:36:10,519 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:36:10,519 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [504436723] [2022-11-20 20:36:10,520 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [504436723] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:36:10,520 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [975311666] [2022-11-20 20:36:10,520 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-20 20:36:10,520 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:36:10,520 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:36:10,521 INFO L229 MonitoredProcess]: Starting monitored process 46 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:36:10,523 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (46)] Waiting until timeout for monitored process [2022-11-20 20:36:11,176 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-20 20:36:11,176 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:36:11,188 INFO L263 TraceCheckSpWp]: Trace formula consists of 259 conjuncts, 62 conjunts are in the unsatisfiable core [2022-11-20 20:36:11,193 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:36:11,207 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:36:11,221 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:36:11,343 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1539 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1539) |c_#length|)))) is different from true [2022-11-20 20:36:11,382 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:11,383 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:11,406 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:11,406 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:11,510 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1540 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1540))))) is different from true [2022-11-20 20:36:11,531 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:11,532 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:11,547 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:11,548 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:11,647 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1541 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1541) |c_#length|)))) is different from true [2022-11-20 20:36:11,672 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:11,673 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:11,688 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:11,688 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:12,026 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1542 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1542))))) is different from true [2022-11-20 20:36:12,052 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:12,053 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:12,071 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:12,071 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:12,184 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1543 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1543) |c_#length|)))) is different from true [2022-11-20 20:36:12,208 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:12,210 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:12,227 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:12,228 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:12,256 INFO L134 CoverageAnalysis]: Checked inductivity of 211 backedges. 7 proven. 110 refuted. 0 times theorem prover too weak. 44 trivial. 50 not checked. [2022-11-20 20:36:12,256 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:36:12,684 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [975311666] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:36:12,684 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [456709006] [2022-11-20 20:36:12,684 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-20 20:36:12,684 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:36:12,685 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:36:12,686 INFO L229 MonitoredProcess]: Starting monitored process 47 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:36:12,689 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (47)] Waiting until timeout for monitored process [2022-11-20 20:36:12,947 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-20 20:36:12,947 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:36:12,953 INFO L263 TraceCheckSpWp]: Trace formula consists of 259 conjuncts, 62 conjunts are in the unsatisfiable core [2022-11-20 20:36:12,958 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:36:12,972 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:36:12,983 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:36:13,111 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_1597 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1597) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1598 (_ BitVec 1))) (= (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_1598) |c_#valid|)))) is different from true [2022-11-20 20:36:13,147 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:13,148 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:13,181 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:36:13,182 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:36:13,290 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_1600 (_ BitVec 1))) (= (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_1600) |c_#valid|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1599 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1599) |c_#length|)))) is different from true [2022-11-20 20:36:13,318 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:13,319 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:13,352 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:36:13,352 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:36:13,459 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1601 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1601))))) is different from true [2022-11-20 20:36:13,488 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:13,489 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:13,509 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:13,510 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:13,915 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_1602 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1602) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:36:13,938 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:13,939 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:13,954 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:13,954 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:14,054 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_1603 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1603) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:36:14,076 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:14,079 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:14,098 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:14,099 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:14,127 INFO L134 CoverageAnalysis]: Checked inductivity of 211 backedges. 15 proven. 116 refuted. 0 times theorem prover too weak. 30 trivial. 50 not checked. [2022-11-20 20:36:14,127 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:36:16,912 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [456709006] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:36:16,912 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:36:16,912 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [23, 23, 23] total 35 [2022-11-20 20:36:16,913 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [486250187] [2022-11-20 20:36:16,913 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:36:16,913 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2022-11-20 20:36:16,913 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:36:16,914 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2022-11-20 20:36:16,914 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=100, Invalid=450, Unknown=16, NotChecked=840, Total=1406 [2022-11-20 20:36:16,914 INFO L87 Difference]: Start difference. First operand 113 states and 154 transitions. Second operand has 36 states, 34 states have (on average 2.323529411764706) internal successors, (79), 35 states have internal predecessors, (79), 9 states have call successors, (9), 3 states have call predecessors, (9), 18 states have return successors, (19), 11 states have call predecessors, (19), 9 states have call successors, (19) [2022-11-20 20:36:19,415 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:36:19,415 INFO L93 Difference]: Finished difference Result 160 states and 213 transitions. [2022-11-20 20:36:19,415 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-20 20:36:19,416 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 34 states have (on average 2.323529411764706) internal successors, (79), 35 states have internal predecessors, (79), 9 states have call successors, (9), 3 states have call predecessors, (9), 18 states have return successors, (19), 11 states have call predecessors, (19), 9 states have call successors, (19) Word has length 71 [2022-11-20 20:36:19,417 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:36:19,418 INFO L225 Difference]: With dead ends: 160 [2022-11-20 20:36:19,419 INFO L226 Difference]: Without dead ends: 160 [2022-11-20 20:36:19,420 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 221 GetRequests, 181 SyntacticMatches, 2 SemanticMatches, 38 ConstructedPredicates, 15 IntricatePredicates, 0 DeprecatedPredicates, 49 ImplicationChecksByTransitivity, 9.1s TimeCoverageRelationStatistics Valid=109, Invalid=535, Unknown=16, NotChecked=900, Total=1560 [2022-11-20 20:36:19,420 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 17 mSDsluCounter, 242 mSDsCounter, 0 mSdLazyCounter, 716 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 17 SdHoareTripleChecker+Valid, 270 SdHoareTripleChecker+Invalid, 1533 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 716 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 798 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2022-11-20 20:36:19,421 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [17 Valid, 270 Invalid, 1533 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 716 Invalid, 0 Unknown, 798 Unchecked, 1.5s Time] [2022-11-20 20:36:19,421 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 160 states. [2022-11-20 20:36:19,427 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 160 to 103. [2022-11-20 20:36:19,428 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 103 states, 81 states have (on average 1.0740740740740742) internal successors, (87), 82 states have internal predecessors, (87), 18 states have call successors, (18), 1 states have call predecessors, (18), 2 states have return successors, (35), 19 states have call predecessors, (35), 18 states have call successors, (35) [2022-11-20 20:36:19,430 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 103 states to 103 states and 140 transitions. [2022-11-20 20:36:19,430 INFO L78 Accepts]: Start accepts. Automaton has 103 states and 140 transitions. Word has length 71 [2022-11-20 20:36:19,431 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:36:19,431 INFO L495 AbstractCegarLoop]: Abstraction has 103 states and 140 transitions. [2022-11-20 20:36:19,431 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 34 states have (on average 2.323529411764706) internal successors, (79), 35 states have internal predecessors, (79), 9 states have call successors, (9), 3 states have call predecessors, (9), 18 states have return successors, (19), 11 states have call predecessors, (19), 9 states have call successors, (19) [2022-11-20 20:36:19,431 INFO L276 IsEmpty]: Start isEmpty. Operand 103 states and 140 transitions. [2022-11-20 20:36:19,433 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2022-11-20 20:36:19,433 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:36:19,433 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 7, 7, 7, 7, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:36:19,450 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (45)] Forceful destruction successful, exit code 0 [2022-11-20 20:36:19,653 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (47)] Forceful destruction successful, exit code 0 [2022-11-20 20:36:19,853 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (46)] Forceful destruction successful, exit code 0 [2022-11-20 20:36:20,047 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 45 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,47 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true,46 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt [2022-11-20 20:36:20,048 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:36:20,048 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:36:20,048 INFO L85 PathProgramCache]: Analyzing trace with hash -687459537, now seen corresponding path program 5 times [2022-11-20 20:36:20,049 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:36:20,049 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1802502535] [2022-11-20 20:36:20,049 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2022-11-20 20:36:20,049 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:36:20,049 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:36:20,050 INFO L229 MonitoredProcess]: Starting monitored process 48 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:36:20,051 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (48)] Waiting until timeout for monitored process [2022-11-20 20:36:20,463 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 8 check-sat command(s) [2022-11-20 20:36:20,463 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:36:20,474 INFO L263 TraceCheckSpWp]: Trace formula consists of 265 conjuncts, 69 conjunts are in the unsatisfiable core [2022-11-20 20:36:20,479 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:36:20,502 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:36:20,759 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-20 20:36:20,759 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-11-20 20:36:21,625 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1660 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1660) |c_#length|)))) is different from true [2022-11-20 20:36:21,649 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:21,679 INFO L321 Elim1Store]: treesize reduction 19, result has 32.1 percent of original size [2022-11-20 20:36:21,679 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 17 treesize of output 26 [2022-11-20 20:36:21,697 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:21,697 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:21,993 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1661 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1661) |c_#length|)))) is different from true [2022-11-20 20:36:22,014 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:22,015 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:22,034 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:22,035 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:22,281 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1662 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1662) |c_#length|)))) is different from true [2022-11-20 20:36:22,304 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:22,305 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:22,319 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:22,319 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:22,559 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1663 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1663) |c_#length|)))) is different from true [2022-11-20 20:36:22,581 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:22,582 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:22,597 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:22,597 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:22,854 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1664 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1664) |c_#length|)))) is different from true [2022-11-20 20:36:22,880 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:22,881 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:22,897 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:22,897 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:23,001 INFO L134 CoverageAnalysis]: Checked inductivity of 211 backedges. 14 proven. 117 refuted. 0 times theorem prover too weak. 30 trivial. 50 not checked. [2022-11-20 20:36:23,001 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:36:27,753 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:36:27,753 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1802502535] [2022-11-20 20:36:27,753 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1802502535] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:36:27,753 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [568256190] [2022-11-20 20:36:27,754 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2022-11-20 20:36:27,754 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:36:27,754 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:36:27,755 INFO L229 MonitoredProcess]: Starting monitored process 49 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:36:27,757 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (49)] Waiting until timeout for monitored process [2022-11-20 20:36:28,570 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 8 check-sat command(s) [2022-11-20 20:36:28,571 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:36:28,579 INFO L263 TraceCheckSpWp]: Trace formula consists of 265 conjuncts, 74 conjunts are in the unsatisfiable core [2022-11-20 20:36:28,585 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:36:28,599 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:36:28,681 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:36:28,726 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-20 20:36:28,727 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-11-20 20:36:29,285 INFO L321 Elim1Store]: treesize reduction 24, result has 48.9 percent of original size [2022-11-20 20:36:29,285 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 17 treesize of output 34 [2022-11-20 20:36:29,339 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:29,339 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:29,662 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_1724 (_ BitVec 1))) (= (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_1724) |c_#valid|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1725 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1725) |c_#length|)))) is different from true [2022-11-20 20:36:29,746 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:36:29,746 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:36:29,755 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:29,879 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1726 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1726))) (exists ((v_ArrVal_1727 (_ BitVec 1))) (= (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_1727) |c_#valid|)))) is different from true [2022-11-20 20:36:29,949 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:36:29,950 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:36:29,962 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:30,080 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1728 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1728))))) is different from true [2022-11-20 20:36:30,100 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:30,101 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:30,131 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:30,132 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:30,239 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1729 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1729) |c_#length|)))) is different from true [2022-11-20 20:36:30,265 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:30,266 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:30,285 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:30,285 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:30,316 INFO L134 CoverageAnalysis]: Checked inductivity of 211 backedges. 14 proven. 123 refuted. 0 times theorem prover too weak. 30 trivial. 44 not checked. [2022-11-20 20:36:30,316 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:36:36,843 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [568256190] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:36:36,843 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1696204330] [2022-11-20 20:36:36,844 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2022-11-20 20:36:36,844 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:36:36,844 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:36:36,845 INFO L229 MonitoredProcess]: Starting monitored process 50 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:36:36,847 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (50)] Waiting until timeout for monitored process [2022-11-20 20:36:37,643 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 8 check-sat command(s) [2022-11-20 20:36:37,643 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:36:37,651 INFO L263 TraceCheckSpWp]: Trace formula consists of 265 conjuncts, 65 conjunts are in the unsatisfiable core [2022-11-20 20:36:37,669 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:36:37,682 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:36:37,691 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:36:38,163 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1785 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1785) |c_#length|)))) is different from true [2022-11-20 20:36:38,187 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:38,188 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:38,208 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:38,208 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:38,574 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1786 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1786) |c_#length|)))) is different from true [2022-11-20 20:36:38,597 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:38,597 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:38,621 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:38,621 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:38,725 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1787 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1787))))) is different from true [2022-11-20 20:36:38,746 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:38,747 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:38,762 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:38,762 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:38,860 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1788 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1788) |c_#length|)))) is different from true [2022-11-20 20:36:38,889 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:38,890 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:38,931 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:38,932 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:39,029 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1789 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1789))))) is different from true [2022-11-20 20:36:39,049 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:39,050 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:39,068 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:39,069 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:39,172 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1790 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1790) |c_#length|)))) is different from true [2022-11-20 20:36:39,200 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:39,200 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:39,220 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:39,220 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:39,233 INFO L134 CoverageAnalysis]: Checked inductivity of 211 backedges. 17 proven. 110 refuted. 0 times theorem prover too weak. 30 trivial. 54 not checked. [2022-11-20 20:36:39,234 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:36:39,814 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1696204330] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:36:39,814 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:36:39,814 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [31, 30, 27] total 49 [2022-11-20 20:36:39,814 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1294569932] [2022-11-20 20:36:39,814 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:36:39,815 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 50 states [2022-11-20 20:36:39,815 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:36:39,816 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 50 interpolants. [2022-11-20 20:36:39,817 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=151, Invalid=1224, Unknown=17, NotChecked=1260, Total=2652 [2022-11-20 20:36:39,817 INFO L87 Difference]: Start difference. First operand 103 states and 140 transitions. Second operand has 50 states, 48 states have (on average 1.9583333333333333) internal successors, (94), 46 states have internal predecessors, (94), 11 states have call successors, (11), 3 states have call predecessors, (11), 21 states have return successors, (21), 14 states have call predecessors, (21), 11 states have call successors, (21) [2022-11-20 20:36:43,351 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:36:43,352 INFO L93 Difference]: Finished difference Result 168 states and 225 transitions. [2022-11-20 20:36:43,352 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-11-20 20:36:43,353 INFO L78 Accepts]: Start accepts. Automaton has has 50 states, 48 states have (on average 1.9583333333333333) internal successors, (94), 46 states have internal predecessors, (94), 11 states have call successors, (11), 3 states have call predecessors, (11), 21 states have return successors, (21), 14 states have call predecessors, (21), 11 states have call successors, (21) Word has length 71 [2022-11-20 20:36:43,353 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:36:43,354 INFO L225 Difference]: With dead ends: 168 [2022-11-20 20:36:43,355 INFO L226 Difference]: Without dead ends: 168 [2022-11-20 20:36:43,356 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 226 GetRequests, 167 SyntacticMatches, 3 SemanticMatches, 56 ConstructedPredicates, 15 IntricatePredicates, 0 DeprecatedPredicates, 306 ImplicationChecksByTransitivity, 15.6s TimeCoverageRelationStatistics Valid=190, Invalid=1659, Unknown=17, NotChecked=1440, Total=3306 [2022-11-20 20:36:43,357 INFO L413 NwaCegarLoop]: 30 mSDtfsCounter, 24 mSDsluCounter, 326 mSDsCounter, 0 mSdLazyCounter, 779 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 24 SdHoareTripleChecker+Valid, 356 SdHoareTripleChecker+Invalid, 1971 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 779 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 1169 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2022-11-20 20:36:43,357 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [24 Valid, 356 Invalid, 1971 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 779 Invalid, 0 Unknown, 1169 Unchecked, 1.7s Time] [2022-11-20 20:36:43,358 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 168 states. [2022-11-20 20:36:43,364 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 168 to 103. [2022-11-20 20:36:43,365 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 103 states, 81 states have (on average 1.0740740740740742) internal successors, (87), 82 states have internal predecessors, (87), 18 states have call successors, (18), 1 states have call predecessors, (18), 2 states have return successors, (35), 19 states have call predecessors, (35), 18 states have call successors, (35) [2022-11-20 20:36:43,366 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 103 states to 103 states and 140 transitions. [2022-11-20 20:36:43,366 INFO L78 Accepts]: Start accepts. Automaton has 103 states and 140 transitions. Word has length 71 [2022-11-20 20:36:43,367 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:36:43,367 INFO L495 AbstractCegarLoop]: Abstraction has 103 states and 140 transitions. [2022-11-20 20:36:43,368 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 50 states, 48 states have (on average 1.9583333333333333) internal successors, (94), 46 states have internal predecessors, (94), 11 states have call successors, (11), 3 states have call predecessors, (11), 21 states have return successors, (21), 14 states have call predecessors, (21), 11 states have call successors, (21) [2022-11-20 20:36:43,368 INFO L276 IsEmpty]: Start isEmpty. Operand 103 states and 140 transitions. [2022-11-20 20:36:43,369 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2022-11-20 20:36:43,369 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:36:43,369 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 7, 7, 7, 6, 6, 6, 2, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:36:43,385 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (48)] Forceful destruction successful, exit code 0 [2022-11-20 20:36:43,588 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (50)] Forceful destruction successful, exit code 0 [2022-11-20 20:36:43,783 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (49)] Forceful destruction successful, exit code 0 [2022-11-20 20:36:43,979 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 48 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,50 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true,49 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt [2022-11-20 20:36:43,979 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:36:43,980 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:36:43,980 INFO L85 PathProgramCache]: Analyzing trace with hash 1671847472, now seen corresponding path program 6 times [2022-11-20 20:36:43,980 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:36:43,980 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2019413424] [2022-11-20 20:36:43,980 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2022-11-20 20:36:43,980 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:36:43,981 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:36:43,981 INFO L229 MonitoredProcess]: Starting monitored process 51 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:36:43,990 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (51)] Waiting until timeout for monitored process [2022-11-20 20:36:44,389 INFO L228 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 8 check-sat command(s) [2022-11-20 20:36:44,389 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:36:44,400 INFO L263 TraceCheckSpWp]: Trace formula consists of 259 conjuncts, 58 conjunts are in the unsatisfiable core [2022-11-20 20:36:44,404 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:36:44,427 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:36:44,435 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:36:44,639 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_1844 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1844))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:36:44,663 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:44,664 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:44,677 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:44,678 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:45,107 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| |c_ldv_malloc_#in~size|) |c_#length|)) is different from true [2022-11-20 20:36:45,149 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-20 20:36:45,150 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-11-20 20:36:45,555 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1846 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1846))))) is different from true [2022-11-20 20:36:45,579 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:45,608 INFO L321 Elim1Store]: treesize reduction 19, result has 32.1 percent of original size [2022-11-20 20:36:45,608 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 17 treesize of output 26 [2022-11-20 20:36:45,633 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:45,633 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:45,934 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1847 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1847) |c_#length|)))) is different from true [2022-11-20 20:36:45,959 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:45,960 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:45,995 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:45,995 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:46,252 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1848 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1848) |c_#length|)))) is different from true [2022-11-20 20:36:46,277 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:46,278 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:46,303 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:46,304 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:46,396 INFO L134 CoverageAnalysis]: Checked inductivity of 211 backedges. 25 proven. 118 refuted. 0 times theorem prover too weak. 18 trivial. 50 not checked. [2022-11-20 20:36:46,396 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:36:51,103 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:36:51,103 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2019413424] [2022-11-20 20:36:51,103 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2019413424] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:36:51,104 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [932920702] [2022-11-20 20:36:51,104 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2022-11-20 20:36:51,104 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:36:51,104 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:36:51,105 INFO L229 MonitoredProcess]: Starting monitored process 52 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:36:51,107 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (52)] Waiting until timeout for monitored process [2022-11-20 20:36:52,442 INFO L228 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 8 check-sat command(s) [2022-11-20 20:36:52,442 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:36:52,452 INFO L263 TraceCheckSpWp]: Trace formula consists of 259 conjuncts, 71 conjunts are in the unsatisfiable core [2022-11-20 20:36:52,457 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:36:52,473 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:36:52,483 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:36:52,810 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:36:52,811 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:36:52,827 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:53,772 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:53,773 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:53,782 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:54,205 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:54,205 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:54,219 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:54,531 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1909 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1909))))) is different from true [2022-11-20 20:36:54,551 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:54,552 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:54,566 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:54,567 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:54,676 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1910 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1910))))) is different from true [2022-11-20 20:36:54,698 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:54,698 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:54,717 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:54,718 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:54,738 INFO L134 CoverageAnalysis]: Checked inductivity of 211 backedges. 7 proven. 128 refuted. 4 times theorem prover too weak. 46 trivial. 26 not checked. [2022-11-20 20:36:54,738 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:36:55,181 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [932920702] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:36:55,181 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1508499103] [2022-11-20 20:36:55,181 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2022-11-20 20:36:55,181 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:36:55,181 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:36:55,182 INFO L229 MonitoredProcess]: Starting monitored process 53 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:36:55,185 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (53)] Waiting until timeout for monitored process [2022-11-20 20:36:57,089 INFO L228 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 8 check-sat command(s) [2022-11-20 20:36:57,090 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:36:57,099 INFO L263 TraceCheckSpWp]: Trace formula consists of 259 conjuncts, 64 conjunts are in the unsatisfiable core [2022-11-20 20:36:57,103 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:36:57,118 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:36:57,126 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:36:57,400 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:57,401 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:57,434 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:36:57,434 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:36:58,576 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_1966 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1966))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:36:58,601 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:58,602 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:58,636 INFO L321 Elim1Store]: treesize reduction 12, result has 42.9 percent of original size [2022-11-20 20:36:58,636 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 20 treesize of output 22 [2022-11-20 20:36:58,744 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1967 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1967))))) is different from true [2022-11-20 20:36:58,770 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:58,771 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:58,790 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:58,791 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:58,907 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1968 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1968) |c_#length|)))) is different from true [2022-11-20 20:36:58,927 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:58,928 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:58,942 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:58,943 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:59,047 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1969 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1969))))) is different from true [2022-11-20 20:36:59,069 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:36:59,069 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:36:59,088 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:36:59,089 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:36:59,108 INFO L134 CoverageAnalysis]: Checked inductivity of 211 backedges. 7 proven. 116 refuted. 0 times theorem prover too weak. 44 trivial. 44 not checked. [2022-11-20 20:36:59,109 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:36:59,599 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1508499103] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:36:59,599 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:36:59,600 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [27, 25, 24] total 49 [2022-11-20 20:36:59,600 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [309083267] [2022-11-20 20:36:59,600 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:36:59,601 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 50 states [2022-11-20 20:36:59,601 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:36:59,601 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 50 interpolants. [2022-11-20 20:36:59,602 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=174, Invalid=1497, Unknown=13, NotChecked=968, Total=2652 [2022-11-20 20:36:59,603 INFO L87 Difference]: Start difference. First operand 103 states and 140 transitions. Second operand has 50 states, 48 states have (on average 2.1041666666666665) internal successors, (101), 46 states have internal predecessors, (101), 15 states have call successors, (15), 3 states have call predecessors, (15), 17 states have return successors, (22), 17 states have call predecessors, (22), 15 states have call successors, (22) [2022-11-20 20:37:01,949 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:37:01,949 INFO L93 Difference]: Finished difference Result 153 states and 206 transitions. [2022-11-20 20:37:01,950 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-11-20 20:37:01,950 INFO L78 Accepts]: Start accepts. Automaton has has 50 states, 48 states have (on average 2.1041666666666665) internal successors, (101), 46 states have internal predecessors, (101), 15 states have call successors, (15), 3 states have call predecessors, (15), 17 states have return successors, (22), 17 states have call predecessors, (22), 15 states have call successors, (22) Word has length 71 [2022-11-20 20:37:01,951 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:37:01,951 INFO L225 Difference]: With dead ends: 153 [2022-11-20 20:37:01,951 INFO L226 Difference]: Without dead ends: 153 [2022-11-20 20:37:01,952 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 225 GetRequests, 166 SyntacticMatches, 3 SemanticMatches, 56 ConstructedPredicates, 11 IntricatePredicates, 0 DeprecatedPredicates, 530 ImplicationChecksByTransitivity, 9.4s TimeCoverageRelationStatistics Valid=215, Invalid=1978, Unknown=13, NotChecked=1100, Total=3306 [2022-11-20 20:37:01,953 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 8 mSDsluCounter, 171 mSDsCounter, 0 mSdLazyCounter, 646 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 190 SdHoareTripleChecker+Invalid, 1325 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 646 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 669 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-11-20 20:37:01,953 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [8 Valid, 190 Invalid, 1325 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 646 Invalid, 0 Unknown, 669 Unchecked, 1.1s Time] [2022-11-20 20:37:01,954 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 153 states. [2022-11-20 20:37:01,959 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 153 to 103. [2022-11-20 20:37:01,959 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 103 states, 81 states have (on average 1.0740740740740742) internal successors, (87), 82 states have internal predecessors, (87), 18 states have call successors, (18), 1 states have call predecessors, (18), 2 states have return successors, (35), 19 states have call predecessors, (35), 18 states have call successors, (35) [2022-11-20 20:37:01,960 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 103 states to 103 states and 140 transitions. [2022-11-20 20:37:01,961 INFO L78 Accepts]: Start accepts. Automaton has 103 states and 140 transitions. Word has length 71 [2022-11-20 20:37:01,961 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:37:01,961 INFO L495 AbstractCegarLoop]: Abstraction has 103 states and 140 transitions. [2022-11-20 20:37:01,962 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 50 states, 48 states have (on average 2.1041666666666665) internal successors, (101), 46 states have internal predecessors, (101), 15 states have call successors, (15), 3 states have call predecessors, (15), 17 states have return successors, (22), 17 states have call predecessors, (22), 15 states have call successors, (22) [2022-11-20 20:37:01,962 INFO L276 IsEmpty]: Start isEmpty. Operand 103 states and 140 transitions. [2022-11-20 20:37:01,963 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2022-11-20 20:37:01,963 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:37:01,963 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 7, 7, 7, 6, 6, 5, 3, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:37:01,971 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (52)] Forceful destruction successful, exit code 0 [2022-11-20 20:37:02,180 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (53)] Forceful destruction successful, exit code 0 [2022-11-20 20:37:02,380 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (51)] Forceful destruction successful, exit code 0 [2022-11-20 20:37:02,571 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 52 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt,53 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true,51 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:37:02,571 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:37:02,571 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:37:02,571 INFO L85 PathProgramCache]: Analyzing trace with hash -1378355343, now seen corresponding path program 7 times [2022-11-20 20:37:02,571 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:37:02,572 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1020638491] [2022-11-20 20:37:02,572 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-20 20:37:02,572 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:37:02,572 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:37:02,573 INFO L229 MonitoredProcess]: Starting monitored process 54 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:37:02,575 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (54)] Waiting until timeout for monitored process [2022-11-20 20:37:02,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:37:02,881 INFO L263 TraceCheckSpWp]: Trace formula consists of 253 conjuncts, 59 conjunts are in the unsatisfiable core [2022-11-20 20:37:02,885 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:37:02,908 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:37:02,916 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:37:03,120 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2021 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2021) |c_#length|)))) is different from true [2022-11-20 20:37:03,146 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:03,147 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:03,167 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:03,167 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:03,681 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2022 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2022) |c_#length|)))) is different from true [2022-11-20 20:37:03,708 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:03,708 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:03,723 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:03,727 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:04,081 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2023 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2023) |c_#length|)))) is different from true [2022-11-20 20:37:04,111 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:04,111 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:04,127 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:04,127 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:04,338 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2024 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2024) |c_#length|)))) is different from true [2022-11-20 20:37:04,359 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:04,360 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:04,379 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:04,380 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:04,454 INFO L134 CoverageAnalysis]: Checked inductivity of 211 backedges. 7 proven. 112 refuted. 0 times theorem prover too weak. 48 trivial. 44 not checked. [2022-11-20 20:37:04,455 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:37:09,020 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:37:09,020 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1020638491] [2022-11-20 20:37:09,020 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1020638491] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:37:09,020 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [44176122] [2022-11-20 20:37:09,021 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-20 20:37:09,021 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:37:09,021 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:37:09,022 INFO L229 MonitoredProcess]: Starting monitored process 55 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:37:09,024 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (55)] Waiting until timeout for monitored process [2022-11-20 20:37:09,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:37:09,534 INFO L263 TraceCheckSpWp]: Trace formula consists of 253 conjuncts, 59 conjunts are in the unsatisfiable core [2022-11-20 20:37:09,538 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:37:09,553 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:37:09,563 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:37:09,675 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2076 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2076) |c_#length|)))) is different from true [2022-11-20 20:37:09,695 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:09,696 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:09,714 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:09,714 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:10,024 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2077 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2077) |c_#length|)))) is different from true [2022-11-20 20:37:10,049 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:10,050 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:10,073 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:10,073 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:10,314 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2078 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2078) |c_#length|)))) is different from true [2022-11-20 20:37:10,335 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:10,336 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:10,356 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:10,356 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:10,449 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2079 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2079))))) is different from true [2022-11-20 20:37:10,473 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:10,474 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:10,494 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:10,494 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:10,511 INFO L134 CoverageAnalysis]: Checked inductivity of 211 backedges. 7 proven. 112 refuted. 0 times theorem prover too weak. 48 trivial. 44 not checked. [2022-11-20 20:37:10,511 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:37:10,947 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [44176122] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:37:10,948 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [600247120] [2022-11-20 20:37:10,948 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-20 20:37:10,948 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:37:10,948 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:37:10,949 INFO L229 MonitoredProcess]: Starting monitored process 56 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:37:10,952 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (56)] Waiting until timeout for monitored process [2022-11-20 20:37:11,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:37:11,248 INFO L263 TraceCheckSpWp]: Trace formula consists of 253 conjuncts, 56 conjunts are in the unsatisfiable core [2022-11-20 20:37:11,252 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:37:11,263 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:37:11,274 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:37:11,377 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2131 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2131) |c_#length|)))) is different from true [2022-11-20 20:37:11,400 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:11,401 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:11,416 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:11,416 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:11,821 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2132 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2132) |c_#length|)))) is different from true [2022-11-20 20:37:11,858 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:11,859 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:11,878 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:11,878 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:12,115 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2133 (_ BitVec 1))) (= (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_2133) |c_#valid|)) (exists ((v_ArrVal_2134 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2134) |c_#length|)))) is different from true [2022-11-20 20:37:12,178 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:37:12,178 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:37:12,189 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:12,293 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_2135 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2135) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:37:12,316 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:12,317 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:12,351 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:12,352 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:12,370 INFO L134 CoverageAnalysis]: Checked inductivity of 211 backedges. 21 proven. 122 refuted. 0 times theorem prover too weak. 24 trivial. 44 not checked. [2022-11-20 20:37:12,370 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:37:12,844 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [600247120] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:37:12,845 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:37:12,845 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 21, 23] total 32 [2022-11-20 20:37:12,845 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [764369053] [2022-11-20 20:37:12,845 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:37:12,846 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 33 states [2022-11-20 20:37:12,846 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:37:12,847 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 33 interpolants. [2022-11-20 20:37:12,847 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=94, Invalid=447, Unknown=13, NotChecked=636, Total=1190 [2022-11-20 20:37:12,848 INFO L87 Difference]: Start difference. First operand 103 states and 140 transitions. Second operand has 33 states, 31 states have (on average 2.4516129032258065) internal successors, (76), 32 states have internal predecessors, (76), 10 states have call successors, (10), 3 states have call predecessors, (10), 15 states have return successors, (18), 11 states have call predecessors, (18), 10 states have call successors, (18) [2022-11-20 20:37:15,077 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:37:15,077 INFO L93 Difference]: Finished difference Result 149 states and 200 transitions. [2022-11-20 20:37:15,077 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-20 20:37:15,078 INFO L78 Accepts]: Start accepts. Automaton has has 33 states, 31 states have (on average 2.4516129032258065) internal successors, (76), 32 states have internal predecessors, (76), 10 states have call successors, (10), 3 states have call predecessors, (10), 15 states have return successors, (18), 11 states have call predecessors, (18), 10 states have call successors, (18) Word has length 71 [2022-11-20 20:37:15,078 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:37:15,079 INFO L225 Difference]: With dead ends: 149 [2022-11-20 20:37:15,080 INFO L226 Difference]: Without dead ends: 149 [2022-11-20 20:37:15,080 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 221 GetRequests, 184 SyntacticMatches, 2 SemanticMatches, 35 ConstructedPredicates, 12 IntricatePredicates, 0 DeprecatedPredicates, 49 ImplicationChecksByTransitivity, 6.5s TimeCoverageRelationStatistics Valid=103, Invalid=532, Unknown=13, NotChecked=684, Total=1332 [2022-11-20 20:37:15,081 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 16 mSDsluCounter, 258 mSDsCounter, 0 mSdLazyCounter, 761 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 286 SdHoareTripleChecker+Invalid, 1372 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 761 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 597 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2022-11-20 20:37:15,082 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 286 Invalid, 1372 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 761 Invalid, 0 Unknown, 597 Unchecked, 1.5s Time] [2022-11-20 20:37:15,082 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 149 states. [2022-11-20 20:37:15,086 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 149 to 98. [2022-11-20 20:37:15,087 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 98 states, 77 states have (on average 1.077922077922078) internal successors, (83), 78 states have internal predecessors, (83), 17 states have call successors, (17), 1 states have call predecessors, (17), 2 states have return successors, (33), 18 states have call predecessors, (33), 17 states have call successors, (33) [2022-11-20 20:37:15,088 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 98 states to 98 states and 133 transitions. [2022-11-20 20:37:15,088 INFO L78 Accepts]: Start accepts. Automaton has 98 states and 133 transitions. Word has length 71 [2022-11-20 20:37:15,089 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:37:15,089 INFO L495 AbstractCegarLoop]: Abstraction has 98 states and 133 transitions. [2022-11-20 20:37:15,089 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 33 states, 31 states have (on average 2.4516129032258065) internal successors, (76), 32 states have internal predecessors, (76), 10 states have call successors, (10), 3 states have call predecessors, (10), 15 states have return successors, (18), 11 states have call predecessors, (18), 10 states have call successors, (18) [2022-11-20 20:37:15,090 INFO L276 IsEmpty]: Start isEmpty. Operand 98 states and 133 transitions. [2022-11-20 20:37:15,091 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2022-11-20 20:37:15,091 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:37:15,091 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 7, 7, 7, 6, 6, 5, 3, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:37:15,099 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (56)] Forceful destruction successful, exit code 0 [2022-11-20 20:37:15,309 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (54)] Forceful destruction successful, exit code 0 [2022-11-20 20:37:15,503 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (55)] Forceful destruction successful, exit code 0 [2022-11-20 20:37:15,699 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 56 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true,54 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,55 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt [2022-11-20 20:37:15,699 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:37:15,700 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:37:15,700 INFO L85 PathProgramCache]: Analyzing trace with hash -338256369, now seen corresponding path program 8 times [2022-11-20 20:37:15,700 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:37:15,700 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [86763365] [2022-11-20 20:37:15,700 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-11-20 20:37:15,700 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:37:15,701 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:37:15,701 INFO L229 MonitoredProcess]: Starting monitored process 57 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:37:15,703 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (57)] Waiting until timeout for monitored process [2022-11-20 20:37:15,990 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-11-20 20:37:15,990 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:37:16,000 INFO L263 TraceCheckSpWp]: Trace formula consists of 253 conjuncts, 59 conjunts are in the unsatisfiable core [2022-11-20 20:37:16,003 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:37:16,029 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:37:16,037 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:37:16,224 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2187 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2187) |c_#length|)))) is different from true [2022-11-20 20:37:16,243 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:16,244 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:16,260 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:16,260 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:16,802 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_2188 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2188) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:37:16,823 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:16,823 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:16,839 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:16,840 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:17,004 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2189 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2189))))) is different from true [2022-11-20 20:37:17,025 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:17,025 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:17,038 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:17,038 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:17,222 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_2190 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2190) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:37:17,241 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:17,242 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:17,261 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:17,261 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:17,332 INFO L134 CoverageAnalysis]: Checked inductivity of 211 backedges. 7 proven. 112 refuted. 0 times theorem prover too weak. 48 trivial. 44 not checked. [2022-11-20 20:37:17,333 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:37:17,928 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:37:17,928 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [86763365] [2022-11-20 20:37:17,928 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [86763365] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:37:17,928 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1992441955] [2022-11-20 20:37:17,928 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-11-20 20:37:17,928 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:37:17,928 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:37:17,929 INFO L229 MonitoredProcess]: Starting monitored process 58 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:37:17,931 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (58)] Waiting until timeout for monitored process [2022-11-20 20:37:18,413 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-11-20 20:37:18,413 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:37:18,435 INFO L263 TraceCheckSpWp]: Trace formula consists of 253 conjuncts, 59 conjunts are in the unsatisfiable core [2022-11-20 20:37:18,438 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:37:18,449 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:37:18,459 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:37:18,555 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2242 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2242) |c_#length|)))) is different from true [2022-11-20 20:37:18,583 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:18,583 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:18,597 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:18,597 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:19,008 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2243 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2243))))) is different from true [2022-11-20 20:37:19,029 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:19,030 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:19,049 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:19,049 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:19,152 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2244 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2244) |c_#length|)))) is different from true [2022-11-20 20:37:19,172 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:19,173 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:19,187 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:19,187 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:19,283 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2245 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2245) |c_#length|)))) is different from true [2022-11-20 20:37:19,303 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:19,304 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:19,318 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:19,319 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:19,339 INFO L134 CoverageAnalysis]: Checked inductivity of 211 backedges. 7 proven. 112 refuted. 0 times theorem prover too weak. 48 trivial. 44 not checked. [2022-11-20 20:37:19,340 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:37:19,677 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [1992441955] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:37:19,677 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [715755736] [2022-11-20 20:37:19,677 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-11-20 20:37:19,677 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:37:19,678 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:37:19,679 INFO L229 MonitoredProcess]: Starting monitored process 59 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:37:19,681 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (59)] Waiting until timeout for monitored process [2022-11-20 20:37:19,946 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-11-20 20:37:19,947 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:37:19,952 INFO L263 TraceCheckSpWp]: Trace formula consists of 253 conjuncts, 58 conjunts are in the unsatisfiable core [2022-11-20 20:37:19,956 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:37:19,967 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:37:19,974 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:37:20,092 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2297 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2297) |c_#length|)))) is different from true [2022-11-20 20:37:20,116 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:20,116 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:20,131 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:20,131 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:20,630 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_2298 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2298) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:37:20,662 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:20,663 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:20,678 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:20,678 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:20,774 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2299 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2299) |c_#length|)))) is different from true [2022-11-20 20:37:20,796 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:20,797 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:20,815 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:20,815 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:20,910 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2300 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2300) |c_#length|)))) is different from true [2022-11-20 20:37:20,931 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:20,932 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:20,946 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:20,947 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:20,970 INFO L134 CoverageAnalysis]: Checked inductivity of 211 backedges. 21 proven. 114 refuted. 0 times theorem prover too weak. 32 trivial. 44 not checked. [2022-11-20 20:37:20,970 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:37:25,386 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [715755736] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:37:25,386 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:37:25,386 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 21, 23] total 31 [2022-11-20 20:37:25,386 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [356616476] [2022-11-20 20:37:25,386 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:37:25,387 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2022-11-20 20:37:25,387 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:37:25,387 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2022-11-20 20:37:25,388 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=90, Invalid=408, Unknown=12, NotChecked=612, Total=1122 [2022-11-20 20:37:25,388 INFO L87 Difference]: Start difference. First operand 98 states and 133 transitions. Second operand has 32 states, 30 states have (on average 2.3) internal successors, (69), 31 states have internal predecessors, (69), 9 states have call successors, (9), 3 states have call predecessors, (9), 15 states have return successors, (17), 9 states have call predecessors, (17), 9 states have call successors, (17) [2022-11-20 20:37:27,289 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:37:27,291 INFO L93 Difference]: Finished difference Result 136 states and 180 transitions. [2022-11-20 20:37:27,291 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-11-20 20:37:27,291 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 30 states have (on average 2.3) internal successors, (69), 31 states have internal predecessors, (69), 9 states have call successors, (9), 3 states have call predecessors, (9), 15 states have return successors, (17), 9 states have call predecessors, (17), 9 states have call successors, (17) Word has length 71 [2022-11-20 20:37:27,292 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:37:27,292 INFO L225 Difference]: With dead ends: 136 [2022-11-20 20:37:27,293 INFO L226 Difference]: Without dead ends: 136 [2022-11-20 20:37:27,293 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 221 GetRequests, 185 SyntacticMatches, 2 SemanticMatches, 34 ConstructedPredicates, 12 IntricatePredicates, 0 DeprecatedPredicates, 36 ImplicationChecksByTransitivity, 6.2s TimeCoverageRelationStatistics Valid=99, Invalid=489, Unknown=12, NotChecked=660, Total=1260 [2022-11-20 20:37:27,294 INFO L413 NwaCegarLoop]: 29 mSDtfsCounter, 17 mSDsluCounter, 215 mSDsCounter, 0 mSdLazyCounter, 603 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 17 SdHoareTripleChecker+Valid, 244 SdHoareTripleChecker+Invalid, 1245 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 603 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 625 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-11-20 20:37:27,294 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [17 Valid, 244 Invalid, 1245 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 603 Invalid, 0 Unknown, 625 Unchecked, 1.3s Time] [2022-11-20 20:37:27,295 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 136 states. [2022-11-20 20:37:27,298 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 136 to 66. [2022-11-20 20:37:27,299 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66 states, 51 states have (on average 1.0980392156862746) internal successors, (56), 53 states have internal predecessors, (56), 11 states have call successors, (11), 1 states have call predecessors, (11), 2 states have return successors, (21), 11 states have call predecessors, (21), 11 states have call successors, (21) [2022-11-20 20:37:27,299 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 88 transitions. [2022-11-20 20:37:27,299 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 88 transitions. Word has length 71 [2022-11-20 20:37:27,300 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:37:27,300 INFO L495 AbstractCegarLoop]: Abstraction has 66 states and 88 transitions. [2022-11-20 20:37:27,300 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 30 states have (on average 2.3) internal successors, (69), 31 states have internal predecessors, (69), 9 states have call successors, (9), 3 states have call predecessors, (9), 15 states have return successors, (17), 9 states have call predecessors, (17), 9 states have call successors, (17) [2022-11-20 20:37:27,300 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 88 transitions. [2022-11-20 20:37:27,301 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 81 [2022-11-20 20:37:27,301 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:37:27,302 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 9, 8, 8, 8, 8, 7, 7, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:37:27,312 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (58)] Forceful destruction successful, exit code 0 [2022-11-20 20:37:27,513 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (59)] Forceful destruction successful, exit code 0 [2022-11-20 20:37:27,716 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (57)] Forceful destruction successful, exit code 0 [2022-11-20 20:37:27,908 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 58 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt,59 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true,57 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:37:27,908 INFO L420 AbstractCegarLoop]: === Iteration 23 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:37:27,908 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:37:27,909 INFO L85 PathProgramCache]: Analyzing trace with hash -1800849809, now seen corresponding path program 7 times [2022-11-20 20:37:27,909 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:37:27,909 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1320987531] [2022-11-20 20:37:27,909 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-20 20:37:27,909 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:37:27,909 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:37:27,910 INFO L229 MonitoredProcess]: Starting monitored process 60 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:37:27,911 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (60)] Waiting until timeout for monitored process [2022-11-20 20:37:28,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:37:28,260 INFO L263 TraceCheckSpWp]: Trace formula consists of 306 conjuncts, 76 conjunts are in the unsatisfiable core [2022-11-20 20:37:28,264 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:37:28,303 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:37:28,311 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:37:28,527 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2366 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2366) |c_#length|)))) is different from true [2022-11-20 20:37:28,548 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:28,549 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:28,562 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:28,562 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:28,705 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2367 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2367))))) is different from true [2022-11-20 20:37:28,725 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:28,725 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:28,742 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:28,742 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:28,890 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2368 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2368))))) is different from true [2022-11-20 20:37:28,911 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:28,912 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:28,929 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:28,929 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:29,092 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_2369 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2369) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:37:29,110 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:29,111 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:29,127 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:29,128 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:29,301 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2370 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2370) |c_#length|)))) is different from true [2022-11-20 20:37:29,323 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:29,324 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:29,354 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:29,355 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:29,551 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2371 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2371))))) is different from true [2022-11-20 20:37:29,569 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:29,570 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:29,589 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:29,590 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:29,812 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2372 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2372) |c_#length|)))) is different from true [2022-11-20 20:37:29,833 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:29,833 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:29,848 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:29,848 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:30,071 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2373 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2373) |c_#length|)))) is different from true [2022-11-20 20:37:30,093 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:30,094 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:30,108 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:30,109 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:30,197 INFO L134 CoverageAnalysis]: Checked inductivity of 277 backedges. 8 proven. 141 refuted. 0 times theorem prover too weak. 56 trivial. 72 not checked. [2022-11-20 20:37:30,197 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:37:34,869 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:37:34,869 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1320987531] [2022-11-20 20:37:34,870 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1320987531] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:37:34,870 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1312473361] [2022-11-20 20:37:34,870 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-20 20:37:34,870 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:37:34,870 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:37:34,871 INFO L229 MonitoredProcess]: Starting monitored process 61 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:37:34,873 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (61)] Waiting until timeout for monitored process [2022-11-20 20:37:35,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:37:35,561 INFO L263 TraceCheckSpWp]: Trace formula consists of 306 conjuncts, 76 conjunts are in the unsatisfiable core [2022-11-20 20:37:35,566 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:37:35,577 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:37:35,587 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:37:35,701 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2439 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2439) |c_#length|)))) is different from true [2022-11-20 20:37:35,725 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:35,725 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:35,740 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:35,740 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:35,834 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_2440 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2440) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:37:35,853 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:35,854 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:35,870 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:35,870 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:35,966 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2441 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2441) |c_#length|)))) is different from true [2022-11-20 20:37:35,999 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:36,000 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:36,015 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:36,015 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:36,109 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2442 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2442) |c_#length|)))) is different from true [2022-11-20 20:37:36,134 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:36,135 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:36,154 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:36,155 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:36,241 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_2443 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2443) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:37:36,267 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:36,268 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:36,283 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:36,283 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:36,374 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2444 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2444) |c_#length|)))) is different from true [2022-11-20 20:37:36,393 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:36,394 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:36,406 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:36,406 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:36,497 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_2445 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2445) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:37:36,515 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:36,516 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:36,532 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:36,532 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:36,616 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2446 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2446) |c_#length|)))) is different from true [2022-11-20 20:37:36,633 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:36,634 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:36,646 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:36,647 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:36,667 INFO L134 CoverageAnalysis]: Checked inductivity of 277 backedges. 8 proven. 141 refuted. 0 times theorem prover too weak. 56 trivial. 72 not checked. [2022-11-20 20:37:36,667 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:37:37,329 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [1312473361] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:37:37,329 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1081431687] [2022-11-20 20:37:37,329 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-20 20:37:37,329 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:37:37,330 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:37:37,331 INFO L229 MonitoredProcess]: Starting monitored process 62 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:37:37,333 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (62)] Waiting until timeout for monitored process [2022-11-20 20:37:37,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:37:37,665 INFO L263 TraceCheckSpWp]: Trace formula consists of 306 conjuncts, 79 conjunts are in the unsatisfiable core [2022-11-20 20:37:37,671 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:37:37,688 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:37:37,701 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:37:37,808 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2512 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2512))))) is different from true [2022-11-20 20:37:37,828 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:37,829 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:37,848 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:37,848 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:37,942 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2513 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2513) |c_#length|)))) is different from true [2022-11-20 20:37:37,965 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:37,965 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:37,979 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:37,979 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:38,069 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2515 (_ BitVec 1))) (= |c_#valid| (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_2515))) (exists ((v_ArrVal_2514 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2514) |c_#length|)))) is different from true [2022-11-20 20:37:38,133 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:37:38,133 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:37:38,138 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:38,231 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2516 (_ BitVec 1))) (= |c_#valid| (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_2516))) (exists ((v_ArrVal_2517 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2517) |c_#length|)))) is different from true [2022-11-20 20:37:38,289 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:37:38,289 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:37:38,298 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:38,392 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2519 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2519))) (exists ((v_ArrVal_2518 (_ BitVec 1))) (= (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_2518) |c_#valid|)))) is different from true [2022-11-20 20:37:38,453 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:37:38,453 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:37:38,462 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:38,546 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2520 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2520) |c_#length|)))) is different from true [2022-11-20 20:37:38,575 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:38,575 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:38,587 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:38,588 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:38,672 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_2521 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2521) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:37:38,695 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:38,696 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:38,709 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:38,709 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:38,791 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2522 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2522) |c_#length|)))) is different from true [2022-11-20 20:37:38,810 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:38,810 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:38,826 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:38,826 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:38,844 INFO L134 CoverageAnalysis]: Checked inductivity of 277 backedges. 8 proven. 141 refuted. 0 times theorem prover too weak. 56 trivial. 72 not checked. [2022-11-20 20:37:38,844 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:37:39,283 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1081431687] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:37:39,283 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:37:39,283 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [30, 30, 27] total 46 [2022-11-20 20:37:39,283 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [104355629] [2022-11-20 20:37:39,283 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:37:39,283 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 47 states [2022-11-20 20:37:39,283 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:37:39,284 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 47 interpolants. [2022-11-20 20:37:39,284 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=127, Invalid=544, Unknown=25, NotChecked=1656, Total=2352 [2022-11-20 20:37:39,285 INFO L87 Difference]: Start difference. First operand 66 states and 88 transitions. Second operand has 47 states, 45 states have (on average 2.066666666666667) internal successors, (93), 46 states have internal predecessors, (93), 9 states have call successors, (9), 2 states have call predecessors, (9), 25 states have return successors, (25), 12 states have call predecessors, (25), 9 states have call successors, (25) [2022-11-20 20:37:43,336 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:37:43,336 INFO L93 Difference]: Finished difference Result 76 states and 97 transitions. [2022-11-20 20:37:43,336 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2022-11-20 20:37:43,337 INFO L78 Accepts]: Start accepts. Automaton has has 47 states, 45 states have (on average 2.066666666666667) internal successors, (93), 46 states have internal predecessors, (93), 9 states have call successors, (9), 2 states have call predecessors, (9), 25 states have return successors, (25), 12 states have call predecessors, (25), 9 states have call successors, (25) Word has length 80 [2022-11-20 20:37:43,337 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:37:43,338 INFO L225 Difference]: With dead ends: 76 [2022-11-20 20:37:43,338 INFO L226 Difference]: Without dead ends: 76 [2022-11-20 20:37:43,339 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 248 GetRequests, 197 SyntacticMatches, 2 SemanticMatches, 49 ConstructedPredicates, 24 IntricatePredicates, 0 DeprecatedPredicates, 60 ImplicationChecksByTransitivity, 8.4s TimeCoverageRelationStatistics Valid=135, Invalid=638, Unknown=25, NotChecked=1752, Total=2550 [2022-11-20 20:37:43,340 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 28 mSDsluCounter, 277 mSDsCounter, 0 mSdLazyCounter, 783 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 309 SdHoareTripleChecker+Invalid, 2574 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 783 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 1766 IncrementalHoareTripleChecker+Unchecked, 1.8s IncrementalHoareTripleChecker+Time [2022-11-20 20:37:43,340 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [28 Valid, 309 Invalid, 2574 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 783 Invalid, 0 Unknown, 1766 Unchecked, 1.8s Time] [2022-11-20 20:37:43,340 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2022-11-20 20:37:43,342 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 66. [2022-11-20 20:37:43,343 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66 states, 51 states have (on average 1.0784313725490196) internal successors, (55), 53 states have internal predecessors, (55), 11 states have call successors, (11), 1 states have call predecessors, (11), 2 states have return successors, (21), 11 states have call predecessors, (21), 11 states have call successors, (21) [2022-11-20 20:37:43,343 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 87 transitions. [2022-11-20 20:37:43,343 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 87 transitions. Word has length 80 [2022-11-20 20:37:43,344 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:37:43,344 INFO L495 AbstractCegarLoop]: Abstraction has 66 states and 87 transitions. [2022-11-20 20:37:43,344 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 47 states, 45 states have (on average 2.066666666666667) internal successors, (93), 46 states have internal predecessors, (93), 9 states have call successors, (9), 2 states have call predecessors, (9), 25 states have return successors, (25), 12 states have call predecessors, (25), 9 states have call successors, (25) [2022-11-20 20:37:43,344 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 87 transitions. [2022-11-20 20:37:43,345 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-11-20 20:37:43,345 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:37:43,346 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 10, 9, 9, 9, 9, 8, 8, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:37:43,353 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (62)] Forceful destruction successful, exit code 0 [2022-11-20 20:37:43,561 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (60)] Forceful destruction successful, exit code 0 [2022-11-20 20:37:43,757 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (61)] Forceful destruction successful, exit code 0 [2022-11-20 20:37:43,951 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 62 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true,60 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,61 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt [2022-11-20 20:37:43,951 INFO L420 AbstractCegarLoop]: === Iteration 24 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:37:43,952 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:37:43,952 INFO L85 PathProgramCache]: Analyzing trace with hash 2110498800, now seen corresponding path program 8 times [2022-11-20 20:37:43,952 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:37:43,952 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [665218822] [2022-11-20 20:37:43,952 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-11-20 20:37:43,952 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:37:43,953 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:37:43,953 INFO L229 MonitoredProcess]: Starting monitored process 63 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:37:43,955 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (63)] Waiting until timeout for monitored process [2022-11-20 20:37:44,392 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-11-20 20:37:44,392 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:37:44,407 INFO L263 TraceCheckSpWp]: Trace formula consists of 341 conjuncts, 84 conjunts are in the unsatisfiable core [2022-11-20 20:37:44,411 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:37:44,439 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:37:44,452 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:37:44,695 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2596 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2596))))) is different from true [2022-11-20 20:37:44,716 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:44,717 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:44,738 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:44,739 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:44,935 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2597 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2597) |c_#length|)))) is different from true [2022-11-20 20:37:44,964 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:44,965 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:44,988 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:44,988 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:45,222 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2598 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2598))))) is different from true [2022-11-20 20:37:45,247 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:45,248 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:45,270 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:45,270 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:45,490 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2599 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2599))))) is different from true [2022-11-20 20:37:45,513 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:45,514 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:45,531 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:45,531 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:45,780 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2600 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2600) |c_#length|)))) is different from true [2022-11-20 20:37:45,807 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:45,808 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:45,830 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:45,831 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:46,077 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2601 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2601) |c_#length|)))) is different from true [2022-11-20 20:37:46,101 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:46,102 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:46,125 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:46,125 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:46,382 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_2602 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2602) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:37:46,405 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:46,406 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:46,422 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:46,423 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:46,696 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2603 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2603))))) is different from true [2022-11-20 20:37:46,719 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:46,720 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:46,743 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:46,743 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:47,023 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2604 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2604) |c_#length|)))) is different from true [2022-11-20 20:37:47,048 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:47,049 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:47,071 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:47,071 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:47,178 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 9 proven. 181 refuted. 0 times theorem prover too weak. 72 trivial. 90 not checked. [2022-11-20 20:37:47,178 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:37:47,990 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:37:47,991 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [665218822] [2022-11-20 20:37:47,991 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [665218822] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:37:47,991 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [934620859] [2022-11-20 20:37:47,991 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-11-20 20:37:47,991 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:37:47,992 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:37:47,993 INFO L229 MonitoredProcess]: Starting monitored process 64 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:37:47,994 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (64)] Waiting until timeout for monitored process [2022-11-20 20:37:48,785 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-11-20 20:37:48,785 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:37:48,816 INFO L263 TraceCheckSpWp]: Trace formula consists of 341 conjuncts, 85 conjunts are in the unsatisfiable core [2022-11-20 20:37:48,821 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:37:48,835 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:37:48,848 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:37:48,967 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2678 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2678))))) is different from true [2022-11-20 20:37:48,990 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:48,990 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:49,008 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:49,008 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:49,125 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2679 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2679))))) is different from true [2022-11-20 20:37:49,148 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:49,149 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:49,171 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:49,171 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:49,282 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_2680 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2680))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:37:49,322 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:49,323 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:49,347 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:49,347 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:49,453 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2681 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2681))))) is different from true [2022-11-20 20:37:49,475 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:49,476 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:49,497 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:49,498 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:49,604 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2682 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2682) |c_#length|)))) is different from true [2022-11-20 20:37:49,631 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:49,631 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:49,654 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:49,655 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:49,761 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2683 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2683) |c_#length|)))) is different from true [2022-11-20 20:37:49,787 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:49,788 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:49,805 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:49,805 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:49,922 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2684 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2684) |c_#length|)))) is different from true [2022-11-20 20:37:49,943 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:49,944 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:49,961 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:49,961 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:50,074 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2685 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2685) |c_#length|)))) is different from true [2022-11-20 20:37:50,096 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:50,099 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:50,127 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:50,128 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:50,247 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2686 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2686) |c_#length|)))) is different from true [2022-11-20 20:37:50,272 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:50,274 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:50,291 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:50,291 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:50,315 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 9 proven. 181 refuted. 0 times theorem prover too weak. 72 trivial. 90 not checked. [2022-11-20 20:37:50,315 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:37:53,069 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [934620859] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:37:53,069 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1926007175] [2022-11-20 20:37:53,069 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-11-20 20:37:53,069 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:37:53,069 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:37:53,071 INFO L229 MonitoredProcess]: Starting monitored process 65 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:37:53,074 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (65)] Waiting until timeout for monitored process [2022-11-20 20:37:53,449 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-11-20 20:37:53,449 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:37:53,457 INFO L263 TraceCheckSpWp]: Trace formula consists of 341 conjuncts, 88 conjunts are in the unsatisfiable core [2022-11-20 20:37:53,462 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:37:53,475 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:37:53,488 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:37:53,611 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_2761 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2761))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2760 (_ BitVec 1))) (= (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_2760) |c_#valid|)))) is different from true [2022-11-20 20:37:53,645 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:53,645 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:53,686 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:37:53,687 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:37:53,807 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2762 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2762))))) is different from true [2022-11-20 20:37:53,830 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:53,831 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:53,865 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:53,866 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:53,979 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2763 (_ BitVec 1))) (= (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_2763) |c_#valid|)) (exists ((v_ArrVal_2764 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2764) |c_#length|)))) is different from true [2022-11-20 20:37:54,011 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:54,012 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:54,053 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:37:54,054 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:37:54,317 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:54,318 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:54,358 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:37:54,358 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:37:54,862 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2767 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2767) |c_#length|)))) is different from true [2022-11-20 20:37:54,894 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:54,895 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:54,939 INFO L321 Elim1Store]: treesize reduction 12, result has 42.9 percent of original size [2022-11-20 20:37:54,939 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 20 treesize of output 22 [2022-11-20 20:37:55,046 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2768 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2768) |c_#length|)))) is different from true [2022-11-20 20:37:55,073 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:55,073 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:55,097 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:55,097 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:55,362 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:55,363 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:55,401 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:37:55,401 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:37:55,840 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2771 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2771))))) is different from true [2022-11-20 20:37:55,865 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:55,866 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:55,906 INFO L321 Elim1Store]: treesize reduction 12, result has 42.9 percent of original size [2022-11-20 20:37:55,906 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 20 treesize of output 22 [2022-11-20 20:37:56,030 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2772 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2772) |c_#length|)))) is different from true [2022-11-20 20:37:56,056 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:37:56,056 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:37:56,079 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:37:56,079 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:37:56,098 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 9 proven. 185 refuted. 0 times theorem prover too weak. 74 trivial. 84 not checked. [2022-11-20 20:37:56,098 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:37:58,782 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1926007175] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:37:58,783 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:37:58,783 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [33, 33, 32] total 54 [2022-11-20 20:37:58,783 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [212173847] [2022-11-20 20:37:58,783 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:37:58,784 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 55 states [2022-11-20 20:37:58,784 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:37:58,784 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 55 interpolants. [2022-11-20 20:37:58,785 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=163, Invalid=904, Unknown=25, NotChecked=2100, Total=3192 [2022-11-20 20:37:58,785 INFO L87 Difference]: Start difference. First operand 66 states and 87 transitions. Second operand has 55 states, 53 states have (on average 2.018867924528302) internal successors, (107), 54 states have internal predecessors, (107), 12 states have call successors, (12), 2 states have call predecessors, (12), 27 states have return successors, (28), 14 states have call predecessors, (28), 12 states have call successors, (28) [2022-11-20 20:38:06,780 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:38:06,780 INFO L93 Difference]: Finished difference Result 107 states and 140 transitions. [2022-11-20 20:38:06,781 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2022-11-20 20:38:06,781 INFO L78 Accepts]: Start accepts. Automaton has has 55 states, 53 states have (on average 2.018867924528302) internal successors, (107), 54 states have internal predecessors, (107), 12 states have call successors, (12), 2 states have call predecessors, (12), 27 states have return successors, (28), 14 states have call predecessors, (28), 12 states have call successors, (28) Word has length 89 [2022-11-20 20:38:06,781 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:38:06,782 INFO L225 Difference]: With dead ends: 107 [2022-11-20 20:38:06,782 INFO L226 Difference]: Without dead ends: 107 [2022-11-20 20:38:06,783 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 275 GetRequests, 215 SyntacticMatches, 3 SemanticMatches, 57 ConstructedPredicates, 25 IntricatePredicates, 0 DeprecatedPredicates, 179 ImplicationChecksByTransitivity, 13.6s TimeCoverageRelationStatistics Valid=172, Invalid=1025, Unknown=25, NotChecked=2200, Total=3422 [2022-11-20 20:38:06,784 INFO L413 NwaCegarLoop]: 33 mSDtfsCounter, 26 mSDsluCounter, 398 mSDsCounter, 0 mSdLazyCounter, 868 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 26 SdHoareTripleChecker+Valid, 431 SdHoareTripleChecker+Invalid, 2770 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 868 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 1883 IncrementalHoareTripleChecker+Unchecked, 2.2s IncrementalHoareTripleChecker+Time [2022-11-20 20:38:06,784 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [26 Valid, 431 Invalid, 2770 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 868 Invalid, 0 Unknown, 1883 Unchecked, 2.2s Time] [2022-11-20 20:38:06,785 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 107 states. [2022-11-20 20:38:06,788 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 107 to 98. [2022-11-20 20:38:06,789 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 98 states, 77 states have (on average 1.051948051948052) internal successors, (81), 78 states have internal predecessors, (81), 17 states have call successors, (17), 1 states have call predecessors, (17), 2 states have return successors, (33), 18 states have call predecessors, (33), 17 states have call successors, (33) [2022-11-20 20:38:06,790 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 98 states to 98 states and 131 transitions. [2022-11-20 20:38:06,790 INFO L78 Accepts]: Start accepts. Automaton has 98 states and 131 transitions. Word has length 89 [2022-11-20 20:38:06,791 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:38:06,791 INFO L495 AbstractCegarLoop]: Abstraction has 98 states and 131 transitions. [2022-11-20 20:38:06,791 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 55 states, 53 states have (on average 2.018867924528302) internal successors, (107), 54 states have internal predecessors, (107), 12 states have call successors, (12), 2 states have call predecessors, (12), 27 states have return successors, (28), 14 states have call predecessors, (28), 12 states have call successors, (28) [2022-11-20 20:38:06,792 INFO L276 IsEmpty]: Start isEmpty. Operand 98 states and 131 transitions. [2022-11-20 20:38:06,793 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-11-20 20:38:06,793 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:38:06,793 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 9, 9, 9, 9, 9, 8, 8, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:38:06,812 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (63)] Forceful destruction successful, exit code 0 [2022-11-20 20:38:07,018 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (65)] Forceful destruction successful, exit code 0 [2022-11-20 20:38:07,218 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (64)] Forceful destruction successful, exit code 0 [2022-11-20 20:38:07,412 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 63 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,65 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true,64 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt [2022-11-20 20:38:07,412 INFO L420 AbstractCegarLoop]: === Iteration 25 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:38:07,413 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:38:07,413 INFO L85 PathProgramCache]: Analyzing trace with hash 1604940175, now seen corresponding path program 9 times [2022-11-20 20:38:07,413 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:38:07,413 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1327453200] [2022-11-20 20:38:07,413 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-20 20:38:07,413 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:38:07,413 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:38:07,414 INFO L229 MonitoredProcess]: Starting monitored process 66 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:38:07,418 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (66)] Waiting until timeout for monitored process [2022-11-20 20:38:08,031 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 10 check-sat command(s) [2022-11-20 20:38:08,031 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:38:08,047 INFO L263 TraceCheckSpWp]: Trace formula consists of 335 conjuncts, 80 conjunts are in the unsatisfiable core [2022-11-20 20:38:08,051 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:38:08,084 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:38:08,097 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:38:08,371 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2844 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2844) |c_#length|)))) is different from true [2022-11-20 20:38:08,401 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:08,401 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:08,421 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:08,422 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:08,644 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_2845 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2845))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:38:08,667 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:08,668 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:08,687 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:08,688 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:08,936 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2846 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2846) |c_#length|)))) is different from true [2022-11-20 20:38:08,964 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:08,965 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:08,990 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:08,990 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:09,235 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2847 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2847))))) is different from true [2022-11-20 20:38:09,263 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:09,264 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:09,283 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:09,283 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:09,641 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| |c_ldv_malloc_#in~size|) |c_#length|)) is different from true [2022-11-20 20:38:09,691 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-20 20:38:09,691 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-11-20 20:38:10,329 INFO L321 Elim1Store]: treesize reduction 20, result has 57.4 percent of original size [2022-11-20 20:38:10,330 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 24 treesize of output 43 [2022-11-20 20:38:11,259 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:11,303 INFO L321 Elim1Store]: treesize reduction 19, result has 32.1 percent of original size [2022-11-20 20:38:11,303 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 24 treesize of output 31 [2022-11-20 20:38:11,335 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:11,336 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:12,151 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_2851 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2851) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:38:12,179 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:12,180 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:12,205 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:12,205 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:12,345 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 17 proven. 223 refuted. 0 times theorem prover too weak. 34 trivial. 78 not checked. [2022-11-20 20:38:12,346 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:38:15,527 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:38:15,527 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1327453200] [2022-11-20 20:38:15,527 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1327453200] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:38:15,528 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1359279318] [2022-11-20 20:38:15,528 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-20 20:38:15,528 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:38:15,528 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:38:15,529 INFO L229 MonitoredProcess]: Starting monitored process 67 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:38:15,531 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (67)] Waiting until timeout for monitored process [2022-11-20 20:38:16,779 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 10 check-sat command(s) [2022-11-20 20:38:16,779 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:38:16,812 INFO L263 TraceCheckSpWp]: Trace formula consists of 335 conjuncts, 93 conjunts are in the unsatisfiable core [2022-11-20 20:38:16,819 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:38:16,834 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:38:16,845 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:38:17,009 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2924 (_ BitVec 1))) (= |c_#valid| (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_2924))) (exists ((v_ArrVal_2923 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2923))))) is different from true [2022-11-20 20:38:17,055 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:17,056 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:17,116 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:38:17,116 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:38:17,457 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-20 20:38:17,458 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-11-20 20:38:17,500 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:17,501 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:18,058 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:18,058 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:18,081 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:18,488 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2929 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2929) |c_#length|)))) is different from true [2022-11-20 20:38:18,513 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:18,514 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:18,533 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:18,534 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:18,681 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-20 20:38:18,681 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-11-20 20:38:18,993 INFO L321 Elim1Store]: treesize reduction 20, result has 57.4 percent of original size [2022-11-20 20:38:18,995 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 24 treesize of output 43 [2022-11-20 20:38:20,101 INFO L321 Elim1Store]: treesize reduction 20, result has 57.4 percent of original size [2022-11-20 20:38:20,102 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 24 treesize of output 43 [2022-11-20 20:38:20,256 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:20,256 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:21,164 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_2935 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_2935) |c_#length|)))) is different from true [2022-11-20 20:38:21,202 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:21,203 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:21,228 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:21,229 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:21,249 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 17 proven. 235 refuted. 0 times theorem prover too weak. 40 trivial. 60 not checked. [2022-11-20 20:38:21,249 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:38:23,902 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [1359279318] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:38:23,902 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [755355926] [2022-11-20 20:38:23,902 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-20 20:38:23,902 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:38:23,902 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:38:23,903 INFO L229 MonitoredProcess]: Starting monitored process 68 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:38:23,907 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (68)] Waiting until timeout for monitored process [2022-11-20 20:38:26,030 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 10 check-sat command(s) [2022-11-20 20:38:26,030 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:38:26,042 INFO L263 TraceCheckSpWp]: Trace formula consists of 335 conjuncts, 81 conjunts are in the unsatisfiable core [2022-11-20 20:38:26,047 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:38:26,065 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:38:26,083 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:38:26,242 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3007 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3007))))) is different from true [2022-11-20 20:38:26,285 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:26,286 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:26,311 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:26,311 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:26,422 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_3008 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3008) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:38:26,446 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:26,447 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:26,472 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:26,472 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:26,591 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3009 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3009) |c_#length|)))) is different from true [2022-11-20 20:38:26,617 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:26,618 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:26,637 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:26,637 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:26,761 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3010 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3010) |c_#length|)))) is different from true [2022-11-20 20:38:26,797 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:26,798 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:26,827 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:26,828 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:27,093 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3011 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3011) |c_#length|)))) is different from true [2022-11-20 20:38:27,120 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:27,121 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:27,140 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:27,140 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:27,408 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_3012 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3012))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:38:27,432 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:27,433 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:27,452 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:27,452 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:27,892 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3013 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3013) |c_#length|)))) is different from true [2022-11-20 20:38:27,919 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:27,920 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:27,945 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:27,945 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:28,155 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_3014 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3014))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:38:28,183 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:28,184 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:28,209 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:28,209 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:28,230 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 11 proven. 197 refuted. 0 times theorem prover too weak. 56 trivial. 88 not checked. [2022-11-20 20:38:28,230 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:38:28,930 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [755355926] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:38:28,930 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:38:28,930 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [34, 37, 33] total 59 [2022-11-20 20:38:28,930 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [386300004] [2022-11-20 20:38:28,930 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:38:28,931 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 60 states [2022-11-20 20:38:28,931 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:38:28,932 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 60 interpolants. [2022-11-20 20:38:28,932 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=178, Invalid=1853, Unknown=17, NotChecked=1734, Total=3782 [2022-11-20 20:38:28,933 INFO L87 Difference]: Start difference. First operand 98 states and 131 transitions. Second operand has 60 states, 58 states have (on average 1.9310344827586208) internal successors, (112), 55 states have internal predecessors, (112), 14 states have call successors, (14), 3 states have call predecessors, (14), 21 states have return successors, (26), 19 states have call predecessors, (26), 14 states have call successors, (26) [2022-11-20 20:38:36,678 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:38:36,678 INFO L93 Difference]: Finished difference Result 154 states and 203 transitions. [2022-11-20 20:38:36,679 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 37 states. [2022-11-20 20:38:36,679 INFO L78 Accepts]: Start accepts. Automaton has has 60 states, 58 states have (on average 1.9310344827586208) internal successors, (112), 55 states have internal predecessors, (112), 14 states have call successors, (14), 3 states have call predecessors, (14), 21 states have return successors, (26), 19 states have call predecessors, (26), 14 states have call successors, (26) Word has length 89 [2022-11-20 20:38:36,679 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:38:36,681 INFO L225 Difference]: With dead ends: 154 [2022-11-20 20:38:36,681 INFO L226 Difference]: Without dead ends: 154 [2022-11-20 20:38:36,682 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 288 GetRequests, 206 SyntacticMatches, 7 SemanticMatches, 75 ConstructedPredicates, 17 IntricatePredicates, 0 DeprecatedPredicates, 764 ImplicationChecksByTransitivity, 14.5s TimeCoverageRelationStatistics Valid=289, Invalid=3302, Unknown=17, NotChecked=2244, Total=5852 [2022-11-20 20:38:36,682 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 38 mSDsluCounter, 480 mSDsCounter, 0 mSdLazyCounter, 1588 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 512 SdHoareTripleChecker+Invalid, 3339 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 1588 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 1711 IncrementalHoareTripleChecker+Unchecked, 4.2s IncrementalHoareTripleChecker+Time [2022-11-20 20:38:36,683 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 512 Invalid, 3339 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 1588 Invalid, 0 Unknown, 1711 Unchecked, 4.2s Time] [2022-11-20 20:38:36,683 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 154 states. [2022-11-20 20:38:36,688 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 154 to 123. [2022-11-20 20:38:36,689 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 123 states, 97 states have (on average 1.041237113402062) internal successors, (101), 98 states have internal predecessors, (101), 22 states have call successors, (22), 1 states have call predecessors, (22), 2 states have return successors, (43), 23 states have call predecessors, (43), 22 states have call successors, (43) [2022-11-20 20:38:36,690 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 123 states to 123 states and 166 transitions. [2022-11-20 20:38:36,690 INFO L78 Accepts]: Start accepts. Automaton has 123 states and 166 transitions. Word has length 89 [2022-11-20 20:38:36,691 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:38:36,691 INFO L495 AbstractCegarLoop]: Abstraction has 123 states and 166 transitions. [2022-11-20 20:38:36,691 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 60 states, 58 states have (on average 1.9310344827586208) internal successors, (112), 55 states have internal predecessors, (112), 14 states have call successors, (14), 3 states have call predecessors, (14), 21 states have return successors, (26), 19 states have call predecessors, (26), 14 states have call successors, (26) [2022-11-20 20:38:36,692 INFO L276 IsEmpty]: Start isEmpty. Operand 123 states and 166 transitions. [2022-11-20 20:38:36,693 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-11-20 20:38:36,693 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:38:36,693 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 9, 9, 9, 9, 8, 8, 8, 2, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:38:36,713 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (68)] Forceful destruction successful, exit code 0 [2022-11-20 20:38:36,917 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (66)] Forceful destruction successful, exit code 0 [2022-11-20 20:38:37,114 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (67)] Forceful destruction successful, exit code 0 [2022-11-20 20:38:37,307 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 68 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true,66 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,67 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt [2022-11-20 20:38:37,307 INFO L420 AbstractCegarLoop]: === Iteration 26 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:38:37,308 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:38:37,308 INFO L85 PathProgramCache]: Analyzing trace with hash -405163666, now seen corresponding path program 10 times [2022-11-20 20:38:37,308 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:38:37,308 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1256790444] [2022-11-20 20:38:37,309 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-20 20:38:37,309 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:38:37,309 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:38:37,310 INFO L229 MonitoredProcess]: Starting monitored process 69 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:38:37,312 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (69)] Waiting until timeout for monitored process [2022-11-20 20:38:37,789 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-20 20:38:37,789 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:38:37,802 INFO L263 TraceCheckSpWp]: Trace formula consists of 329 conjuncts, 78 conjunts are in the unsatisfiable core [2022-11-20 20:38:37,807 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:38:37,839 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:38:37,852 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:38:38,121 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3084 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3084) |c_#length|)))) is different from true [2022-11-20 20:38:38,145 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:38,146 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:38,165 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:38,165 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:38,387 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3085 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3085) |c_#length|)))) is different from true [2022-11-20 20:38:38,415 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:38,416 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:38,441 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:38,442 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:38,756 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_3086 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3086) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:38:38,795 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:38,796 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:38,820 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:38,820 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:39,110 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_3087 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3087))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:38:39,134 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:39,135 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:39,159 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:39,160 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:39,429 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3088 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3088) |c_#length|)))) is different from true [2022-11-20 20:38:39,461 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:39,462 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:39,486 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:39,487 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:39,973 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3089 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3089) |c_#length|)))) is different from true [2022-11-20 20:38:39,997 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:39,998 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:40,024 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:40,024 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:40,552 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_3090 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3090))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:38:40,581 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:40,581 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:40,601 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:40,601 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:40,718 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 9 proven. 185 refuted. 0 times theorem prover too weak. 74 trivial. 84 not checked. [2022-11-20 20:38:40,718 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:38:43,688 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:38:43,688 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1256790444] [2022-11-20 20:38:43,688 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1256790444] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:38:43,688 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1370194789] [2022-11-20 20:38:43,689 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-20 20:38:43,689 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:38:43,689 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:38:43,692 INFO L229 MonitoredProcess]: Starting monitored process 70 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:38:43,694 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (70)] Waiting until timeout for monitored process [2022-11-20 20:38:44,551 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-20 20:38:44,552 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:38:44,584 INFO L263 TraceCheckSpWp]: Trace formula consists of 329 conjuncts, 78 conjunts are in the unsatisfiable core [2022-11-20 20:38:44,588 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:38:44,603 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:38:44,617 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:38:44,752 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3160 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3160) |c_#length|)))) is different from true [2022-11-20 20:38:44,781 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:44,781 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:44,801 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:44,801 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:44,921 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_3161 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3161) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:38:44,968 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:44,969 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:44,988 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:44,988 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:45,112 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3162 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3162) |c_#length|)))) is different from true [2022-11-20 20:38:45,144 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:45,145 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:45,164 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:45,164 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:45,280 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3163 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3163) |c_#length|)))) is different from true [2022-11-20 20:38:45,304 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:45,305 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:45,324 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:45,325 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:45,449 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3164 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3164) |c_#length|)))) is different from true [2022-11-20 20:38:45,487 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:45,488 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:45,513 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:45,515 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:45,764 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3165 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3165) |c_#length|)))) is different from true [2022-11-20 20:38:45,788 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:45,789 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:45,809 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:45,809 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:46,080 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3166 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3166))))) is different from true [2022-11-20 20:38:46,108 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:46,109 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:46,130 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:46,130 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:46,155 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 9 proven. 185 refuted. 0 times theorem prover too weak. 74 trivial. 84 not checked. [2022-11-20 20:38:46,156 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:38:46,743 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [1370194789] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:38:46,744 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1767680782] [2022-11-20 20:38:46,744 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-20 20:38:46,744 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:38:46,744 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:38:46,745 INFO L229 MonitoredProcess]: Starting monitored process 71 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:38:46,749 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (71)] Waiting until timeout for monitored process [2022-11-20 20:38:47,144 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-20 20:38:47,144 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:38:47,152 INFO L263 TraceCheckSpWp]: Trace formula consists of 329 conjuncts, 79 conjunts are in the unsatisfiable core [2022-11-20 20:38:47,158 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:38:47,189 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:38:47,200 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:38:47,340 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3237 (_ BitVec 1))) (= |c_#valid| (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_3237))) (exists ((v_ArrVal_3236 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3236))))) is different from true [2022-11-20 20:38:47,379 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:47,380 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:47,423 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:38:47,423 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:38:47,557 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3238 (_ BitVec 1))) (= |c_#valid| (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_3238))) (exists ((v_ArrVal_3239 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3239) |c_#length|)))) is different from true [2022-11-20 20:38:47,593 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:47,594 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:47,642 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:38:47,642 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:38:47,946 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:47,946 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:47,994 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:38:47,994 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:38:48,478 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3243 (_ BitVec 1))) (= (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_3243) |c_#valid|)) (exists ((v_ArrVal_3242 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3242) |c_#length|)))) is different from true [2022-11-20 20:38:48,613 INFO L321 Elim1Store]: treesize reduction 44, result has 34.3 percent of original size [2022-11-20 20:38:48,614 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 26 treesize of output 43 [2022-11-20 20:38:48,626 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:49,094 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3244 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3244) |c_#length|)))) is different from true [2022-11-20 20:38:49,122 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:49,123 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:49,174 INFO L321 Elim1Store]: treesize reduction 12, result has 42.9 percent of original size [2022-11-20 20:38:49,174 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 20 treesize of output 22 [2022-11-20 20:38:49,611 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3245 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3245))))) is different from true [2022-11-20 20:38:49,643 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:49,644 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:49,670 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:49,670 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:50,019 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_3246 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3246))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:38:50,053 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:50,054 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:50,081 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:50,082 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:50,105 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 15 proven. 213 refuted. 0 times theorem prover too weak. 46 trivial. 78 not checked. [2022-11-20 20:38:50,105 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:38:52,691 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1767680782] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:38:52,691 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:38:52,691 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [29, 29, 29] total 49 [2022-11-20 20:38:52,692 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [630337317] [2022-11-20 20:38:52,692 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:38:52,692 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 50 states [2022-11-20 20:38:52,692 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:38:52,693 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 50 interpolants. [2022-11-20 20:38:52,693 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=150, Invalid=901, Unknown=21, NotChecked=1580, Total=2652 [2022-11-20 20:38:52,694 INFO L87 Difference]: Start difference. First operand 123 states and 166 transitions. Second operand has 50 states, 48 states have (on average 2.3333333333333335) internal successors, (112), 49 states have internal predecessors, (112), 14 states have call successors, (14), 3 states have call predecessors, (14), 24 states have return successors, (26), 16 states have call predecessors, (26), 14 states have call successors, (26) [2022-11-20 20:38:57,795 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:38:57,796 INFO L93 Difference]: Finished difference Result 202 states and 268 transitions. [2022-11-20 20:38:57,797 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-11-20 20:38:57,797 INFO L78 Accepts]: Start accepts. Automaton has has 50 states, 48 states have (on average 2.3333333333333335) internal successors, (112), 49 states have internal predecessors, (112), 14 states have call successors, (14), 3 states have call predecessors, (14), 24 states have return successors, (26), 16 states have call predecessors, (26), 14 states have call successors, (26) Word has length 89 [2022-11-20 20:38:57,797 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:38:57,799 INFO L225 Difference]: With dead ends: 202 [2022-11-20 20:38:57,799 INFO L226 Difference]: Without dead ends: 202 [2022-11-20 20:38:57,800 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 276 GetRequests, 220 SyntacticMatches, 3 SemanticMatches, 53 ConstructedPredicates, 20 IntricatePredicates, 0 DeprecatedPredicates, 185 ImplicationChecksByTransitivity, 10.8s TimeCoverageRelationStatistics Valid=165, Invalid=1084, Unknown=21, NotChecked=1700, Total=2970 [2022-11-20 20:38:57,800 INFO L413 NwaCegarLoop]: 34 mSDtfsCounter, 26 mSDsluCounter, 339 mSDsCounter, 0 mSdLazyCounter, 867 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 26 SdHoareTripleChecker+Valid, 373 SdHoareTripleChecker+Invalid, 2395 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 867 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 1504 IncrementalHoareTripleChecker+Unchecked, 2.2s IncrementalHoareTripleChecker+Time [2022-11-20 20:38:57,801 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [26 Valid, 373 Invalid, 2395 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 867 Invalid, 0 Unknown, 1504 Unchecked, 2.2s Time] [2022-11-20 20:38:57,801 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 202 states. [2022-11-20 20:38:57,816 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 202 to 169. [2022-11-20 20:38:57,826 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 169 states, 133 states have (on average 1.037593984962406) internal successors, (138), 135 states have internal predecessors, (138), 30 states have call successors, (30), 2 states have call predecessors, (30), 4 states have return successors, (59), 31 states have call predecessors, (59), 30 states have call successors, (59) [2022-11-20 20:38:57,828 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 169 states to 169 states and 227 transitions. [2022-11-20 20:38:57,834 INFO L78 Accepts]: Start accepts. Automaton has 169 states and 227 transitions. Word has length 89 [2022-11-20 20:38:57,834 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:38:57,835 INFO L495 AbstractCegarLoop]: Abstraction has 169 states and 227 transitions. [2022-11-20 20:38:57,836 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 50 states, 48 states have (on average 2.3333333333333335) internal successors, (112), 49 states have internal predecessors, (112), 14 states have call successors, (14), 3 states have call predecessors, (14), 24 states have return successors, (26), 16 states have call predecessors, (26), 14 states have call successors, (26) [2022-11-20 20:38:57,836 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 227 transitions. [2022-11-20 20:38:57,838 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-11-20 20:38:57,838 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:38:57,838 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 9, 9, 9, 9, 9, 8, 8, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:38:57,845 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (70)] Forceful destruction successful, exit code 0 [2022-11-20 20:38:58,049 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (69)] Forceful destruction successful, exit code 0 [2022-11-20 20:38:58,245 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (71)] Forceful destruction successful, exit code 0 [2022-11-20 20:38:58,439 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 70 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt,69 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,71 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:38:58,439 INFO L420 AbstractCegarLoop]: === Iteration 27 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:38:58,440 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:38:58,440 INFO L85 PathProgramCache]: Analyzing trace with hash 174838513, now seen corresponding path program 11 times [2022-11-20 20:38:58,440 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:38:58,440 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1751648250] [2022-11-20 20:38:58,440 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2022-11-20 20:38:58,440 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:38:58,441 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:38:58,442 INFO L229 MonitoredProcess]: Starting monitored process 72 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:38:58,453 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (72)] Waiting until timeout for monitored process [2022-11-20 20:38:59,114 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 10 check-sat command(s) [2022-11-20 20:38:59,114 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:38:59,129 INFO L263 TraceCheckSpWp]: Trace formula consists of 335 conjuncts, 81 conjunts are in the unsatisfiable core [2022-11-20 20:38:59,134 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:38:59,170 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:38:59,180 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:38:59,453 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3318 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3318))))) is different from true [2022-11-20 20:38:59,476 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:59,477 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:59,501 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:59,502 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:38:59,721 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_3319 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3319) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:38:59,758 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:38:59,759 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:38:59,785 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:38:59,785 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:39:00,025 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3320 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3320))))) is different from true [2022-11-20 20:39:00,054 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:39:00,055 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:39:00,074 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:39:00,074 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:39:00,322 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3321 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3321) |c_#length|)))) is different from true [2022-11-20 20:39:00,354 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:39:00,355 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:39:00,374 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:39:00,374 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:39:00,853 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3322 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3322) |c_#length|)))) is different from true [2022-11-20 20:39:00,877 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:39:00,878 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:39:00,903 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:39:00,903 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:39:01,186 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3323 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3323) |c_#length|)))) is different from true [2022-11-20 20:39:01,214 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:39:01,214 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:39:01,233 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:39:01,234 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:39:01,525 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3324 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3324) |c_#length|)))) is different from true [2022-11-20 20:39:01,550 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:39:01,551 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:39:01,588 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:39:01,589 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:39:01,905 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3325 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3325))))) is different from true [2022-11-20 20:39:01,933 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:39:01,933 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:39:01,953 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:39:01,953 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:39:02,073 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 9 proven. 183 refuted. 0 times theorem prover too weak. 72 trivial. 88 not checked. [2022-11-20 20:39:02,073 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:39:06,519 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:39:06,519 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1751648250] [2022-11-20 20:39:06,519 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1751648250] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:39:06,520 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [472432384] [2022-11-20 20:39:06,520 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2022-11-20 20:39:06,520 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:39:06,520 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:39:06,521 INFO L229 MonitoredProcess]: Starting monitored process 73 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:39:06,523 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (73)] Waiting until timeout for monitored process [2022-11-20 20:39:07,993 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 10 check-sat command(s) [2022-11-20 20:39:07,993 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:39:08,027 INFO L263 TraceCheckSpWp]: Trace formula consists of 335 conjuncts, 92 conjunts are in the unsatisfiable core [2022-11-20 20:39:08,033 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:39:08,047 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:39:08,610 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:39:08,816 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-20 20:39:08,816 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-11-20 20:39:09,746 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3399 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3399))) (exists ((v_ArrVal_3400 (_ BitVec 1))) (= |c_#valid| (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_3400))))) is different from true [2022-11-20 20:39:09,783 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:39:09,830 INFO L321 Elim1Store]: treesize reduction 19, result has 32.1 percent of original size [2022-11-20 20:39:09,830 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 31 treesize of output 38 [2022-11-20 20:39:09,982 INFO L321 Elim1Store]: treesize reduction 44, result has 42.9 percent of original size [2022-11-20 20:39:09,982 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 5 case distinctions, treesize of input 41 treesize of output 68 [2022-11-20 20:39:10,950 INFO L321 Elim1Store]: treesize reduction 44, result has 42.9 percent of original size [2022-11-20 20:39:10,950 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 5 case distinctions, treesize of input 43 treesize of output 70 [2022-11-20 20:39:11,019 INFO L321 Elim1Store]: treesize reduction 19, result has 32.1 percent of original size [2022-11-20 20:39:11,019 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 29 treesize of output 36 [2022-11-20 20:39:12,249 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3404 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3404))))) is different from true [2022-11-20 20:39:12,286 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:39:12,289 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:39:12,294 INFO L321 Elim1Store]: treesize reduction 7, result has 12.5 percent of original size [2022-11-20 20:39:12,295 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 22 [2022-11-20 20:39:12,354 INFO L321 Elim1Store]: treesize reduction 22, result has 29.0 percent of original size [2022-11-20 20:39:12,354 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 20 treesize of output 22 [2022-11-20 20:39:13,482 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3406 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3406))) (exists ((v_ArrVal_3405 (_ BitVec 1))) (= (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_3405) |c_#valid|)))) is different from true [2022-11-20 20:39:13,513 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:39:13,555 INFO L321 Elim1Store]: treesize reduction 19, result has 32.1 percent of original size [2022-11-20 20:39:13,555 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 17 treesize of output 26 [2022-11-20 20:39:13,610 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:39:13,610 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:39:13,762 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3408 (_ BitVec 1))) (= (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_3408) |c_#valid|)) (exists ((v_ArrVal_3407 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3407) |c_#length|)))) is different from true [2022-11-20 20:39:13,792 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:39:13,793 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:39:13,843 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:39:13,844 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:39:13,976 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_3409 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3409) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:39:14,001 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:39:14,001 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:39:14,021 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:39:14,022 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:39:14,164 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_3410 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3410) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:39:14,194 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:39:14,195 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:39:14,215 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:39:14,215 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:39:14,241 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 18 proven. 200 refuted. 0 times theorem prover too weak. 56 trivial. 78 not checked. [2022-11-20 20:39:14,242 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:39:15,241 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [472432384] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:39:15,241 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [604164690] [2022-11-20 20:39:15,241 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2022-11-20 20:39:15,241 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:39:15,242 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:39:15,243 INFO L229 MonitoredProcess]: Starting monitored process 74 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:39:15,246 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (74)] Waiting until timeout for monitored process [2022-11-20 20:39:25,618 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 10 check-sat command(s) [2022-11-20 20:39:25,618 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:39:25,634 INFO L263 TraceCheckSpWp]: Trace formula consists of 335 conjuncts, 84 conjunts are in the unsatisfiable core [2022-11-20 20:39:25,639 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:39:25,654 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:39:25,663 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:39:25,799 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3482 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3482) |c_#length|)))) is different from true [2022-11-20 20:39:25,836 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:39:25,837 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:39:25,862 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:39:25,862 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:39:26,225 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:39:26,226 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:39:26,273 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:39:26,273 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:39:26,882 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3485 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3485) |c_#length|)))) is different from true [2022-11-20 20:39:26,925 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:39:26,926 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:39:26,971 INFO L321 Elim1Store]: treesize reduction 12, result has 42.9 percent of original size [2022-11-20 20:39:26,971 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 20 treesize of output 22 [2022-11-20 20:39:27,093 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_3486 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3486))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:39:27,118 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:39:27,119 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:39:27,145 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:39:27,145 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:39:27,551 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3487 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3487) |c_#length|)) (exists ((v_ArrVal_3488 (_ BitVec 1))) (= |c_#valid| (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_3488))))) is different from true [2022-11-20 20:39:27,645 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:39:27,645 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:39:27,652 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:39:27,793 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3489 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3489) |c_#length|)))) is different from true [2022-11-20 20:39:27,817 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:39:27,817 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:39:27,836 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:39:27,837 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:39:27,987 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3490 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3490) |c_#length|)))) is different from true [2022-11-20 20:39:28,011 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:39:28,011 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:39:28,031 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:39:28,032 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:39:28,171 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3491 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3491))))) is different from true [2022-11-20 20:39:28,203 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:39:28,204 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:39:28,223 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:39:28,223 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:39:28,245 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 17 proven. 195 refuted. 0 times theorem prover too weak. 56 trivial. 84 not checked. [2022-11-20 20:39:28,245 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:39:30,993 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [604164690] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:39:30,993 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:39:30,993 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [31, 36, 33] total 67 [2022-11-20 20:39:30,993 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1442002444] [2022-11-20 20:39:30,994 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:39:30,994 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 68 states [2022-11-20 20:39:30,994 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:39:30,995 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 68 interpolants. [2022-11-20 20:39:30,995 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=219, Invalid=2196, Unknown=21, NotChecked=2394, Total=4830 [2022-11-20 20:39:30,996 INFO L87 Difference]: Start difference. First operand 169 states and 227 transitions. Second operand has 68 states, 66 states have (on average 2.0454545454545454) internal successors, (135), 64 states have internal predecessors, (135), 18 states have call successors, (18), 3 states have call predecessors, (18), 28 states have return successors, (29), 20 states have call predecessors, (29), 18 states have call successors, (29) [2022-11-20 20:39:39,100 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:39:39,101 INFO L93 Difference]: Finished difference Result 248 states and 334 transitions. [2022-11-20 20:39:39,101 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2022-11-20 20:39:39,101 INFO L78 Accepts]: Start accepts. Automaton has has 68 states, 66 states have (on average 2.0454545454545454) internal successors, (135), 64 states have internal predecessors, (135), 18 states have call successors, (18), 3 states have call predecessors, (18), 28 states have return successors, (29), 20 states have call predecessors, (29), 18 states have call successors, (29) Word has length 89 [2022-11-20 20:39:39,102 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:39:39,103 INFO L225 Difference]: With dead ends: 248 [2022-11-20 20:39:39,103 INFO L226 Difference]: Without dead ends: 248 [2022-11-20 20:39:39,105 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 285 GetRequests, 203 SyntacticMatches, 6 SemanticMatches, 76 ConstructedPredicates, 21 IntricatePredicates, 0 DeprecatedPredicates, 704 ImplicationChecksByTransitivity, 18.1s TimeCoverageRelationStatistics Valid=280, Invalid=2975, Unknown=21, NotChecked=2730, Total=6006 [2022-11-20 20:39:39,105 INFO L413 NwaCegarLoop]: 39 mSDtfsCounter, 26 mSDsluCounter, 583 mSDsCounter, 0 mSdLazyCounter, 1152 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 26 SdHoareTripleChecker+Valid, 622 SdHoareTripleChecker+Invalid, 3481 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 1152 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 2310 IncrementalHoareTripleChecker+Unchecked, 3.1s IncrementalHoareTripleChecker+Time [2022-11-20 20:39:39,106 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [26 Valid, 622 Invalid, 3481 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 1152 Invalid, 0 Unknown, 2310 Unchecked, 3.1s Time] [2022-11-20 20:39:39,106 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 248 states. [2022-11-20 20:39:39,116 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 248 to 219. [2022-11-20 20:39:39,116 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 219 states, 173 states have (on average 1.0289017341040463) internal successors, (178), 175 states have internal predecessors, (178), 40 states have call successors, (40), 2 states have call predecessors, (40), 4 states have return successors, (79), 41 states have call predecessors, (79), 40 states have call successors, (79) [2022-11-20 20:39:39,118 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 219 states to 219 states and 297 transitions. [2022-11-20 20:39:39,118 INFO L78 Accepts]: Start accepts. Automaton has 219 states and 297 transitions. Word has length 89 [2022-11-20 20:39:39,119 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:39:39,119 INFO L495 AbstractCegarLoop]: Abstraction has 219 states and 297 transitions. [2022-11-20 20:39:39,119 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 68 states, 66 states have (on average 2.0454545454545454) internal successors, (135), 64 states have internal predecessors, (135), 18 states have call successors, (18), 3 states have call predecessors, (18), 28 states have return successors, (29), 20 states have call predecessors, (29), 18 states have call successors, (29) [2022-11-20 20:39:39,119 INFO L276 IsEmpty]: Start isEmpty. Operand 219 states and 297 transitions. [2022-11-20 20:39:39,121 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-11-20 20:39:39,121 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:39:39,121 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 9, 9, 9, 9, 8, 8, 8, 2, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:39:39,130 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (73)] Forceful destruction successful, exit code 0 [2022-11-20 20:39:39,344 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (74)] Forceful destruction successful, exit code 0 [2022-11-20 20:39:39,542 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (72)] Forceful destruction successful, exit code 0 [2022-11-20 20:39:39,731 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 73 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt,74 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true,72 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:39:39,731 INFO L420 AbstractCegarLoop]: === Iteration 28 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:39:39,731 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:39:39,732 INFO L85 PathProgramCache]: Analyzing trace with hash -1835265328, now seen corresponding path program 12 times [2022-11-20 20:39:39,732 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:39:39,732 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [982800298] [2022-11-20 20:39:39,732 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2022-11-20 20:39:39,732 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:39:39,732 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:39:39,733 INFO L229 MonitoredProcess]: Starting monitored process 75 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:39:39,735 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (75)] Waiting until timeout for monitored process [2022-11-20 20:39:40,472 INFO L228 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 10 check-sat command(s) [2022-11-20 20:39:40,472 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:39:40,486 INFO L263 TraceCheckSpWp]: Trace formula consists of 329 conjuncts, 79 conjunts are in the unsatisfiable core [2022-11-20 20:39:40,491 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:39:40,523 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:39:40,533 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:39:40,814 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3561 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3561))))) is different from true [2022-11-20 20:39:40,846 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:39:40,847 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:39:40,867 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:39:40,867 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:39:41,106 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3562 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3562) |c_#length|)))) is different from true [2022-11-20 20:39:41,134 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:39:41,135 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:39:41,161 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:39:41,162 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:39:41,453 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_3563 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3563) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:39:41,483 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:39:41,484 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:39:41,510 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:39:41,510 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:39:41,767 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3564 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3564))))) is different from true [2022-11-20 20:39:41,791 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:39:41,792 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:39:41,812 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:39:41,812 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:39:42,589 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3565 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3565) |c_#length|)))) is different from true [2022-11-20 20:39:42,621 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:39:42,622 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:39:42,647 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:39:42,647 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:39:42,932 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3566 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3566) |c_#length|)))) is different from true [2022-11-20 20:39:42,956 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:39:42,957 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:39:42,982 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:39:42,983 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:39:43,321 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3567 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3567) |c_#length|)))) is different from true [2022-11-20 20:39:43,350 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:39:43,350 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:39:43,370 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:39:43,371 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:39:43,492 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 21 proven. 201 refuted. 0 times theorem prover too weak. 46 trivial. 84 not checked. [2022-11-20 20:39:43,492 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:39:46,415 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:39:46,415 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [982800298] [2022-11-20 20:39:46,415 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [982800298] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:39:46,415 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1804758873] [2022-11-20 20:39:46,415 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2022-11-20 20:39:46,415 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:39:46,415 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:39:46,417 INFO L229 MonitoredProcess]: Starting monitored process 76 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:39:46,418 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (76)] Waiting until timeout for monitored process [2022-11-20 20:39:47,820 INFO L228 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 10 check-sat command(s) [2022-11-20 20:39:47,820 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:39:47,832 INFO L263 TraceCheckSpWp]: Trace formula consists of 329 conjuncts, 87 conjunts are in the unsatisfiable core [2022-11-20 20:39:47,837 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:39:47,861 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:39:47,873 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:39:48,266 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:39:48,266 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:39:48,298 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:39:49,220 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:39:49,221 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:39:49,314 INFO L321 Elim1Store]: treesize reduction 44, result has 34.3 percent of original size [2022-11-20 20:39:49,315 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 26 treesize of output 43 [2022-11-20 20:39:50,332 INFO L321 Elim1Store]: treesize reduction 66, result has 34.0 percent of original size [2022-11-20 20:39:50,333 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 33 treesize of output 59 [2022-11-20 20:39:50,420 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:39:51,856 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3645 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3645) |c_#length|)))) is different from true [2022-11-20 20:39:51,903 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:39:51,904 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:39:52,000 INFO L321 Elim1Store]: treesize reduction 24, result has 41.5 percent of original size [2022-11-20 20:39:52,000 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 5 select indices, 5 select index equivalence classes, 6 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 4 case distinctions, treesize of input 34 treesize of output 40 [2022-11-20 20:39:52,510 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:39:52,510 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:39:52,538 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:39:53,404 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3649 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3649) |c_#length|)))) is different from true [2022-11-20 20:39:53,448 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:39:53,449 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:39:53,495 INFO L321 Elim1Store]: treesize reduction 12, result has 42.9 percent of original size [2022-11-20 20:39:53,496 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 20 treesize of output 22 [2022-11-20 20:39:53,623 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3650 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3650))))) is different from true [2022-11-20 20:39:53,652 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:39:53,652 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:39:53,672 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:39:53,672 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:39:53,698 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 25 proven. 227 refuted. 0 times theorem prover too weak. 52 trivial. 48 not checked. [2022-11-20 20:39:53,699 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:39:54,261 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [1804758873] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:39:54,261 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [251328077] [2022-11-20 20:39:54,261 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2022-11-20 20:39:54,261 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:39:54,261 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:39:54,262 INFO L229 MonitoredProcess]: Starting monitored process 77 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:39:54,265 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (77)] Waiting until timeout for monitored process [2022-11-20 20:39:59,540 INFO L228 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 10 check-sat command(s) [2022-11-20 20:39:59,541 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:39:59,552 INFO L263 TraceCheckSpWp]: Trace formula consists of 329 conjuncts, 80 conjunts are in the unsatisfiable core [2022-11-20 20:39:59,557 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:39:59,575 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:39:59,594 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:40:00,131 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3720 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3720) |c_#length|)))) is different from true [2022-11-20 20:40:00,164 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:00,165 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-20 20:40:00,186 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:00,186 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:00,661 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3721 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3721) |c_#length|)))) is different from true [2022-11-20 20:40:00,692 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:00,692 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-20 20:40:00,718 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:00,719 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:01,214 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3722 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3722))))) is different from true [2022-11-20 20:40:01,238 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:01,239 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-20 20:40:01,265 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:01,266 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:01,757 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3723 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3723))))) is different from true [2022-11-20 20:40:01,787 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:01,788 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-20 20:40:01,808 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:01,808 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:03,104 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3724 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3724) |c_#length|)))) is different from true [2022-11-20 20:40:03,132 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:03,135 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-20 20:40:03,168 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:03,168 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:03,692 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3725 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3725) |c_#length|)))) is different from true [2022-11-20 20:40:03,727 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:03,728 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-20 20:40:03,755 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:03,755 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:04,272 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3726 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3726) |c_#length|)))) is different from true [2022-11-20 20:40:04,302 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:04,303 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:04,323 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:04,323 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:04,350 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 21 proven. 201 refuted. 0 times theorem prover too weak. 46 trivial. 84 not checked. [2022-11-20 20:40:04,350 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:40:06,552 WARN L837 $PredicateComparison]: unable to prove that (let ((.cse0 (bvmul (_ bv4 32) |c_ULTIMATE.start_entry_point_~i~0#1|))) (let ((.cse1 (bvadd (_ bv4 32) .cse0 |c_ULTIMATE.start_entry_point_~array~0#1.offset|))) (and (or (forall ((|v_ldv_malloc_#res.base_302| (_ BitVec 32))) (not (= (_ bv0 1) (select |c_#valid| |v_ldv_malloc_#res.base_302|)))) (bvule (bvadd .cse0 |c_ULTIMATE.start_entry_point_~array~0#1.offset|) .cse1)) (forall ((|v_ldv_malloc_#res.base_302| (_ BitVec 32))) (or (forall ((v_ArrVal_3729 (_ BitVec 32))) (bvule .cse1 (select (store |c_#length| |v_ldv_malloc_#res.base_302| v_ArrVal_3729) |c_ULTIMATE.start_entry_point_~array~0#1.base|))) (not (= (_ bv0 1) (select |c_#valid| |v_ldv_malloc_#res.base_302|)))))))) is different from false [2022-11-20 20:40:06,561 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [251328077] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:40:06,562 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:40:06,562 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [31, 36, 32] total 74 [2022-11-20 20:40:06,562 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1362416070] [2022-11-20 20:40:06,562 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:40:06,563 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 75 states [2022-11-20 20:40:06,563 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:40:06,563 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 75 interpolants. [2022-11-20 20:40:06,564 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=327, Invalid=3267, Unknown=18, NotChecked=2394, Total=6006 [2022-11-20 20:40:06,564 INFO L87 Difference]: Start difference. First operand 219 states and 297 transitions. Second operand has 75 states, 73 states have (on average 1.8493150684931507) internal successors, (135), 70 states have internal predecessors, (135), 22 states have call successors, (22), 3 states have call predecessors, (22), 21 states have return successors, (27), 23 states have call predecessors, (27), 22 states have call successors, (27) [2022-11-20 20:40:12,927 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:40:12,927 INFO L93 Difference]: Finished difference Result 337 states and 457 transitions. [2022-11-20 20:40:12,928 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2022-11-20 20:40:12,928 INFO L78 Accepts]: Start accepts. Automaton has has 75 states, 73 states have (on average 1.8493150684931507) internal successors, (135), 70 states have internal predecessors, (135), 22 states have call successors, (22), 3 states have call predecessors, (22), 21 states have return successors, (27), 23 states have call predecessors, (27), 22 states have call successors, (27) Word has length 89 [2022-11-20 20:40:12,928 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:40:12,931 INFO L225 Difference]: With dead ends: 337 [2022-11-20 20:40:12,931 INFO L226 Difference]: Without dead ends: 337 [2022-11-20 20:40:12,933 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 291 GetRequests, 199 SyntacticMatches, 3 SemanticMatches, 89 ConstructedPredicates, 18 IntricatePredicates, 0 DeprecatedPredicates, 1636 ImplicationChecksByTransitivity, 16.1s TimeCoverageRelationStatistics Valid=460, Invalid=4850, Unknown=18, NotChecked=2862, Total=8190 [2022-11-20 20:40:12,933 INFO L413 NwaCegarLoop]: 31 mSDtfsCounter, 91 mSDsluCounter, 412 mSDsCounter, 0 mSdLazyCounter, 1160 mSolverCounterSat, 43 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 91 SdHoareTripleChecker+Valid, 443 SdHoareTripleChecker+Invalid, 3017 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 43 IncrementalHoareTripleChecker+Valid, 1160 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 1814 IncrementalHoareTripleChecker+Unchecked, 3.0s IncrementalHoareTripleChecker+Time [2022-11-20 20:40:12,934 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [91 Valid, 443 Invalid, 3017 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [43 Valid, 1160 Invalid, 0 Unknown, 1814 Unchecked, 3.0s Time] [2022-11-20 20:40:12,934 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 337 states. [2022-11-20 20:40:12,945 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 337 to 254. [2022-11-20 20:40:12,946 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 254 states, 201 states have (on average 1.0248756218905473) internal successors, (206), 203 states have internal predecessors, (206), 47 states have call successors, (47), 2 states have call predecessors, (47), 4 states have return successors, (93), 48 states have call predecessors, (93), 47 states have call successors, (93) [2022-11-20 20:40:12,948 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 254 states to 254 states and 346 transitions. [2022-11-20 20:40:12,948 INFO L78 Accepts]: Start accepts. Automaton has 254 states and 346 transitions. Word has length 89 [2022-11-20 20:40:12,949 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:40:12,949 INFO L495 AbstractCegarLoop]: Abstraction has 254 states and 346 transitions. [2022-11-20 20:40:12,949 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 75 states, 73 states have (on average 1.8493150684931507) internal successors, (135), 70 states have internal predecessors, (135), 22 states have call successors, (22), 3 states have call predecessors, (22), 21 states have return successors, (27), 23 states have call predecessors, (27), 22 states have call successors, (27) [2022-11-20 20:40:12,950 INFO L276 IsEmpty]: Start isEmpty. Operand 254 states and 346 transitions. [2022-11-20 20:40:12,951 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-11-20 20:40:12,951 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:40:12,952 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 9, 9, 9, 9, 9, 8, 8, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:40:12,969 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (75)] Forceful destruction successful, exit code 0 [2022-11-20 20:40:13,175 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (76)] Forceful destruction successful, exit code 0 [2022-11-20 20:40:13,380 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (77)] Forceful destruction successful, exit code 0 [2022-11-20 20:40:13,569 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 75 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,76 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt,77 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:40:13,569 INFO L420 AbstractCegarLoop]: === Iteration 29 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:40:13,570 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:40:13,570 INFO L85 PathProgramCache]: Analyzing trace with hash 1869958671, now seen corresponding path program 13 times [2022-11-20 20:40:13,570 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:40:13,570 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [205455365] [2022-11-20 20:40:13,571 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-20 20:40:13,571 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:40:13,571 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:40:13,572 INFO L229 MonitoredProcess]: Starting monitored process 78 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:40:13,573 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (78)] Waiting until timeout for monitored process [2022-11-20 20:40:14,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:40:14,049 INFO L263 TraceCheckSpWp]: Trace formula consists of 335 conjuncts, 81 conjunts are in the unsatisfiable core [2022-11-20 20:40:14,054 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:40:14,086 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:40:14,096 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:40:14,374 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3798 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3798))))) is different from true [2022-11-20 20:40:14,402 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:14,403 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:14,422 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:14,422 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:14,647 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3799 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3799) |c_#length|)))) is different from true [2022-11-20 20:40:14,676 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:14,676 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:14,701 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:14,702 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:14,946 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3800 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3800) |c_#length|)))) is different from true [2022-11-20 20:40:14,969 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:14,970 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:14,995 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:14,995 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:15,450 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3801 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3801) |c_#length|)))) is different from true [2022-11-20 20:40:15,479 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:15,479 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:15,504 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:15,505 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:15,761 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3802 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3802) |c_#length|)))) is different from true [2022-11-20 20:40:15,794 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:15,795 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:15,813 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:15,813 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:16,091 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3803 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3803))))) is different from true [2022-11-20 20:40:16,115 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:16,115 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:16,134 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:16,135 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:16,428 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3804 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3804))))) is different from true [2022-11-20 20:40:16,452 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:16,453 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:16,472 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:16,473 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:16,786 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3805 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3805) |c_#length|)))) is different from true [2022-11-20 20:40:16,831 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:16,832 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:16,855 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:16,856 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:16,972 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 9 proven. 183 refuted. 0 times theorem prover too weak. 72 trivial. 88 not checked. [2022-11-20 20:40:16,973 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:40:17,909 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:40:17,909 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [205455365] [2022-11-20 20:40:17,909 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [205455365] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:40:17,909 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1141689083] [2022-11-20 20:40:17,909 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-20 20:40:17,909 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:40:17,909 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:40:17,910 INFO L229 MonitoredProcess]: Starting monitored process 79 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:40:17,912 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (79)] Waiting until timeout for monitored process [2022-11-20 20:40:18,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:40:18,810 INFO L263 TraceCheckSpWp]: Trace formula consists of 335 conjuncts, 81 conjunts are in the unsatisfiable core [2022-11-20 20:40:18,815 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:40:18,841 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:40:18,856 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:40:18,984 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3877 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3877) |c_#length|)))) is different from true [2022-11-20 20:40:19,009 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:19,010 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:19,029 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:19,029 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:19,151 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3878 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3878) |c_#length|)))) is different from true [2022-11-20 20:40:19,181 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:19,182 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:19,209 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:19,210 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:19,328 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3879 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3879) |c_#length|)))) is different from true [2022-11-20 20:40:19,356 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:19,357 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:19,376 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:19,377 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:19,658 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3880 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3880))))) is different from true [2022-11-20 20:40:19,685 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:19,686 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:19,713 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:19,713 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:19,842 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3881 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3881))))) is different from true [2022-11-20 20:40:19,864 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:19,865 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:19,890 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:19,890 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:20,021 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3882 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3882) |c_#length|)))) is different from true [2022-11-20 20:40:20,046 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:20,046 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:20,066 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:20,066 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:20,189 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3883 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3883) |c_#length|)))) is different from true [2022-11-20 20:40:20,214 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:20,215 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:20,240 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:20,240 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:20,360 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3884 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3884))))) is different from true [2022-11-20 20:40:20,388 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:20,389 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:20,408 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:20,408 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:20,434 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 9 proven. 183 refuted. 0 times theorem prover too weak. 72 trivial. 88 not checked. [2022-11-20 20:40:20,434 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:40:23,049 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [1141689083] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:40:23,049 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1215090499] [2022-11-20 20:40:23,049 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-20 20:40:23,049 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:40:23,049 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:40:23,050 INFO L229 MonitoredProcess]: Starting monitored process 80 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:40:23,053 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (80)] Waiting until timeout for monitored process [2022-11-20 20:40:23,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:40:23,493 INFO L263 TraceCheckSpWp]: Trace formula consists of 335 conjuncts, 85 conjunts are in the unsatisfiable core [2022-11-20 20:40:23,498 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:40:23,512 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:40:23,527 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:40:23,665 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3956 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3956))) (exists ((v_ArrVal_3957 (_ BitVec 1))) (= (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_3957) |c_#valid|)))) is different from true [2022-11-20 20:40:23,701 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:23,701 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:23,746 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:40:23,746 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:40:23,888 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3958 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3958) |c_#length|)))) is different from true [2022-11-20 20:40:23,913 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:23,914 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:23,933 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:23,933 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:24,208 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:24,209 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:24,259 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:40:24,259 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:40:25,283 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:25,284 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:25,375 INFO L321 Elim1Store]: treesize reduction 44, result has 34.3 percent of original size [2022-11-20 20:40:25,375 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 26 treesize of output 43 [2022-11-20 20:40:26,035 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3963 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3963) |c_#length|)))) is different from true [2022-11-20 20:40:26,072 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:26,073 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:26,142 INFO L321 Elim1Store]: treesize reduction 18, result has 41.9 percent of original size [2022-11-20 20:40:26,142 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 3 case distinctions, treesize of input 27 treesize of output 31 [2022-11-20 20:40:26,267 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3964 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3964))))) is different from true [2022-11-20 20:40:26,299 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:26,300 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:26,319 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:26,320 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:26,607 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:26,608 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:26,658 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:40:26,658 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:40:27,162 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_3967 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_3967) |c_#length|)))) is different from true [2022-11-20 20:40:27,206 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:27,207 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:27,257 INFO L321 Elim1Store]: treesize reduction 12, result has 42.9 percent of original size [2022-11-20 20:40:27,257 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 20 treesize of output 22 [2022-11-20 20:40:27,274 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 9 proven. 195 refuted. 0 times theorem prover too weak. 78 trivial. 70 not checked. [2022-11-20 20:40:27,275 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:40:27,929 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1215090499] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:40:27,929 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:40:27,929 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [31, 31, 29] total 52 [2022-11-20 20:40:27,929 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1097444404] [2022-11-20 20:40:27,930 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:40:27,930 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 53 states [2022-11-20 20:40:27,930 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:40:27,931 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 53 interpolants. [2022-11-20 20:40:27,931 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=169, Invalid=1016, Unknown=21, NotChecked=1764, Total=2970 [2022-11-20 20:40:27,931 INFO L87 Difference]: Start difference. First operand 254 states and 346 transitions. Second operand has 53 states, 51 states have (on average 2.0980392156862746) internal successors, (107), 52 states have internal predecessors, (107), 14 states have call successors, (14), 2 states have call predecessors, (14), 24 states have return successors, (27), 15 states have call predecessors, (27), 14 states have call successors, (27) [2022-11-20 20:40:33,593 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:40:33,593 INFO L93 Difference]: Finished difference Result 339 states and 459 transitions. [2022-11-20 20:40:33,594 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2022-11-20 20:40:33,594 INFO L78 Accepts]: Start accepts. Automaton has has 53 states, 51 states have (on average 2.0980392156862746) internal successors, (107), 52 states have internal predecessors, (107), 14 states have call successors, (14), 2 states have call predecessors, (14), 24 states have return successors, (27), 15 states have call predecessors, (27), 14 states have call successors, (27) Word has length 89 [2022-11-20 20:40:33,594 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:40:33,597 INFO L225 Difference]: With dead ends: 339 [2022-11-20 20:40:33,597 INFO L226 Difference]: Without dead ends: 339 [2022-11-20 20:40:33,599 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 275 GetRequests, 216 SyntacticMatches, 4 SemanticMatches, 55 ConstructedPredicates, 21 IntricatePredicates, 0 DeprecatedPredicates, 239 ImplicationChecksByTransitivity, 10.1s TimeCoverageRelationStatistics Valid=178, Invalid=1145, Unknown=21, NotChecked=1848, Total=3192 [2022-11-20 20:40:33,599 INFO L413 NwaCegarLoop]: 33 mSDtfsCounter, 36 mSDsluCounter, 393 mSDsCounter, 0 mSdLazyCounter, 754 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 426 SdHoareTripleChecker+Invalid, 2521 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 754 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 1747 IncrementalHoareTripleChecker+Unchecked, 2.1s IncrementalHoareTripleChecker+Time [2022-11-20 20:40:33,600 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [36 Valid, 426 Invalid, 2521 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 754 Invalid, 0 Unknown, 1747 Unchecked, 2.1s Time] [2022-11-20 20:40:33,601 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 339 states. [2022-11-20 20:40:33,612 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 339 to 279. [2022-11-20 20:40:33,613 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 279 states, 221 states have (on average 1.0226244343891402) internal successors, (226), 223 states have internal predecessors, (226), 52 states have call successors, (52), 2 states have call predecessors, (52), 4 states have return successors, (103), 53 states have call predecessors, (103), 52 states have call successors, (103) [2022-11-20 20:40:33,615 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 279 states to 279 states and 381 transitions. [2022-11-20 20:40:33,615 INFO L78 Accepts]: Start accepts. Automaton has 279 states and 381 transitions. Word has length 89 [2022-11-20 20:40:33,616 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:40:33,616 INFO L495 AbstractCegarLoop]: Abstraction has 279 states and 381 transitions. [2022-11-20 20:40:33,616 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 53 states, 51 states have (on average 2.0980392156862746) internal successors, (107), 52 states have internal predecessors, (107), 14 states have call successors, (14), 2 states have call predecessors, (14), 24 states have return successors, (27), 15 states have call predecessors, (27), 14 states have call successors, (27) [2022-11-20 20:40:33,616 INFO L276 IsEmpty]: Start isEmpty. Operand 279 states and 381 transitions. [2022-11-20 20:40:33,618 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-11-20 20:40:33,618 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:40:33,618 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 9, 9, 9, 9, 8, 8, 8, 2, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:40:33,637 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (78)] Forceful destruction successful, exit code 0 [2022-11-20 20:40:33,843 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (79)] Forceful destruction successful, exit code 0 [2022-11-20 20:40:34,044 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (80)] Forceful destruction successful, exit code 0 [2022-11-20 20:40:34,237 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 78 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,79 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt,80 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:40:34,237 INFO L420 AbstractCegarLoop]: === Iteration 30 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:40:34,237 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:40:34,237 INFO L85 PathProgramCache]: Analyzing trace with hash 1870882192, now seen corresponding path program 14 times [2022-11-20 20:40:34,238 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:40:34,238 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [885487081] [2022-11-20 20:40:34,238 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-11-20 20:40:34,238 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:40:34,238 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:40:34,239 INFO L229 MonitoredProcess]: Starting monitored process 81 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:40:34,240 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (81)] Waiting until timeout for monitored process [2022-11-20 20:40:34,773 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-11-20 20:40:34,773 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:40:34,787 INFO L263 TraceCheckSpWp]: Trace formula consists of 329 conjuncts, 76 conjunts are in the unsatisfiable core [2022-11-20 20:40:34,791 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:40:34,824 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:40:34,839 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:40:35,110 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4037 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4037))))) is different from true [2022-11-20 20:40:35,135 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:35,135 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:35,154 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:35,155 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:35,377 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_4038 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4038) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:40:35,418 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:35,418 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:35,438 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:35,438 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:35,668 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4039 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4039))))) is different from true [2022-11-20 20:40:35,696 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:35,697 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:35,722 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:35,723 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:36,178 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4040 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4040) |c_#length|)))) is different from true [2022-11-20 20:40:36,240 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:36,241 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:36,286 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:36,286 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:36,682 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4041 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4041) |c_#length|)))) is different from true [2022-11-20 20:40:36,706 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:36,707 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:36,726 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:36,727 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:37,014 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4042 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4042) |c_#length|)))) is different from true [2022-11-20 20:40:37,039 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:37,040 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:37,066 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:37,066 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:37,393 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4043 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4043) |c_#length|)))) is different from true [2022-11-20 20:40:37,417 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:37,417 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:37,442 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:37,442 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:37,818 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 9 proven. 203 refuted. 0 times theorem prover too weak. 56 trivial. 84 not checked. [2022-11-20 20:40:37,818 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:40:43,411 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:40:43,411 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [885487081] [2022-11-20 20:40:43,411 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [885487081] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:40:43,412 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1138423889] [2022-11-20 20:40:43,412 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-11-20 20:40:43,412 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:40:43,412 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:40:43,413 INFO L229 MonitoredProcess]: Starting monitored process 82 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:40:43,415 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (82)] Waiting until timeout for monitored process [2022-11-20 20:40:44,331 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-11-20 20:40:44,331 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:40:44,363 INFO L263 TraceCheckSpWp]: Trace formula consists of 329 conjuncts, 77 conjunts are in the unsatisfiable core [2022-11-20 20:40:44,367 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:40:44,383 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:40:44,392 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:40:44,528 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4113 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4113) |c_#length|)))) is different from true [2022-11-20 20:40:44,552 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:44,553 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:44,572 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:44,573 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:44,701 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4114 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4114) |c_#length|)))) is different from true [2022-11-20 20:40:44,725 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:44,726 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:44,758 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:44,759 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:44,877 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4115 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4115) |c_#length|)))) is different from true [2022-11-20 20:40:44,902 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:44,903 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:44,923 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:44,923 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:45,239 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4116 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4116) |c_#length|)))) is different from true [2022-11-20 20:40:45,274 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:45,275 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:45,300 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:45,300 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:45,447 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4117 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4117) |c_#length|)))) is different from true [2022-11-20 20:40:45,475 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:45,476 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:45,507 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:45,507 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:45,645 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4118 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4118) |c_#length|)))) is different from true [2022-11-20 20:40:45,670 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:45,671 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:45,690 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:45,690 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:45,819 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4119 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4119) |c_#length|)))) is different from true [2022-11-20 20:40:45,850 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:45,851 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:45,884 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:45,885 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:46,019 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 9 proven. 203 refuted. 0 times theorem prover too weak. 56 trivial. 84 not checked. [2022-11-20 20:40:46,020 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:40:53,811 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [1138423889] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:40:53,811 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [585531998] [2022-11-20 20:40:53,811 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-11-20 20:40:53,811 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:40:53,811 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:40:53,814 INFO L229 MonitoredProcess]: Starting monitored process 83 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:40:53,816 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (83)] Waiting until timeout for monitored process [2022-11-20 20:40:54,239 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-11-20 20:40:54,239 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:40:54,247 INFO L263 TraceCheckSpWp]: Trace formula consists of 329 conjuncts, 76 conjunts are in the unsatisfiable core [2022-11-20 20:40:54,251 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:40:54,266 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:40:54,279 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:40:54,409 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4189 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4189))))) is different from true [2022-11-20 20:40:54,442 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:54,443 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:54,462 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:54,462 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:54,587 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4190 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4190) |c_#length|)))) is different from true [2022-11-20 20:40:54,618 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:54,618 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:54,637 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:54,637 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:54,750 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4191 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4191))))) is different from true [2022-11-20 20:40:54,777 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:54,778 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:54,797 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:54,797 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:55,119 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4192 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4192) |c_#length|)))) is different from true [2022-11-20 20:40:55,148 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:55,149 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:55,168 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:55,169 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:55,290 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4193 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4193))))) is different from true [2022-11-20 20:40:55,325 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:55,325 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:55,355 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:40:55,356 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:40:55,674 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:55,674 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:55,718 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:40:55,719 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:40:56,216 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4196 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4196) |c_#length|)))) is different from true [2022-11-20 20:40:56,256 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:40:56,256 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:40:56,300 INFO L321 Elim1Store]: treesize reduction 12, result has 42.9 percent of original size [2022-11-20 20:40:56,300 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 20 treesize of output 22 [2022-11-20 20:40:56,429 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 17 proven. 211 refuted. 0 times theorem prover too weak. 46 trivial. 78 not checked. [2022-11-20 20:40:56,429 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:41:05,874 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [585531998] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:41:05,874 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:41:05,875 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [30, 30, 31] total 47 [2022-11-20 20:41:05,875 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1169988678] [2022-11-20 20:41:05,875 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:41:05,875 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 48 states [2022-11-20 20:41:05,875 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:41:05,876 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 48 interpolants. [2022-11-20 20:41:05,876 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=207, Invalid=1105, Unknown=28, NotChecked=1740, Total=3080 [2022-11-20 20:41:05,877 INFO L87 Difference]: Start difference. First operand 279 states and 381 transitions. Second operand has 48 states, 46 states have (on average 2.152173913043478) internal successors, (99), 47 states have internal predecessors, (99), 12 states have call successors, (12), 3 states have call predecessors, (12), 24 states have return successors, (25), 12 states have call predecessors, (25), 12 states have call successors, (25) [2022-11-20 20:41:10,732 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:41:10,732 INFO L93 Difference]: Finished difference Result 375 states and 511 transitions. [2022-11-20 20:41:10,732 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2022-11-20 20:41:10,732 INFO L78 Accepts]: Start accepts. Automaton has has 48 states, 46 states have (on average 2.152173913043478) internal successors, (99), 47 states have internal predecessors, (99), 12 states have call successors, (12), 3 states have call predecessors, (12), 24 states have return successors, (25), 12 states have call predecessors, (25), 12 states have call successors, (25) Word has length 89 [2022-11-20 20:41:10,733 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:41:10,734 INFO L225 Difference]: With dead ends: 375 [2022-11-20 20:41:10,734 INFO L226 Difference]: Without dead ends: 375 [2022-11-20 20:41:10,734 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 302 GetRequests, 245 SyntacticMatches, 1 SemanticMatches, 56 ConstructedPredicates, 20 IntricatePredicates, 0 DeprecatedPredicates, 207 ImplicationChecksByTransitivity, 25.8s TimeCoverageRelationStatistics Valid=220, Invalid=1238, Unknown=28, NotChecked=1820, Total=3306 [2022-11-20 20:41:10,735 INFO L413 NwaCegarLoop]: 34 mSDtfsCounter, 26 mSDsluCounter, 387 mSDsCounter, 0 mSdLazyCounter, 846 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 26 SdHoareTripleChecker+Valid, 421 SdHoareTripleChecker+Invalid, 2296 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 846 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 1428 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2022-11-20 20:41:10,735 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [26 Valid, 421 Invalid, 2296 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 846 Invalid, 0 Unknown, 1428 Unchecked, 2.4s Time] [2022-11-20 20:41:10,736 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 375 states. [2022-11-20 20:41:10,746 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 375 to 264. [2022-11-20 20:41:10,747 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 264 states, 209 states have (on average 1.0239234449760766) internal successors, (214), 211 states have internal predecessors, (214), 49 states have call successors, (49), 2 states have call predecessors, (49), 4 states have return successors, (97), 50 states have call predecessors, (97), 49 states have call successors, (97) [2022-11-20 20:41:10,749 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 264 states to 264 states and 360 transitions. [2022-11-20 20:41:10,749 INFO L78 Accepts]: Start accepts. Automaton has 264 states and 360 transitions. Word has length 89 [2022-11-20 20:41:10,750 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:41:10,750 INFO L495 AbstractCegarLoop]: Abstraction has 264 states and 360 transitions. [2022-11-20 20:41:10,750 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 48 states, 46 states have (on average 2.152173913043478) internal successors, (99), 47 states have internal predecessors, (99), 12 states have call successors, (12), 3 states have call predecessors, (12), 24 states have return successors, (25), 12 states have call predecessors, (25), 12 states have call successors, (25) [2022-11-20 20:41:10,750 INFO L276 IsEmpty]: Start isEmpty. Operand 264 states and 360 transitions. [2022-11-20 20:41:10,752 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-11-20 20:41:10,752 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:41:10,752 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 9, 9, 9, 9, 8, 8, 8, 2, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:41:10,775 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (81)] Forceful destruction successful, exit code 0 [2022-11-20 20:41:10,977 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (83)] Forceful destruction successful, exit code 0 [2022-11-20 20:41:11,176 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (82)] Forceful destruction successful, exit code 0 [2022-11-20 20:41:11,370 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 81 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,83 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true,82 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt [2022-11-20 20:41:11,370 INFO L420 AbstractCegarLoop]: === Iteration 31 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:41:11,371 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:41:11,371 INFO L85 PathProgramCache]: Analyzing trace with hash -140145170, now seen corresponding path program 15 times [2022-11-20 20:41:11,371 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:41:11,371 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2052529459] [2022-11-20 20:41:11,371 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-20 20:41:11,371 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:41:11,371 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:41:11,373 INFO L229 MonitoredProcess]: Starting monitored process 84 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:41:11,374 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (84)] Waiting until timeout for monitored process [2022-11-20 20:41:12,045 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 10 check-sat command(s) [2022-11-20 20:41:12,046 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:41:12,059 INFO L263 TraceCheckSpWp]: Trace formula consists of 329 conjuncts, 74 conjunts are in the unsatisfiable core [2022-11-20 20:41:12,063 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:41:12,099 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:41:12,110 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:41:12,382 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4266 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4266))))) is different from true [2022-11-20 20:41:12,409 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:41:12,410 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:41:12,435 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:41:12,435 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:41:12,700 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| |c_ldv_malloc_#in~size|) |c_#length|)) is different from true [2022-11-20 20:41:12,746 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-20 20:41:12,746 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-11-20 20:41:13,245 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4268 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4268) |c_#length|)))) is different from true [2022-11-20 20:41:13,276 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:41:13,321 INFO L321 Elim1Store]: treesize reduction 19, result has 32.1 percent of original size [2022-11-20 20:41:13,321 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 24 treesize of output 31 [2022-11-20 20:41:13,353 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:41:13,353 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:41:14,005 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_4269 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4269) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:41:14,041 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:41:14,042 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 18 [2022-11-20 20:41:14,072 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:41:14,072 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:41:14,746 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4270 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4270) |c_#length|)))) is different from true [2022-11-20 20:41:14,772 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:41:14,773 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 18 [2022-11-20 20:41:14,793 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:41:14,793 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:41:15,192 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4271 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4271))))) is different from true [2022-11-20 20:41:15,227 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:41:15,228 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 18 [2022-11-20 20:41:15,248 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:41:15,248 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:41:15,777 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_4272 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4272) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:41:15,804 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:41:15,805 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:41:15,830 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:41:15,830 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:41:15,959 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 29 proven. 203 refuted. 0 times theorem prover too weak. 36 trivial. 84 not checked. [2022-11-20 20:41:15,960 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:41:20,893 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:41:20,894 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2052529459] [2022-11-20 20:41:20,894 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2052529459] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:41:20,894 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [898283806] [2022-11-20 20:41:20,894 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-20 20:41:20,894 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:41:20,894 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:41:20,895 INFO L229 MonitoredProcess]: Starting monitored process 85 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:41:20,897 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (85)] Waiting until timeout for monitored process [2022-11-20 20:41:22,142 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 10 check-sat command(s) [2022-11-20 20:41:22,142 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:41:22,175 INFO L263 TraceCheckSpWp]: Trace formula consists of 329 conjuncts, 86 conjunts are in the unsatisfiable core [2022-11-20 20:41:22,180 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:41:22,195 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:41:22,209 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:41:22,340 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4343 (_ BitVec 1))) (= (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_4343) |c_#valid|)) (exists ((v_ArrVal_4342 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4342) |c_#length|)))) is different from true [2022-11-20 20:41:22,416 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:41:22,416 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:41:22,423 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:41:22,829 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-20 20:41:22,829 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-11-20 20:41:22,860 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:41:22,860 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:41:23,548 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-20 20:41:23,548 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-11-20 20:41:23,583 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:41:23,583 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:41:24,413 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-20 20:41:24,413 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-11-20 20:41:25,687 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:41:25,687 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:41:25,739 INFO L321 Elim1Store]: treesize reduction 19, result has 32.1 percent of original size [2022-11-20 20:41:25,739 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 17 treesize of output 26 [2022-11-20 20:41:26,387 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4351 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4351))))) is different from true [2022-11-20 20:41:26,428 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:41:26,429 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:41:26,448 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:41:26,449 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:41:26,723 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_4352 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4352) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:41:26,752 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:41:26,752 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:41:26,772 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:41:26,772 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:41:26,798 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 26 proven. 224 refuted. 0 times theorem prover too weak. 42 trivial. 60 not checked. [2022-11-20 20:41:26,798 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:41:29,525 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [898283806] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:41:29,525 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1957101832] [2022-11-20 20:41:29,525 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-20 20:41:29,525 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:41:29,525 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:41:29,526 INFO L229 MonitoredProcess]: Starting monitored process 86 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:41:29,530 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (86)] Waiting until timeout for monitored process [2022-11-20 20:41:31,298 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 10 check-sat command(s) [2022-11-20 20:41:31,298 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:41:31,308 INFO L263 TraceCheckSpWp]: Trace formula consists of 329 conjuncts, 75 conjunts are in the unsatisfiable core [2022-11-20 20:41:31,311 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:41:31,329 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:41:31,339 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:41:31,484 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4422 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4422) |c_#length|)))) is different from true [2022-11-20 20:41:31,514 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:41:31,514 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:41:31,534 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:41:31,534 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:41:31,654 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4423 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4423) |c_#length|)))) is different from true [2022-11-20 20:41:31,681 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:41:31,681 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:41:31,701 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:41:31,701 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:41:31,823 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4424 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4424) |c_#length|)))) is different from true [2022-11-20 20:41:31,852 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:41:31,853 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:41:31,872 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:41:31,873 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:41:32,426 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4425 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4425))))) is different from true [2022-11-20 20:41:32,455 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:41:32,456 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:41:32,481 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:41:32,481 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:41:33,023 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4426 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4426))))) is different from true [2022-11-20 20:41:33,047 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:41:33,048 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:41:33,076 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:41:33,077 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:41:33,410 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4427 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4427) |c_#length|)))) is different from true [2022-11-20 20:41:33,435 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:41:33,436 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:41:33,462 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:41:33,462 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:41:33,597 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4428 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4428) |c_#length|)))) is different from true [2022-11-20 20:41:33,626 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:41:33,627 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:41:33,646 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:41:33,647 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:41:33,672 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 23 proven. 199 refuted. 0 times theorem prover too weak. 46 trivial. 84 not checked. [2022-11-20 20:41:33,672 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:41:36,377 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1957101832] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:41:36,378 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:41:36,378 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [35, 34, 32] total 68 [2022-11-20 20:41:36,378 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [434525422] [2022-11-20 20:41:36,378 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:41:36,379 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 69 states [2022-11-20 20:41:36,379 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:41:36,379 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 69 interpolants. [2022-11-20 20:41:36,380 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=233, Invalid=2678, Unknown=19, NotChecked=2040, Total=4970 [2022-11-20 20:41:36,380 INFO L87 Difference]: Start difference. First operand 264 states and 360 transitions. Second operand has 69 states, 67 states have (on average 1.955223880597015) internal successors, (131), 65 states have internal predecessors, (131), 20 states have call successors, (20), 3 states have call predecessors, (20), 20 states have return successors, (27), 23 states have call predecessors, (27), 20 states have call successors, (27) [2022-11-20 20:41:43,199 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:41:43,199 INFO L93 Difference]: Finished difference Result 374 states and 506 transitions. [2022-11-20 20:41:43,200 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-11-20 20:41:43,200 INFO L78 Accepts]: Start accepts. Automaton has has 69 states, 67 states have (on average 1.955223880597015) internal successors, (131), 65 states have internal predecessors, (131), 20 states have call successors, (20), 3 states have call predecessors, (20), 20 states have return successors, (27), 23 states have call predecessors, (27), 20 states have call successors, (27) Word has length 89 [2022-11-20 20:41:43,200 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:41:43,203 INFO L225 Difference]: With dead ends: 374 [2022-11-20 20:41:43,203 INFO L226 Difference]: Without dead ends: 374 [2022-11-20 20:41:43,204 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 283 GetRequests, 200 SyntacticMatches, 4 SemanticMatches, 79 ConstructedPredicates, 17 IntricatePredicates, 0 DeprecatedPredicates, 1110 ImplicationChecksByTransitivity, 18.7s TimeCoverageRelationStatistics Valid=302, Invalid=3779, Unknown=19, NotChecked=2380, Total=6480 [2022-11-20 20:41:43,205 INFO L413 NwaCegarLoop]: 34 mSDtfsCounter, 40 mSDsluCounter, 560 mSDsCounter, 0 mSdLazyCounter, 1430 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 40 SdHoareTripleChecker+Valid, 594 SdHoareTripleChecker+Invalid, 3177 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 1430 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 1712 IncrementalHoareTripleChecker+Unchecked, 3.8s IncrementalHoareTripleChecker+Time [2022-11-20 20:41:43,205 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [40 Valid, 594 Invalid, 3177 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 1430 Invalid, 0 Unknown, 1712 Unchecked, 3.8s Time] [2022-11-20 20:41:43,206 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 374 states. [2022-11-20 20:41:43,216 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 374 to 254. [2022-11-20 20:41:43,216 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 254 states, 201 states have (on average 1.0248756218905473) internal successors, (206), 203 states have internal predecessors, (206), 47 states have call successors, (47), 2 states have call predecessors, (47), 4 states have return successors, (93), 48 states have call predecessors, (93), 47 states have call successors, (93) [2022-11-20 20:41:43,218 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 254 states to 254 states and 346 transitions. [2022-11-20 20:41:43,218 INFO L78 Accepts]: Start accepts. Automaton has 254 states and 346 transitions. Word has length 89 [2022-11-20 20:41:43,219 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:41:43,219 INFO L495 AbstractCegarLoop]: Abstraction has 254 states and 346 transitions. [2022-11-20 20:41:43,219 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 69 states, 67 states have (on average 1.955223880597015) internal successors, (131), 65 states have internal predecessors, (131), 20 states have call successors, (20), 3 states have call predecessors, (20), 20 states have return successors, (27), 23 states have call predecessors, (27), 20 states have call successors, (27) [2022-11-20 20:41:43,219 INFO L276 IsEmpty]: Start isEmpty. Operand 254 states and 346 transitions. [2022-11-20 20:41:43,221 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-11-20 20:41:43,221 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:41:43,221 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 9, 9, 9, 9, 8, 8, 7, 3, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:41:43,238 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (84)] Forceful destruction successful, exit code 0 [2022-11-20 20:41:43,447 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (86)] Forceful destruction successful, exit code 0 [2022-11-20 20:41:43,645 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (85)] Forceful destruction successful, exit code 0 [2022-11-20 20:41:43,838 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 84 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,86 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true,85 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt [2022-11-20 20:41:43,838 INFO L420 AbstractCegarLoop]: === Iteration 32 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:41:43,838 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:41:43,838 INFO L85 PathProgramCache]: Analyzing trace with hash 1104619311, now seen corresponding path program 16 times [2022-11-20 20:41:43,839 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:41:43,839 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1311512844] [2022-11-20 20:41:43,839 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-20 20:41:43,839 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:41:43,839 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:41:43,840 INFO L229 MonitoredProcess]: Starting monitored process 87 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:41:43,841 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (87)] Waiting until timeout for monitored process [2022-11-20 20:41:44,279 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-20 20:41:44,279 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:41:44,292 INFO L263 TraceCheckSpWp]: Trace formula consists of 323 conjuncts, 75 conjunts are in the unsatisfiable core [2022-11-20 20:41:44,295 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:41:44,328 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:41:44,341 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:41:44,615 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_4496 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4496) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:41:44,640 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:41:44,640 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:41:44,660 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:41:44,660 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:41:44,902 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4497 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4497))))) is different from true [2022-11-20 20:41:44,925 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:41:44,926 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:41:44,945 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:41:44,945 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:41:45,200 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4498 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4498) |c_#length|)))) is different from true [2022-11-20 20:41:45,224 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:41:45,225 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:41:45,244 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:41:45,245 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:41:45,706 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4499 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4499) |c_#length|)))) is different from true [2022-11-20 20:41:45,743 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:41:45,744 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:41:45,769 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:41:45,769 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:41:46,474 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4500 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4500))))) is different from true [2022-11-20 20:41:46,497 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:41:46,497 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:41:46,522 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:41:46,523 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:41:46,821 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_4501 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4501) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:41:46,865 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:41:46,866 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:41:46,884 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:41:46,884 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:41:46,991 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 9 proven. 187 refuted. 0 times theorem prover too weak. 78 trivial. 78 not checked. [2022-11-20 20:41:46,991 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:41:49,815 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:41:49,815 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1311512844] [2022-11-20 20:41:49,815 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1311512844] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:41:49,815 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1667233141] [2022-11-20 20:41:49,815 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-20 20:41:49,816 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:41:49,816 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:41:49,817 INFO L229 MonitoredProcess]: Starting monitored process 88 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:41:49,819 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (88)] Waiting until timeout for monitored process [2022-11-20 20:41:50,749 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-20 20:41:50,750 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:41:50,778 INFO L263 TraceCheckSpWp]: Trace formula consists of 323 conjuncts, 75 conjunts are in the unsatisfiable core [2022-11-20 20:41:50,783 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:41:50,801 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:41:50,819 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:41:50,952 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4569 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4569) |c_#length|)))) is different from true [2022-11-20 20:41:50,990 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:41:50,991 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:41:51,016 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:41:51,016 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:41:51,134 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_4570 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4570))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:41:51,159 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:41:51,159 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:41:51,184 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:41:51,185 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:41:51,305 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4571 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4571))))) is different from true [2022-11-20 20:41:51,334 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:41:51,335 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:41:51,355 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:41:51,355 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:41:51,628 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4572 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4572) |c_#length|)))) is different from true [2022-11-20 20:41:51,648 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:41:51,649 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:41:51,667 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:41:51,667 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:41:52,062 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_4573 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4573) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:41:52,086 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:41:52,086 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:41:52,111 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:41:52,111 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:41:52,230 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4574 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4574) |c_#length|)))) is different from true [2022-11-20 20:41:52,283 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:41:52,284 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:41:52,309 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:41:52,309 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:41:52,329 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 9 proven. 187 refuted. 0 times theorem prover too weak. 78 trivial. 78 not checked. [2022-11-20 20:41:52,329 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:41:55,020 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [1667233141] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:41:55,020 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1213024913] [2022-11-20 20:41:55,020 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-20 20:41:55,021 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:41:55,021 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:41:55,022 INFO L229 MonitoredProcess]: Starting monitored process 89 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:41:55,024 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (89)] Waiting until timeout for monitored process [2022-11-20 20:41:55,437 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-20 20:41:55,437 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:41:55,445 INFO L263 TraceCheckSpWp]: Trace formula consists of 323 conjuncts, 82 conjunts are in the unsatisfiable core [2022-11-20 20:41:55,449 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:41:55,466 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:41:55,477 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:41:55,614 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4642 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4642) |c_#length|)) (exists ((v_ArrVal_4643 (_ BitVec 1))) (= (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_4643) |c_#valid|)))) is different from true [2022-11-20 20:41:55,702 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:41:55,702 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:41:55,730 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:41:55,858 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_4644 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4644))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4645 (_ BitVec 1))) (= |c_#valid| (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_4645))))) is different from true [2022-11-20 20:41:55,945 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:41:55,946 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:41:55,958 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:41:56,083 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4646 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4646) |c_#length|)) (exists ((v_ArrVal_4647 (_ BitVec 1))) (= |c_#valid| (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_4647))))) is different from true [2022-11-20 20:41:56,167 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:41:56,168 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:41:56,175 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:41:56,601 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:41:56,602 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:41:56,647 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:41:56,647 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:41:57,985 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:41:57,986 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:41:58,086 INFO L321 Elim1Store]: treesize reduction 44, result has 34.3 percent of original size [2022-11-20 20:41:58,087 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 26 treesize of output 43 [2022-11-20 20:41:58,748 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4652 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4652) |c_#length|)))) is different from true [2022-11-20 20:41:58,797 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:41:58,797 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:41:58,871 INFO L321 Elim1Store]: treesize reduction 18, result has 41.9 percent of original size [2022-11-20 20:41:58,872 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 3 case distinctions, treesize of input 27 treesize of output 31 [2022-11-20 20:41:58,894 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 9 proven. 203 refuted. 0 times theorem prover too weak. 80 trivial. 60 not checked. [2022-11-20 20:41:58,894 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:41:59,501 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1213024913] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:41:59,501 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:41:59,502 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [27, 27, 23] total 44 [2022-11-20 20:41:59,502 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [821813525] [2022-11-20 20:41:59,502 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:41:59,503 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 45 states [2022-11-20 20:41:59,503 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:41:59,503 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 45 interpolants. [2022-11-20 20:41:59,504 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=144, Invalid=833, Unknown=17, NotChecked=1168, Total=2162 [2022-11-20 20:41:59,504 INFO L87 Difference]: Start difference. First operand 254 states and 346 transitions. Second operand has 45 states, 43 states have (on average 2.3488372093023258) internal successors, (101), 44 states have internal predecessors, (101), 14 states have call successors, (14), 2 states have call predecessors, (14), 19 states have return successors, (24), 17 states have call predecessors, (24), 14 states have call successors, (24) [2022-11-20 20:42:02,563 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:42:02,563 INFO L93 Difference]: Finished difference Result 326 states and 444 transitions. [2022-11-20 20:42:02,564 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2022-11-20 20:42:02,564 INFO L78 Accepts]: Start accepts. Automaton has has 45 states, 43 states have (on average 2.3488372093023258) internal successors, (101), 44 states have internal predecessors, (101), 14 states have call successors, (14), 2 states have call predecessors, (14), 19 states have return successors, (24), 17 states have call predecessors, (24), 14 states have call successors, (24) Word has length 89 [2022-11-20 20:42:02,564 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:42:02,565 INFO L225 Difference]: With dead ends: 326 [2022-11-20 20:42:02,566 INFO L226 Difference]: Without dead ends: 326 [2022-11-20 20:42:02,566 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 275 GetRequests, 225 SyntacticMatches, 3 SemanticMatches, 47 ConstructedPredicates, 16 IntricatePredicates, 0 DeprecatedPredicates, 167 ImplicationChecksByTransitivity, 9.5s TimeCoverageRelationStatistics Valid=153, Invalid=950, Unknown=17, NotChecked=1232, Total=2352 [2022-11-20 20:42:02,567 INFO L413 NwaCegarLoop]: 29 mSDtfsCounter, 19 mSDsluCounter, 277 mSDsCounter, 0 mSdLazyCounter, 581 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 19 SdHoareTripleChecker+Valid, 306 SdHoareTripleChecker+Invalid, 1788 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 581 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 1192 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2022-11-20 20:42:02,567 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [19 Valid, 306 Invalid, 1788 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 581 Invalid, 0 Unknown, 1192 Unchecked, 1.4s Time] [2022-11-20 20:42:02,568 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 326 states. [2022-11-20 20:42:02,577 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 326 to 254. [2022-11-20 20:42:02,577 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 254 states, 201 states have (on average 1.0248756218905473) internal successors, (206), 203 states have internal predecessors, (206), 47 states have call successors, (47), 2 states have call predecessors, (47), 4 states have return successors, (93), 48 states have call predecessors, (93), 47 states have call successors, (93) [2022-11-20 20:42:02,579 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 254 states to 254 states and 346 transitions. [2022-11-20 20:42:02,579 INFO L78 Accepts]: Start accepts. Automaton has 254 states and 346 transitions. Word has length 89 [2022-11-20 20:42:02,580 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:42:02,580 INFO L495 AbstractCegarLoop]: Abstraction has 254 states and 346 transitions. [2022-11-20 20:42:02,580 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 45 states, 43 states have (on average 2.3488372093023258) internal successors, (101), 44 states have internal predecessors, (101), 14 states have call successors, (14), 2 states have call predecessors, (14), 19 states have return successors, (24), 17 states have call predecessors, (24), 14 states have call successors, (24) [2022-11-20 20:42:02,580 INFO L276 IsEmpty]: Start isEmpty. Operand 254 states and 346 transitions. [2022-11-20 20:42:02,582 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-11-20 20:42:02,582 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:42:02,582 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 9, 9, 9, 9, 8, 8, 6, 4, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:42:02,602 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (88)] Forceful destruction successful, exit code 0 [2022-11-20 20:42:02,807 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (89)] Forceful destruction successful, exit code 0 [2022-11-20 20:42:03,002 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (87)] Forceful destruction successful, exit code 0 [2022-11-20 20:42:03,192 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 88 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt,89 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true,87 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:42:03,193 INFO L420 AbstractCegarLoop]: === Iteration 33 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:42:03,193 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:42:03,193 INFO L85 PathProgramCache]: Analyzing trace with hash 599060686, now seen corresponding path program 17 times [2022-11-20 20:42:03,193 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:42:03,193 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [272407407] [2022-11-20 20:42:03,194 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2022-11-20 20:42:03,194 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:42:03,194 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:42:03,195 INFO L229 MonitoredProcess]: Starting monitored process 90 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:42:03,199 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (90)] Waiting until timeout for monitored process [2022-11-20 20:42:03,751 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 10 check-sat command(s) [2022-11-20 20:42:03,751 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:42:03,764 INFO L263 TraceCheckSpWp]: Trace formula consists of 317 conjuncts, 75 conjunts are in the unsatisfiable core [2022-11-20 20:42:03,771 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:42:03,818 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:42:03,830 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:42:04,281 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-20 20:42:04,282 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-11-20 20:42:04,325 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:42:04,325 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:42:04,636 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4720 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4720))))) is different from true [2022-11-20 20:42:04,664 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:42:04,665 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:42:04,683 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:42:04,684 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:42:04,928 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4721 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4721) |c_#length|)))) is different from true [2022-11-20 20:42:04,951 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:42:04,952 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:42:04,976 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:42:04,976 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:42:05,465 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4722 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4722) |c_#length|)))) is different from true [2022-11-20 20:42:05,492 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:42:05,494 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:42:05,518 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:42:05,518 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:42:06,489 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4723 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4723) |c_#length|)))) is different from true [2022-11-20 20:42:06,517 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:42:06,518 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:42:06,537 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:42:06,537 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:42:06,659 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 9 proven. 199 refuted. 0 times theorem prover too weak. 84 trivial. 60 not checked. [2022-11-20 20:42:06,659 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:42:09,606 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:42:09,607 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [272407407] [2022-11-20 20:42:09,607 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [272407407] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:42:09,607 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1116694583] [2022-11-20 20:42:09,607 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2022-11-20 20:42:09,607 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:42:09,607 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:42:09,608 INFO L229 MonitoredProcess]: Starting monitored process 91 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:42:09,610 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (91)] Waiting until timeout for monitored process [2022-11-20 20:42:10,752 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 10 check-sat command(s) [2022-11-20 20:42:10,752 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:42:10,763 INFO L263 TraceCheckSpWp]: Trace formula consists of 317 conjuncts, 82 conjunts are in the unsatisfiable core [2022-11-20 20:42:10,767 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:42:10,781 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:42:11,439 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:42:11,631 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-20 20:42:11,632 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-11-20 20:42:12,563 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4791 (_ BitVec 1))) (= (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_4791) |c_#valid|)) (exists ((v_ArrVal_4792 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4792) |c_#length|)))) is different from true [2022-11-20 20:42:12,598 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:42:12,646 INFO L321 Elim1Store]: treesize reduction 19, result has 32.1 percent of original size [2022-11-20 20:42:12,646 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 31 treesize of output 38 [2022-11-20 20:42:12,774 INFO L321 Elim1Store]: treesize reduction 44, result has 42.9 percent of original size [2022-11-20 20:42:12,774 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 5 case distinctions, treesize of input 41 treesize of output 68 [2022-11-20 20:42:13,352 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:42:13,393 INFO L321 Elim1Store]: treesize reduction 19, result has 32.1 percent of original size [2022-11-20 20:42:13,393 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 31 treesize of output 38 [2022-11-20 20:42:13,484 INFO L321 Elim1Store]: treesize reduction 6, result has 80.6 percent of original size [2022-11-20 20:42:13,484 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 35 treesize of output 53 [2022-11-20 20:42:14,885 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4795 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4795))))) is different from true [2022-11-20 20:42:14,917 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:42:14,956 INFO L321 Elim1Store]: treesize reduction 19, result has 32.1 percent of original size [2022-11-20 20:42:14,957 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 17 treesize of output 26 [2022-11-20 20:42:14,979 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:42:14,979 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:42:15,507 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4796 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4796) |c_#length|)))) is different from true [2022-11-20 20:42:15,533 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:42:15,534 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:42:15,553 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:42:15,553 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:42:15,579 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 18 proven. 218 refuted. 0 times theorem prover too weak. 68 trivial. 48 not checked. [2022-11-20 20:42:15,579 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:42:16,243 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [1116694583] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:42:16,243 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1791957806] [2022-11-20 20:42:16,243 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2022-11-20 20:42:16,243 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:42:16,244 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:42:16,244 INFO L229 MonitoredProcess]: Starting monitored process 92 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:42:16,247 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (92)] Waiting until timeout for monitored process [2022-11-20 20:42:21,337 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 10 check-sat command(s) [2022-11-20 20:42:21,337 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:42:21,349 INFO L263 TraceCheckSpWp]: Trace formula consists of 317 conjuncts, 75 conjunts are in the unsatisfiable core [2022-11-20 20:42:21,354 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:42:21,368 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:42:21,377 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:42:21,520 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4862 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4862) |c_#length|)))) is different from true [2022-11-20 20:42:21,542 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:42:21,543 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:42:21,568 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:42:21,568 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:42:21,684 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4863 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4863))))) is different from true [2022-11-20 20:42:21,713 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:42:21,713 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:42:21,738 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:42:21,738 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:42:21,854 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_4864 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4864) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4865 (_ BitVec 1))) (= |c_#valid| (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_4865))))) is different from true [2022-11-20 20:42:21,887 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:42:21,888 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:42:21,930 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:42:21,930 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:42:22,202 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4866 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4866) |c_#length|)))) is different from true [2022-11-20 20:42:22,238 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:42:22,239 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:42:22,268 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:42:22,268 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:42:22,920 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4867 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4867) |c_#length|)))) is different from true [2022-11-20 20:42:22,947 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:42:22,948 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:42:22,967 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:42:22,967 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:42:22,991 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 19 proven. 201 refuted. 0 times theorem prover too weak. 62 trivial. 70 not checked. [2022-11-20 20:42:22,991 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:42:23,542 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1791957806] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:42:23,542 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:42:23,542 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [26, 31, 26] total 51 [2022-11-20 20:42:23,542 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1320719535] [2022-11-20 20:42:23,542 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:42:23,543 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 52 states [2022-11-20 20:42:23,543 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:42:23,543 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 52 interpolants. [2022-11-20 20:42:23,543 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=159, Invalid=1598, Unknown=13, NotChecked=1092, Total=2862 [2022-11-20 20:42:23,543 INFO L87 Difference]: Start difference. First operand 254 states and 346 transitions. Second operand has 52 states, 50 states have (on average 2.14) internal successors, (107), 47 states have internal predecessors, (107), 16 states have call successors, (16), 3 states have call predecessors, (16), 18 states have return successors, (23), 18 states have call predecessors, (23), 16 states have call successors, (23) [2022-11-20 20:42:29,137 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:42:29,137 INFO L93 Difference]: Finished difference Result 318 states and 432 transitions. [2022-11-20 20:42:29,137 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-11-20 20:42:29,138 INFO L78 Accepts]: Start accepts. Automaton has has 52 states, 50 states have (on average 2.14) internal successors, (107), 47 states have internal predecessors, (107), 16 states have call successors, (16), 3 states have call predecessors, (16), 18 states have return successors, (23), 18 states have call predecessors, (23), 16 states have call successors, (23) Word has length 89 [2022-11-20 20:42:29,138 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:42:29,140 INFO L225 Difference]: With dead ends: 318 [2022-11-20 20:42:29,140 INFO L226 Difference]: Without dead ends: 318 [2022-11-20 20:42:29,141 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 284 GetRequests, 220 SyntacticMatches, 3 SemanticMatches, 61 ConstructedPredicates, 12 IntricatePredicates, 0 DeprecatedPredicates, 351 ImplicationChecksByTransitivity, 10.1s TimeCoverageRelationStatistics Valid=225, Invalid=2360, Unknown=13, NotChecked=1308, Total=3906 [2022-11-20 20:42:29,141 INFO L413 NwaCegarLoop]: 34 mSDtfsCounter, 16 mSDsluCounter, 501 mSDsCounter, 0 mSdLazyCounter, 1298 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 535 SdHoareTripleChecker+Invalid, 2867 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 1298 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 1554 IncrementalHoareTripleChecker+Unchecked, 3.2s IncrementalHoareTripleChecker+Time [2022-11-20 20:42:29,142 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 535 Invalid, 2867 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 1298 Invalid, 0 Unknown, 1554 Unchecked, 3.2s Time] [2022-11-20 20:42:29,142 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 318 states. [2022-11-20 20:42:29,152 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 318 to 259. [2022-11-20 20:42:29,152 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 259 states, 205 states have (on average 1.024390243902439) internal successors, (210), 207 states have internal predecessors, (210), 48 states have call successors, (48), 2 states have call predecessors, (48), 4 states have return successors, (95), 49 states have call predecessors, (95), 48 states have call successors, (95) [2022-11-20 20:42:29,154 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 259 states to 259 states and 353 transitions. [2022-11-20 20:42:29,154 INFO L78 Accepts]: Start accepts. Automaton has 259 states and 353 transitions. Word has length 89 [2022-11-20 20:42:29,155 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:42:29,155 INFO L495 AbstractCegarLoop]: Abstraction has 259 states and 353 transitions. [2022-11-20 20:42:29,155 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 52 states, 50 states have (on average 2.14) internal successors, (107), 47 states have internal predecessors, (107), 16 states have call successors, (16), 3 states have call predecessors, (16), 18 states have return successors, (23), 18 states have call predecessors, (23), 16 states have call successors, (23) [2022-11-20 20:42:29,155 INFO L276 IsEmpty]: Start isEmpty. Operand 259 states and 353 transitions. [2022-11-20 20:42:29,157 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-11-20 20:42:29,157 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:42:29,157 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 9, 9, 9, 9, 8, 8, 8, 2, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:42:29,168 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (91)] Forceful destruction successful, exit code 0 [2022-11-20 20:42:29,378 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (92)] Forceful destruction successful, exit code 0 [2022-11-20 20:42:29,576 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (90)] Forceful destruction successful, exit code 0 [2022-11-20 20:42:29,767 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 91 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt,92 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true,90 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:42:29,767 INFO L420 AbstractCegarLoop]: === Iteration 34 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:42:29,768 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:42:29,768 INFO L85 PathProgramCache]: Analyzing trace with hash -65701616, now seen corresponding path program 18 times [2022-11-20 20:42:29,768 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:42:29,768 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1628063015] [2022-11-20 20:42:29,768 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2022-11-20 20:42:29,768 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:42:29,768 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:42:29,769 INFO L229 MonitoredProcess]: Starting monitored process 93 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:42:29,772 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (93)] Waiting until timeout for monitored process [2022-11-20 20:42:30,450 INFO L228 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 10 check-sat command(s) [2022-11-20 20:42:30,450 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:42:30,462 INFO L263 TraceCheckSpWp]: Trace formula consists of 329 conjuncts, 83 conjunts are in the unsatisfiable core [2022-11-20 20:42:30,466 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:42:30,500 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:42:30,510 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:42:30,774 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4937 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4937))))) is different from true [2022-11-20 20:42:30,801 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:42:30,801 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:42:30,820 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:42:30,820 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:42:31,042 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_4938 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4938))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:42:31,067 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:42:31,067 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:42:31,092 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:42:31,093 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:42:31,338 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4939 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4939) |c_#length|)))) is different from true [2022-11-20 20:42:31,365 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:42:31,366 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:42:31,385 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:42:31,385 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:42:32,053 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_4940 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4940) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:42:32,077 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:42:32,078 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:42:32,096 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:42:32,097 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:42:32,365 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4941 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4941) |c_#length|)))) is different from true [2022-11-20 20:42:32,393 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:42:32,394 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:42:32,418 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:42:32,419 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:42:32,695 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4942 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4942) |c_#length|)))) is different from true [2022-11-20 20:42:32,719 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:42:32,720 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:42:32,738 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:42:32,739 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:42:33,045 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_4943 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_4943))))) is different from true [2022-11-20 20:42:33,072 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:42:33,073 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:42:33,097 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:42:33,097 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:42:33,207 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 9 proven. 185 refuted. 0 times theorem prover too weak. 74 trivial. 84 not checked. [2022-11-20 20:42:33,207 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:42:35,993 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:42:35,994 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1628063015] [2022-11-20 20:42:35,994 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1628063015] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:42:35,994 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [148064681] [2022-11-20 20:42:35,994 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2022-11-20 20:42:35,994 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:42:35,994 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:42:35,995 INFO L229 MonitoredProcess]: Starting monitored process 94 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:42:35,997 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (94)] Waiting until timeout for monitored process [2022-11-20 20:42:37,316 INFO L228 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 10 check-sat command(s) [2022-11-20 20:42:37,317 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:42:37,327 INFO L263 TraceCheckSpWp]: Trace formula consists of 329 conjuncts, 91 conjunts are in the unsatisfiable core [2022-11-20 20:42:37,332 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:42:37,349 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:42:37,358 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:42:37,685 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:42:37,685 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:42:37,712 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:42:38,628 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:42:38,629 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:42:38,744 INFO L321 Elim1Store]: treesize reduction 44, result has 34.3 percent of original size [2022-11-20 20:42:38,745 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 26 treesize of output 43 [2022-11-20 20:42:39,719 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-20 20:42:39,719 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-11-20 20:42:39,839 INFO L321 Elim1Store]: treesize reduction 18, result has 41.9 percent of original size [2022-11-20 20:42:39,840 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 3 case distinctions, treesize of input 27 treesize of output 31 [2022-11-20 20:42:41,125 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-20 20:42:41,125 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-11-20 20:42:42,198 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:42:42,199 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:42:42,260 INFO L321 Elim1Store]: treesize reduction 19, result has 32.1 percent of original size [2022-11-20 20:42:42,260 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 17 treesize of output 26 [2022-11-20 20:42:43,302 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5025 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5025) |c_#length|)))) is different from true [2022-11-20 20:42:43,330 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:42:43,331 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:42:43,379 INFO L321 Elim1Store]: treesize reduction 12, result has 42.9 percent of original size [2022-11-20 20:42:43,380 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 20 treesize of output 22 [2022-11-20 20:42:43,497 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5026 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5026) |c_#length|)))) is different from true [2022-11-20 20:42:43,525 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:42:43,526 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:42:43,550 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:42:43,551 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:42:43,571 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 31 proven. 249 refuted. 0 times theorem prover too weak. 38 trivial. 34 not checked. [2022-11-20 20:42:43,572 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:42:44,052 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [148064681] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:42:44,052 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [422074632] [2022-11-20 20:42:44,052 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2022-11-20 20:42:44,052 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:42:44,053 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:42:44,054 INFO L229 MonitoredProcess]: Starting monitored process 95 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:42:44,056 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (95)] Waiting until timeout for monitored process [2022-11-20 20:42:47,162 INFO L228 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 10 check-sat command(s) [2022-11-20 20:42:47,162 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:42:47,173 INFO L263 TraceCheckSpWp]: Trace formula consists of 329 conjuncts, 73 conjunts are in the unsatisfiable core [2022-11-20 20:42:47,177 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:42:47,190 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:42:47,656 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| |c_ldv_malloc_#in~size|) |c_#length|)) is different from true [2022-11-20 20:42:47,700 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-20 20:42:47,701 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-11-20 20:42:48,535 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5096 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5096))))) is different from true [2022-11-20 20:42:48,564 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:42:48,603 INFO L321 Elim1Store]: treesize reduction 19, result has 32.1 percent of original size [2022-11-20 20:42:48,603 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 24 treesize of output 31 [2022-11-20 20:42:48,629 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:42:48,630 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:42:49,285 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_5097 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5097) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:42:49,309 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:42:49,310 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 18 [2022-11-20 20:42:49,337 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:42:49,338 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:42:50,634 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5098 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5098))))) is different from true [2022-11-20 20:42:50,656 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:42:50,656 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 18 [2022-11-20 20:42:50,674 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:42:50,674 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:42:51,193 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5099 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5099))))) is different from true [2022-11-20 20:42:51,221 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:42:51,221 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 18 [2022-11-20 20:42:51,239 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:42:51,239 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:42:51,743 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_5100 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5100))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:42:51,766 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:42:51,767 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 18 [2022-11-20 20:42:51,793 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:42:51,794 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:42:52,186 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5101 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5101))))) is different from true [2022-11-20 20:42:52,213 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:42:52,214 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:42:52,244 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:42:52,244 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:42:52,263 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 32 proven. 200 refuted. 0 times theorem prover too weak. 36 trivial. 84 not checked. [2022-11-20 20:42:52,263 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:42:56,807 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [422074632] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:42:56,807 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:42:56,807 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [29, 39, 35] total 80 [2022-11-20 20:42:56,807 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [435046889] [2022-11-20 20:42:56,807 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:42:56,808 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 81 states [2022-11-20 20:42:56,808 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:42:56,809 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 81 interpolants. [2022-11-20 20:42:56,809 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=317, Invalid=4153, Unknown=16, NotChecked=2320, Total=6806 [2022-11-20 20:42:56,810 INFO L87 Difference]: Start difference. First operand 259 states and 353 transitions. Second operand has 81 states, 79 states have (on average 1.9240506329113924) internal successors, (152), 75 states have internal predecessors, (152), 25 states have call successors, (25), 3 states have call predecessors, (25), 24 states have return successors, (29), 26 states have call predecessors, (29), 25 states have call successors, (29) [2022-11-20 20:43:04,745 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:43:04,745 INFO L93 Difference]: Finished difference Result 363 states and 489 transitions. [2022-11-20 20:43:04,745 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 37 states. [2022-11-20 20:43:04,746 INFO L78 Accepts]: Start accepts. Automaton has has 81 states, 79 states have (on average 1.9240506329113924) internal successors, (152), 75 states have internal predecessors, (152), 25 states have call successors, (25), 3 states have call predecessors, (25), 24 states have return successors, (29), 26 states have call predecessors, (29), 25 states have call successors, (29) Word has length 89 [2022-11-20 20:43:04,746 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:43:04,748 INFO L225 Difference]: With dead ends: 363 [2022-11-20 20:43:04,749 INFO L226 Difference]: Without dead ends: 363 [2022-11-20 20:43:04,750 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 286 GetRequests, 188 SyntacticMatches, 4 SemanticMatches, 94 ConstructedPredicates, 16 IntricatePredicates, 0 DeprecatedPredicates, 1734 ImplicationChecksByTransitivity, 19.6s TimeCoverageRelationStatistics Valid=431, Invalid=5937, Unknown=16, NotChecked=2736, Total=9120 [2022-11-20 20:43:04,750 INFO L413 NwaCegarLoop]: 29 mSDtfsCounter, 50 mSDsluCounter, 439 mSDsCounter, 0 mSdLazyCounter, 1666 mSolverCounterSat, 42 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 468 SdHoareTripleChecker+Invalid, 3731 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 42 IncrementalHoareTripleChecker+Valid, 1666 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 2023 IncrementalHoareTripleChecker+Unchecked, 4.1s IncrementalHoareTripleChecker+Time [2022-11-20 20:43:04,751 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [51 Valid, 468 Invalid, 3731 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [42 Valid, 1666 Invalid, 0 Unknown, 2023 Unchecked, 4.1s Time] [2022-11-20 20:43:04,751 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 363 states. [2022-11-20 20:43:04,761 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 363 to 336. [2022-11-20 20:43:04,761 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 336 states, 265 states have (on average 1.0264150943396226) internal successors, (272), 269 states have internal predecessors, (272), 61 states have call successors, (61), 4 states have call predecessors, (61), 8 states have return successors, (121), 62 states have call predecessors, (121), 61 states have call successors, (121) [2022-11-20 20:43:04,763 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 336 states to 336 states and 454 transitions. [2022-11-20 20:43:04,764 INFO L78 Accepts]: Start accepts. Automaton has 336 states and 454 transitions. Word has length 89 [2022-11-20 20:43:04,764 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:43:04,764 INFO L495 AbstractCegarLoop]: Abstraction has 336 states and 454 transitions. [2022-11-20 20:43:04,764 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 81 states, 79 states have (on average 1.9240506329113924) internal successors, (152), 75 states have internal predecessors, (152), 25 states have call successors, (25), 3 states have call predecessors, (25), 24 states have return successors, (29), 26 states have call predecessors, (29), 25 states have call successors, (29) [2022-11-20 20:43:04,765 INFO L276 IsEmpty]: Start isEmpty. Operand 336 states and 454 transitions. [2022-11-20 20:43:04,766 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-11-20 20:43:04,767 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:43:04,767 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 9, 9, 9, 9, 8, 8, 7, 3, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:43:04,782 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (95)] Forceful destruction successful, exit code 0 [2022-11-20 20:43:04,988 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (94)] Forceful destruction successful, exit code 0 [2022-11-20 20:43:05,191 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (93)] Forceful destruction successful, exit code 0 [2022-11-20 20:43:05,382 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 95 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true,94 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt,93 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:43:05,382 INFO L420 AbstractCegarLoop]: === Iteration 35 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:43:05,382 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:43:05,382 INFO L85 PathProgramCache]: Analyzing trace with hash 1179062865, now seen corresponding path program 19 times [2022-11-20 20:43:05,383 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:43:05,383 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2088700063] [2022-11-20 20:43:05,383 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-20 20:43:05,383 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:43:05,383 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:43:05,384 INFO L229 MonitoredProcess]: Starting monitored process 96 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:43:05,385 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (96)] Waiting until timeout for monitored process [2022-11-20 20:43:05,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:43:05,875 INFO L263 TraceCheckSpWp]: Trace formula consists of 323 conjuncts, 75 conjunts are in the unsatisfiable core [2022-11-20 20:43:05,879 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:43:05,911 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:43:05,925 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:43:06,183 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5169 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5169))))) is different from true [2022-11-20 20:43:06,216 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:06,217 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:06,235 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:06,235 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:06,448 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5170 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5170))))) is different from true [2022-11-20 20:43:06,473 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:06,474 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:06,493 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:06,494 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:06,740 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5171 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5171) |c_#length|)))) is different from true [2022-11-20 20:43:06,767 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:06,768 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:06,792 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:06,792 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:07,445 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5172 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5172))))) is different from true [2022-11-20 20:43:07,468 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:07,469 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:07,492 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:07,492 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:07,989 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5173 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5173) |c_#length|)))) is different from true [2022-11-20 20:43:08,014 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:08,014 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:08,044 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:08,044 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:08,336 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5174 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5174) |c_#length|)))) is different from true [2022-11-20 20:43:08,365 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:08,365 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:08,384 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:08,385 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:08,497 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 9 proven. 187 refuted. 0 times theorem prover too weak. 78 trivial. 78 not checked. [2022-11-20 20:43:08,497 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:43:11,276 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:43:11,276 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2088700063] [2022-11-20 20:43:11,276 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2088700063] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:43:11,276 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1232913268] [2022-11-20 20:43:11,277 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-20 20:43:11,277 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:43:11,277 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:43:11,278 INFO L229 MonitoredProcess]: Starting monitored process 97 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:43:11,279 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (97)] Waiting until timeout for monitored process [2022-11-20 20:43:12,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:43:12,210 INFO L263 TraceCheckSpWp]: Trace formula consists of 323 conjuncts, 75 conjunts are in the unsatisfiable core [2022-11-20 20:43:12,214 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:43:12,227 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:43:12,237 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:43:12,371 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5242 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5242) |c_#length|)))) is different from true [2022-11-20 20:43:12,395 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:12,395 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:12,414 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:12,414 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:12,536 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5243 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5243) |c_#length|)))) is different from true [2022-11-20 20:43:12,559 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:12,560 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:12,579 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:12,579 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:12,713 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5244 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5244) |c_#length|)))) is different from true [2022-11-20 20:43:12,740 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:12,740 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:12,758 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:12,758 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:13,142 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5245 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5245))))) is different from true [2022-11-20 20:43:13,166 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:13,167 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:13,186 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:13,186 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:13,444 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5246 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5246) |c_#length|)))) is different from true [2022-11-20 20:43:13,481 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:13,482 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:13,506 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:13,506 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:13,624 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5247 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5247))))) is different from true [2022-11-20 20:43:13,654 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:13,654 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:13,679 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:13,679 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:13,695 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 9 proven. 187 refuted. 0 times theorem prover too weak. 78 trivial. 78 not checked. [2022-11-20 20:43:13,695 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:43:14,254 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [1232913268] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:43:14,254 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1439727123] [2022-11-20 20:43:14,254 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-20 20:43:14,255 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:43:14,255 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:43:14,256 INFO L229 MonitoredProcess]: Starting monitored process 98 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:43:14,258 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (98)] Waiting until timeout for monitored process [2022-11-20 20:43:14,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:43:14,700 INFO L263 TraceCheckSpWp]: Trace formula consists of 323 conjuncts, 79 conjunts are in the unsatisfiable core [2022-11-20 20:43:14,704 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:43:14,718 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:43:14,739 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:43:14,873 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_5315 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5315) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5316 (_ BitVec 1))) (= (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_5316) |c_#valid|)))) is different from true [2022-11-20 20:43:14,950 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:43:14,951 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:43:14,963 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:15,243 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:15,244 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:15,287 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:43:15,287 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:43:15,747 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5319 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5319) |c_#length|)))) is different from true [2022-11-20 20:43:15,777 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:15,778 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:15,825 INFO L321 Elim1Store]: treesize reduction 12, result has 42.9 percent of original size [2022-11-20 20:43:15,826 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 20 treesize of output 22 [2022-11-20 20:43:16,522 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:16,523 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:16,566 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:43:16,566 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:43:17,544 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:17,545 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:17,628 INFO L321 Elim1Store]: treesize reduction 44, result has 34.3 percent of original size [2022-11-20 20:43:17,628 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 26 treesize of output 43 [2022-11-20 20:43:18,313 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5324 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5324) |c_#length|)))) is different from true [2022-11-20 20:43:18,354 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:18,355 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:18,441 INFO L321 Elim1Store]: treesize reduction 18, result has 41.9 percent of original size [2022-11-20 20:43:18,441 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 3 case distinctions, treesize of input 27 treesize of output 31 [2022-11-20 20:43:18,462 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 23 proven. 217 refuted. 0 times theorem prover too weak. 64 trivial. 48 not checked. [2022-11-20 20:43:18,462 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:43:21,433 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1439727123] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:43:21,434 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:43:21,434 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [27, 27, 26] total 46 [2022-11-20 20:43:21,434 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [268159785] [2022-11-20 20:43:21,434 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:43:21,434 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 47 states [2022-11-20 20:43:21,435 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:43:21,435 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 47 interpolants. [2022-11-20 20:43:21,435 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=156, Invalid=1010, Unknown=16, NotChecked=1170, Total=2352 [2022-11-20 20:43:21,435 INFO L87 Difference]: Start difference. First operand 336 states and 454 transitions. Second operand has 47 states, 45 states have (on average 2.2888888888888888) internal successors, (103), 46 states have internal predecessors, (103), 15 states have call successors, (15), 3 states have call predecessors, (15), 19 states have return successors, (24), 16 states have call predecessors, (24), 15 states have call successors, (24) [2022-11-20 20:43:24,221 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:43:24,222 INFO L93 Difference]: Finished difference Result 406 states and 550 transitions. [2022-11-20 20:43:24,222 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2022-11-20 20:43:24,222 INFO L78 Accepts]: Start accepts. Automaton has has 47 states, 45 states have (on average 2.2888888888888888) internal successors, (103), 46 states have internal predecessors, (103), 15 states have call successors, (15), 3 states have call predecessors, (15), 19 states have return successors, (24), 16 states have call predecessors, (24), 15 states have call successors, (24) Word has length 89 [2022-11-20 20:43:24,223 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:43:24,225 INFO L225 Difference]: With dead ends: 406 [2022-11-20 20:43:24,225 INFO L226 Difference]: Without dead ends: 406 [2022-11-20 20:43:24,225 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 275 GetRequests, 222 SyntacticMatches, 4 SemanticMatches, 49 ConstructedPredicates, 15 IntricatePredicates, 0 DeprecatedPredicates, 240 ImplicationChecksByTransitivity, 9.9s TimeCoverageRelationStatistics Valid=166, Invalid=1138, Unknown=16, NotChecked=1230, Total=2550 [2022-11-20 20:43:24,226 INFO L413 NwaCegarLoop]: 30 mSDtfsCounter, 16 mSDsluCounter, 362 mSDsCounter, 0 mSdLazyCounter, 566 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 392 SdHoareTripleChecker+Invalid, 1690 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 566 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 1113 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2022-11-20 20:43:24,226 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 392 Invalid, 1690 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 566 Invalid, 0 Unknown, 1113 Unchecked, 1.4s Time] [2022-11-20 20:43:24,227 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 406 states. [2022-11-20 20:43:24,237 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 406 to 316. [2022-11-20 20:43:24,238 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 316 states, 249 states have (on average 1.0281124497991967) internal successors, (256), 253 states have internal predecessors, (256), 57 states have call successors, (57), 4 states have call predecessors, (57), 8 states have return successors, (113), 58 states have call predecessors, (113), 57 states have call successors, (113) [2022-11-20 20:43:24,240 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 316 states to 316 states and 426 transitions. [2022-11-20 20:43:24,240 INFO L78 Accepts]: Start accepts. Automaton has 316 states and 426 transitions. Word has length 89 [2022-11-20 20:43:24,240 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:43:24,241 INFO L495 AbstractCegarLoop]: Abstraction has 316 states and 426 transitions. [2022-11-20 20:43:24,241 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 47 states, 45 states have (on average 2.2888888888888888) internal successors, (103), 46 states have internal predecessors, (103), 15 states have call successors, (15), 3 states have call predecessors, (15), 19 states have return successors, (24), 16 states have call predecessors, (24), 15 states have call successors, (24) [2022-11-20 20:43:24,241 INFO L276 IsEmpty]: Start isEmpty. Operand 316 states and 426 transitions. [2022-11-20 20:43:24,243 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-11-20 20:43:24,243 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:43:24,243 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 9, 9, 9, 9, 8, 8, 8, 2, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:43:24,253 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (97)] Forceful destruction successful, exit code 0 [2022-11-20 20:43:24,459 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (98)] Forceful destruction successful, exit code 0 [2022-11-20 20:43:24,662 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (96)] Forceful destruction successful, exit code 0 [2022-11-20 20:43:24,853 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 97 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt,98 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true,96 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:43:24,853 INFO L420 AbstractCegarLoop]: === Iteration 36 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:43:24,854 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:43:24,854 INFO L85 PathProgramCache]: Analyzing trace with hash 455188402, now seen corresponding path program 20 times [2022-11-20 20:43:24,854 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:43:24,854 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1219351901] [2022-11-20 20:43:24,854 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-11-20 20:43:24,854 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:43:24,854 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:43:24,855 INFO L229 MonitoredProcess]: Starting monitored process 99 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:43:24,856 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (99)] Waiting until timeout for monitored process [2022-11-20 20:43:25,358 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-11-20 20:43:25,359 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:43:25,370 INFO L263 TraceCheckSpWp]: Trace formula consists of 329 conjuncts, 78 conjunts are in the unsatisfiable core [2022-11-20 20:43:25,374 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:43:25,404 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:43:25,418 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:43:25,696 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5394 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5394))))) is different from true [2022-11-20 20:43:25,719 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:25,720 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:25,739 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:25,739 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:25,957 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_5395 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5395) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:43:25,989 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:25,990 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:26,015 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:26,015 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:26,428 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5396 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5396) |c_#length|)))) is different from true [2022-11-20 20:43:26,466 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:26,467 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:26,491 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:26,491 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:26,946 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_5397 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5397))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:43:26,969 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:26,970 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:26,995 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:26,995 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:27,266 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5398 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5398) |c_#length|)))) is different from true [2022-11-20 20:43:27,289 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:27,290 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:27,309 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:27,309 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:27,607 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5399 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5399) |c_#length|)))) is different from true [2022-11-20 20:43:27,631 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:27,632 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:27,651 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:27,651 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:27,948 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5400 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5400))))) is different from true [2022-11-20 20:43:27,976 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:27,977 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:27,996 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:27,996 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:28,110 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 9 proven. 185 refuted. 0 times theorem prover too weak. 74 trivial. 84 not checked. [2022-11-20 20:43:28,110 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:43:30,952 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:43:30,952 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1219351901] [2022-11-20 20:43:30,952 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1219351901] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:43:30,952 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1319372574] [2022-11-20 20:43:30,952 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-11-20 20:43:30,953 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:43:30,953 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:43:30,954 INFO L229 MonitoredProcess]: Starting monitored process 100 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:43:30,955 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (100)] Waiting until timeout for monitored process [2022-11-20 20:43:31,870 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-11-20 20:43:31,870 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:43:31,898 INFO L263 TraceCheckSpWp]: Trace formula consists of 329 conjuncts, 79 conjunts are in the unsatisfiable core [2022-11-20 20:43:31,903 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:43:31,920 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:43:31,935 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:43:32,065 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5470 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5470) |c_#length|)))) is different from true [2022-11-20 20:43:32,097 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:32,098 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:32,122 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:32,122 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:32,230 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5471 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5471) |c_#length|)))) is different from true [2022-11-20 20:43:32,255 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:32,255 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:32,274 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:32,274 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:32,543 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5472 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5472))))) is different from true [2022-11-20 20:43:32,567 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:32,568 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:32,592 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:32,592 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:32,856 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5473 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5473))))) is different from true [2022-11-20 20:43:32,881 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:32,881 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:32,901 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:32,901 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:33,024 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5474 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5474) |c_#length|)))) is different from true [2022-11-20 20:43:33,060 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:33,061 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:33,086 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:33,086 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:33,204 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5475 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5475) |c_#length|)))) is different from true [2022-11-20 20:43:33,229 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:33,229 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:33,254 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:33,254 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:33,376 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_5476 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5476) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:43:33,409 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:33,409 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:33,434 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:33,435 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:33,451 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 9 proven. 185 refuted. 0 times theorem prover too weak. 74 trivial. 84 not checked. [2022-11-20 20:43:33,451 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:43:38,105 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [1319372574] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:43:38,105 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1524692068] [2022-11-20 20:43:38,105 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-11-20 20:43:38,105 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:43:38,105 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:43:38,106 INFO L229 MonitoredProcess]: Starting monitored process 101 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:43:38,109 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (101)] Waiting until timeout for monitored process [2022-11-20 20:43:38,580 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-11-20 20:43:38,580 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:43:38,588 INFO L263 TraceCheckSpWp]: Trace formula consists of 329 conjuncts, 77 conjunts are in the unsatisfiable core [2022-11-20 20:43:38,591 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:43:38,605 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:43:38,619 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:43:38,748 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5546 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5546))))) is different from true [2022-11-20 20:43:38,776 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:38,777 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:38,801 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:38,801 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:38,914 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5547 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5547) |c_#length|)))) is different from true [2022-11-20 20:43:38,938 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:38,939 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:38,958 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:38,958 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:39,372 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5548 (_ BitVec 1))) (= (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_5548) |c_#valid|)) (exists ((v_ArrVal_5549 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5549) |c_#length|)))) is different from true [2022-11-20 20:43:39,403 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:39,404 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:39,453 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:43:39,454 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:43:39,714 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5550 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5550))))) is different from true [2022-11-20 20:43:39,758 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:39,759 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:39,782 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:39,782 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:39,891 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5551 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5551) |c_#length|)))) is different from true [2022-11-20 20:43:39,915 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:39,916 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:39,940 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:39,941 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:40,059 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5552 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5552) |c_#length|)))) is different from true [2022-11-20 20:43:40,083 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:40,084 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:40,109 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:40,109 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:40,230 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5553 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5553) |c_#length|)))) is different from true [2022-11-20 20:43:40,257 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:40,258 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:40,282 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:40,283 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:40,303 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 23 proven. 189 refuted. 0 times theorem prover too weak. 56 trivial. 84 not checked. [2022-11-20 20:43:40,303 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:43:44,058 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1524692068] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:43:44,058 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:43:44,058 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [29, 29, 30] total 45 [2022-11-20 20:43:44,059 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [737583791] [2022-11-20 20:43:44,059 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:43:44,059 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 46 states [2022-11-20 20:43:44,059 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:43:44,059 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 46 interpolants. [2022-11-20 20:43:44,060 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=128, Invalid=637, Unknown=21, NotChecked=1470, Total=2256 [2022-11-20 20:43:44,060 INFO L87 Difference]: Start difference. First operand 316 states and 426 transitions. Second operand has 46 states, 44 states have (on average 2.2045454545454546) internal successors, (97), 45 states have internal predecessors, (97), 11 states have call successors, (11), 3 states have call predecessors, (11), 24 states have return successors, (25), 12 states have call predecessors, (25), 11 states have call successors, (25) [2022-11-20 20:43:49,173 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:43:49,174 INFO L93 Difference]: Finished difference Result 427 states and 573 transitions. [2022-11-20 20:43:49,175 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2022-11-20 20:43:49,175 INFO L78 Accepts]: Start accepts. Automaton has has 46 states, 44 states have (on average 2.2045454545454546) internal successors, (97), 45 states have internal predecessors, (97), 11 states have call successors, (11), 3 states have call predecessors, (11), 24 states have return successors, (25), 12 states have call predecessors, (25), 11 states have call successors, (25) Word has length 89 [2022-11-20 20:43:49,176 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:43:49,177 INFO L225 Difference]: With dead ends: 427 [2022-11-20 20:43:49,178 INFO L226 Difference]: Without dead ends: 427 [2022-11-20 20:43:49,178 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 275 GetRequests, 225 SyntacticMatches, 2 SemanticMatches, 48 ConstructedPredicates, 21 IntricatePredicates, 0 DeprecatedPredicates, 74 ImplicationChecksByTransitivity, 14.3s TimeCoverageRelationStatistics Valid=137, Invalid=738, Unknown=21, NotChecked=1554, Total=2450 [2022-11-20 20:43:49,179 INFO L413 NwaCegarLoop]: 35 mSDtfsCounter, 25 mSDsluCounter, 401 mSDsCounter, 0 mSdLazyCounter, 1153 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 25 SdHoareTripleChecker+Valid, 436 SdHoareTripleChecker+Invalid, 2306 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 1153 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 1130 IncrementalHoareTripleChecker+Unchecked, 2.9s IncrementalHoareTripleChecker+Time [2022-11-20 20:43:49,179 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [25 Valid, 436 Invalid, 2306 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 1153 Invalid, 0 Unknown, 1130 Unchecked, 2.9s Time] [2022-11-20 20:43:49,180 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 427 states. [2022-11-20 20:43:49,191 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 427 to 286. [2022-11-20 20:43:49,191 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 286 states, 225 states have (on average 1.031111111111111) internal successors, (232), 229 states have internal predecessors, (232), 51 states have call successors, (51), 4 states have call predecessors, (51), 8 states have return successors, (101), 52 states have call predecessors, (101), 51 states have call successors, (101) [2022-11-20 20:43:49,193 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 286 states to 286 states and 384 transitions. [2022-11-20 20:43:49,193 INFO L78 Accepts]: Start accepts. Automaton has 286 states and 384 transitions. Word has length 89 [2022-11-20 20:43:49,194 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:43:49,194 INFO L495 AbstractCegarLoop]: Abstraction has 286 states and 384 transitions. [2022-11-20 20:43:49,194 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 46 states, 44 states have (on average 2.2045454545454546) internal successors, (97), 45 states have internal predecessors, (97), 11 states have call successors, (11), 3 states have call predecessors, (11), 24 states have return successors, (25), 12 states have call predecessors, (25), 11 states have call successors, (25) [2022-11-20 20:43:49,194 INFO L276 IsEmpty]: Start isEmpty. Operand 286 states and 384 transitions. [2022-11-20 20:43:49,196 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-11-20 20:43:49,196 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:43:49,196 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 9, 9, 9, 9, 8, 8, 8, 2, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:43:49,213 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (99)] Forceful destruction successful, exit code 0 [2022-11-20 20:43:49,420 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (100)] Forceful destruction successful, exit code 0 [2022-11-20 20:43:49,619 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (101)] Forceful destruction successful, exit code 0 [2022-11-20 20:43:49,813 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 99 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,100 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt,101 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:43:49,813 INFO L420 AbstractCegarLoop]: === Iteration 37 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:43:49,813 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:43:49,814 INFO L85 PathProgramCache]: Analyzing trace with hash -1495675056, now seen corresponding path program 21 times [2022-11-20 20:43:49,814 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:43:49,814 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1021493878] [2022-11-20 20:43:49,814 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-20 20:43:49,814 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:43:49,814 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:43:49,815 INFO L229 MonitoredProcess]: Starting monitored process 102 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:43:49,839 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (102)] Waiting until timeout for monitored process [2022-11-20 20:43:50,471 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 10 check-sat command(s) [2022-11-20 20:43:50,472 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:43:50,483 INFO L263 TraceCheckSpWp]: Trace formula consists of 329 conjuncts, 75 conjunts are in the unsatisfiable core [2022-11-20 20:43:50,486 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:43:50,517 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:43:50,531 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:43:50,785 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5623 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5623) |c_#length|)))) is different from true [2022-11-20 20:43:50,809 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:50,809 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:50,832 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:50,832 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:51,262 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_5624 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5624) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:43:51,295 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:51,295 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:51,312 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:51,313 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:51,549 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5625 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5625) |c_#length|)))) is different from true [2022-11-20 20:43:51,570 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:51,571 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:51,588 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:51,589 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:52,083 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5626 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5626))))) is different from true [2022-11-20 20:43:52,106 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:52,106 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:52,125 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:52,126 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:52,424 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5627 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5627) |c_#length|)))) is different from true [2022-11-20 20:43:52,448 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:52,449 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:52,474 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:52,474 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:52,769 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5628 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5628) |c_#length|)))) is different from true [2022-11-20 20:43:52,793 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:52,794 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:52,813 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:52,813 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:53,134 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_5629 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5629) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:43:53,170 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:53,171 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:53,189 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:53,190 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:53,310 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 29 proven. 193 refuted. 0 times theorem prover too weak. 46 trivial. 84 not checked. [2022-11-20 20:43:53,311 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:43:54,540 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:43:54,540 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1021493878] [2022-11-20 20:43:54,540 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1021493878] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:43:54,541 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [866910530] [2022-11-20 20:43:54,541 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-20 20:43:54,541 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:43:54,541 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:43:54,542 INFO L229 MonitoredProcess]: Starting monitored process 103 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:43:54,544 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (103)] Waiting until timeout for monitored process [2022-11-20 20:43:55,889 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 10 check-sat command(s) [2022-11-20 20:43:55,889 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:43:55,919 INFO L263 TraceCheckSpWp]: Trace formula consists of 329 conjuncts, 86 conjunts are in the unsatisfiable core [2022-11-20 20:43:55,923 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:43:55,941 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:43:55,951 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:43:56,093 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5699 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5699) |c_#length|)))) is different from true [2022-11-20 20:43:56,120 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:56,120 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:56,139 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:56,140 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:56,506 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:56,506 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:56,522 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:56,901 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5702 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5702) |c_#length|)))) is different from true [2022-11-20 20:43:56,925 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:56,926 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:56,945 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:56,945 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:57,435 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-20 20:43:57,436 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-11-20 20:43:58,467 INFO L321 Elim1Store]: treesize reduction 24, result has 48.9 percent of original size [2022-11-20 20:43:58,468 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 17 treesize of output 34 [2022-11-20 20:43:58,519 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:58,520 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:58,951 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5707 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5707) |c_#length|)))) is different from true [2022-11-20 20:43:58,975 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:58,976 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:59,001 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:59,002 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:59,129 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5708 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5708))))) is different from true [2022-11-20 20:43:59,164 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:43:59,165 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:43:59,190 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:43:59,190 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:43:59,210 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 31 proven. 223 refuted. 0 times theorem prover too weak. 38 trivial. 60 not checked. [2022-11-20 20:43:59,211 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:44:00,040 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [866910530] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:44:00,040 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [153800193] [2022-11-20 20:44:00,040 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-20 20:44:00,040 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:44:00,040 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:44:00,041 INFO L229 MonitoredProcess]: Starting monitored process 104 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:44:00,043 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (104)] Waiting until timeout for monitored process [2022-11-20 20:44:01,256 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 10 check-sat command(s) [2022-11-20 20:44:01,256 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:44:01,265 INFO L263 TraceCheckSpWp]: Trace formula consists of 329 conjuncts, 75 conjunts are in the unsatisfiable core [2022-11-20 20:44:01,269 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:44:01,283 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:44:01,296 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:44:01,437 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_5778 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5778) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:44:01,460 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:01,461 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:01,480 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:44:01,481 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:44:01,690 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5779 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5779) |c_#length|)))) is different from true [2022-11-20 20:44:01,721 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:01,721 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:01,746 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:44:01,746 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:44:01,856 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5780 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5780) |c_#length|)))) is different from true [2022-11-20 20:44:01,889 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:01,889 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:01,914 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:44:01,915 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:44:02,116 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5781 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5781) |c_#length|)))) is different from true [2022-11-20 20:44:02,139 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:02,139 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:02,158 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:44:02,158 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:44:02,281 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5782 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5782) |c_#length|)))) is different from true [2022-11-20 20:44:02,304 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:02,305 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:02,329 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:44:02,329 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:44:02,464 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5783 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5783) |c_#length|)))) is different from true [2022-11-20 20:44:02,493 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:02,493 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:02,523 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:44:02,523 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:44:02,672 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5784 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5784) |c_#length|)))) is different from true [2022-11-20 20:44:02,700 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:02,701 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:02,720 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:44:02,720 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:44:02,745 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 29 proven. 193 refuted. 0 times theorem prover too weak. 46 trivial. 84 not checked. [2022-11-20 20:44:02,745 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:44:05,369 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [153800193] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:44:05,369 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:44:05,369 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [32, 36, 32] total 54 [2022-11-20 20:44:05,370 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [813621329] [2022-11-20 20:44:05,370 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:44:05,370 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 55 states [2022-11-20 20:44:05,371 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:44:05,371 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 55 interpolants. [2022-11-20 20:44:05,372 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=166, Invalid=1370, Unknown=18, NotChecked=1638, Total=3192 [2022-11-20 20:44:05,372 INFO L87 Difference]: Start difference. First operand 286 states and 384 transitions. Second operand has 55 states, 53 states have (on average 1.849056603773585) internal successors, (98), 51 states have internal predecessors, (98), 12 states have call successors, (12), 3 states have call predecessors, (12), 22 states have return successors, (24), 13 states have call predecessors, (24), 12 states have call successors, (24) [2022-11-20 20:44:12,845 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:44:12,845 INFO L93 Difference]: Finished difference Result 356 states and 466 transitions. [2022-11-20 20:44:12,845 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2022-11-20 20:44:12,846 INFO L78 Accepts]: Start accepts. Automaton has has 55 states, 53 states have (on average 1.849056603773585) internal successors, (98), 51 states have internal predecessors, (98), 12 states have call successors, (12), 3 states have call predecessors, (12), 22 states have return successors, (24), 13 states have call predecessors, (24), 12 states have call successors, (24) Word has length 89 [2022-11-20 20:44:12,846 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:44:12,848 INFO L225 Difference]: With dead ends: 356 [2022-11-20 20:44:12,848 INFO L226 Difference]: Without dead ends: 356 [2022-11-20 20:44:12,849 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 295 GetRequests, 215 SyntacticMatches, 3 SemanticMatches, 77 ConstructedPredicates, 18 IntricatePredicates, 0 DeprecatedPredicates, 712 ImplicationChecksByTransitivity, 10.8s TimeCoverageRelationStatistics Valid=318, Invalid=3396, Unknown=18, NotChecked=2430, Total=6162 [2022-11-20 20:44:12,850 INFO L413 NwaCegarLoop]: 35 mSDtfsCounter, 69 mSDsluCounter, 392 mSDsCounter, 0 mSdLazyCounter, 1501 mSolverCounterSat, 55 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 70 SdHoareTripleChecker+Valid, 427 SdHoareTripleChecker+Invalid, 3384 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 55 IncrementalHoareTripleChecker+Valid, 1501 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 1828 IncrementalHoareTripleChecker+Unchecked, 3.9s IncrementalHoareTripleChecker+Time [2022-11-20 20:44:12,850 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [70 Valid, 427 Invalid, 3384 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [55 Valid, 1501 Invalid, 0 Unknown, 1828 Unchecked, 3.9s Time] [2022-11-20 20:44:12,851 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 356 states. [2022-11-20 20:44:12,859 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 356 to 256. [2022-11-20 20:44:12,860 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 256 states, 201 states have (on average 1.0348258706467661) internal successors, (208), 205 states have internal predecessors, (208), 45 states have call successors, (45), 4 states have call predecessors, (45), 8 states have return successors, (89), 46 states have call predecessors, (89), 45 states have call successors, (89) [2022-11-20 20:44:12,861 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 342 transitions. [2022-11-20 20:44:12,861 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 342 transitions. Word has length 89 [2022-11-20 20:44:12,862 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:44:12,862 INFO L495 AbstractCegarLoop]: Abstraction has 256 states and 342 transitions. [2022-11-20 20:44:12,862 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 55 states, 53 states have (on average 1.849056603773585) internal successors, (98), 51 states have internal predecessors, (98), 12 states have call successors, (12), 3 states have call predecessors, (12), 22 states have return successors, (24), 13 states have call predecessors, (24), 12 states have call successors, (24) [2022-11-20 20:44:12,862 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 342 transitions. [2022-11-20 20:44:12,864 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-11-20 20:44:12,864 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:44:12,864 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 9, 9, 9, 9, 8, 8, 7, 3, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:44:12,882 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (103)] Forceful destruction successful, exit code 0 [2022-11-20 20:44:13,085 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (102)] Forceful destruction successful, exit code 0 [2022-11-20 20:44:13,285 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (104)] Forceful destruction successful, exit code 0 [2022-11-20 20:44:13,476 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 103 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt,102 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,104 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:44:13,476 INFO L420 AbstractCegarLoop]: === Iteration 38 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:44:13,477 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:44:13,477 INFO L85 PathProgramCache]: Analyzing trace with hash -250910575, now seen corresponding path program 22 times [2022-11-20 20:44:13,477 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:44:13,477 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1228002540] [2022-11-20 20:44:13,477 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-20 20:44:13,477 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:44:13,478 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:44:13,478 INFO L229 MonitoredProcess]: Starting monitored process 105 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:44:13,479 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (105)] Waiting until timeout for monitored process [2022-11-20 20:44:13,982 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-20 20:44:13,982 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:44:13,994 INFO L263 TraceCheckSpWp]: Trace formula consists of 323 conjuncts, 75 conjunts are in the unsatisfiable core [2022-11-20 20:44:13,998 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:44:14,030 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:44:14,040 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:44:14,311 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5852 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5852))))) is different from true [2022-11-20 20:44:14,339 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:14,339 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:14,358 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:44:14,358 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:44:14,772 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5853 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5853) |c_#length|)))) is different from true [2022-11-20 20:44:14,800 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:14,801 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:14,820 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:44:14,820 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:44:15,058 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5854 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5854) |c_#length|)))) is different from true [2022-11-20 20:44:15,081 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:15,081 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:15,100 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:44:15,100 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:44:15,564 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5855 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5855) |c_#length|)))) is different from true [2022-11-20 20:44:15,587 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:15,588 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:15,607 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:44:15,607 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:44:16,110 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5856 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5856) |c_#length|)))) is different from true [2022-11-20 20:44:16,141 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:16,142 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:16,161 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:44:16,161 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:44:16,450 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5857 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5857) |c_#length|)))) is different from true [2022-11-20 20:44:16,476 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:16,477 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:16,501 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:44:16,501 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:44:16,608 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 9 proven. 187 refuted. 0 times theorem prover too weak. 78 trivial. 78 not checked. [2022-11-20 20:44:16,608 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:44:19,329 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:44:19,329 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1228002540] [2022-11-20 20:44:19,330 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1228002540] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:44:19,330 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [483655363] [2022-11-20 20:44:19,330 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-20 20:44:19,330 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:44:19,330 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:44:19,331 INFO L229 MonitoredProcess]: Starting monitored process 106 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:44:19,333 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (106)] Waiting until timeout for monitored process [2022-11-20 20:44:20,305 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-20 20:44:20,305 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:44:20,333 INFO L263 TraceCheckSpWp]: Trace formula consists of 323 conjuncts, 75 conjunts are in the unsatisfiable core [2022-11-20 20:44:20,337 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:44:20,352 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:44:20,364 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:44:20,493 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_5925 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5925))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:44:20,523 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:20,524 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:20,543 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:44:20,543 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:44:20,804 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5926 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5926))))) is different from true [2022-11-20 20:44:20,827 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:20,828 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:20,847 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:44:20,848 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:44:20,970 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5927 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5927))))) is different from true [2022-11-20 20:44:20,994 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:20,995 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:21,014 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:44:21,014 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:44:21,270 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5928 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5928) |c_#length|)))) is different from true [2022-11-20 20:44:21,302 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:21,303 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:21,322 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:44:21,322 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:44:21,585 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5929 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5929) |c_#length|)))) is different from true [2022-11-20 20:44:21,610 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:21,610 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:21,630 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:44:21,630 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:44:21,752 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5930 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5930) |c_#length|)))) is different from true [2022-11-20 20:44:21,780 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:21,781 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:21,800 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:44:21,800 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:44:21,825 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 9 proven. 187 refuted. 0 times theorem prover too weak. 78 trivial. 78 not checked. [2022-11-20 20:44:21,825 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:44:26,292 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [483655363] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:44:26,292 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1033988524] [2022-11-20 20:44:26,293 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-20 20:44:26,293 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:44:26,293 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:44:26,294 INFO L229 MonitoredProcess]: Starting monitored process 107 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:44:26,296 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (107)] Waiting until timeout for monitored process [2022-11-20 20:44:26,787 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-20 20:44:26,787 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:44:26,794 INFO L263 TraceCheckSpWp]: Trace formula consists of 323 conjuncts, 77 conjunts are in the unsatisfiable core [2022-11-20 20:44:26,798 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:44:26,812 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:44:26,826 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:44:26,961 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_5998 (_ BitVec 1))) (= |c_#valid| (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_5998))) (exists ((v_ArrVal_5999 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_5999) |c_#length|)))) is different from true [2022-11-20 20:44:26,999 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:26,999 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:27,044 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:44:27,044 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:44:27,308 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_6001 (_ BitVec 1))) (= (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_6001) |c_#valid|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6000 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6000) |c_#length|)))) is different from true [2022-11-20 20:44:27,405 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:44:27,406 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:44:27,418 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:27,551 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6003 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6003) |c_#length|)) (exists ((v_ArrVal_6002 (_ BitVec 1))) (= |c_#valid| (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_6002))))) is different from true [2022-11-20 20:44:27,632 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:44:27,632 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:44:27,644 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:27,909 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6004 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6004) |c_#length|)))) is different from true [2022-11-20 20:44:27,933 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:27,934 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:27,953 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:44:27,953 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:44:28,506 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:28,507 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:28,555 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:44:28,556 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:44:29,037 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_6007 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6007))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:44:29,080 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:29,081 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:29,130 INFO L321 Elim1Store]: treesize reduction 12, result has 42.9 percent of original size [2022-11-20 20:44:29,130 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 20 treesize of output 22 [2022-11-20 20:44:29,155 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 13 proven. 211 refuted. 0 times theorem prover too weak. 58 trivial. 70 not checked. [2022-11-20 20:44:29,155 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:44:29,612 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1033988524] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:44:29,612 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:44:29,612 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [27, 27, 26] total 43 [2022-11-20 20:44:29,612 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1247437804] [2022-11-20 20:44:29,612 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:44:29,613 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 44 states [2022-11-20 20:44:29,613 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:44:29,613 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 44 interpolants. [2022-11-20 20:44:29,614 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=130, Invalid=732, Unknown=18, NotChecked=1190, Total=2070 [2022-11-20 20:44:29,614 INFO L87 Difference]: Start difference. First operand 256 states and 342 transitions. Second operand has 44 states, 42 states have (on average 2.357142857142857) internal successors, (99), 43 states have internal predecessors, (99), 12 states have call successors, (12), 3 states have call predecessors, (12), 21 states have return successors, (23), 15 states have call predecessors, (23), 12 states have call successors, (23) [2022-11-20 20:44:33,753 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:44:33,753 INFO L93 Difference]: Finished difference Result 385 states and 519 transitions. [2022-11-20 20:44:33,754 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2022-11-20 20:44:33,754 INFO L78 Accepts]: Start accepts. Automaton has has 44 states, 42 states have (on average 2.357142857142857) internal successors, (99), 43 states have internal predecessors, (99), 12 states have call successors, (12), 3 states have call predecessors, (12), 21 states have return successors, (23), 15 states have call predecessors, (23), 12 states have call successors, (23) Word has length 89 [2022-11-20 20:44:33,754 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:44:33,756 INFO L225 Difference]: With dead ends: 385 [2022-11-20 20:44:33,757 INFO L226 Difference]: Without dead ends: 385 [2022-11-20 20:44:33,757 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 275 GetRequests, 227 SyntacticMatches, 2 SemanticMatches, 46 ConstructedPredicates, 17 IntricatePredicates, 0 DeprecatedPredicates, 110 ImplicationChecksByTransitivity, 10.5s TimeCoverageRelationStatistics Valid=140, Invalid=840, Unknown=18, NotChecked=1258, Total=2256 [2022-11-20 20:44:33,758 INFO L413 NwaCegarLoop]: 31 mSDtfsCounter, 18 mSDsluCounter, 341 mSDsCounter, 0 mSdLazyCounter, 999 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 372 SdHoareTripleChecker+Invalid, 2141 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 999 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 1124 IncrementalHoareTripleChecker+Unchecked, 2.5s IncrementalHoareTripleChecker+Time [2022-11-20 20:44:33,758 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 372 Invalid, 2141 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 999 Invalid, 0 Unknown, 1124 Unchecked, 2.5s Time] [2022-11-20 20:44:33,759 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 385 states. [2022-11-20 20:44:33,768 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 385 to 256. [2022-11-20 20:44:33,768 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 256 states, 201 states have (on average 1.0348258706467661) internal successors, (208), 205 states have internal predecessors, (208), 45 states have call successors, (45), 4 states have call predecessors, (45), 8 states have return successors, (89), 46 states have call predecessors, (89), 45 states have call successors, (89) [2022-11-20 20:44:33,770 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 342 transitions. [2022-11-20 20:44:33,770 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 342 transitions. Word has length 89 [2022-11-20 20:44:33,771 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:44:33,771 INFO L495 AbstractCegarLoop]: Abstraction has 256 states and 342 transitions. [2022-11-20 20:44:33,771 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 44 states, 42 states have (on average 2.357142857142857) internal successors, (99), 43 states have internal predecessors, (99), 12 states have call successors, (12), 3 states have call predecessors, (12), 21 states have return successors, (23), 15 states have call predecessors, (23), 12 states have call successors, (23) [2022-11-20 20:44:33,771 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 342 transitions. [2022-11-20 20:44:33,773 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-11-20 20:44:33,773 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:44:33,773 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 9, 9, 9, 9, 8, 8, 6, 4, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:44:33,784 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (106)] Forceful destruction successful, exit code 0 [2022-11-20 20:44:34,003 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (105)] Forceful destruction successful, exit code 0 [2022-11-20 20:44:34,190 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (107)] Forceful destruction successful, exit code 0 [2022-11-20 20:44:34,383 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 106 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt,105 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,107 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:44:34,384 INFO L420 AbstractCegarLoop]: === Iteration 39 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:44:34,384 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:44:34,384 INFO L85 PathProgramCache]: Analyzing trace with hash -249987054, now seen corresponding path program 23 times [2022-11-20 20:44:34,384 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:44:34,384 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [845741079] [2022-11-20 20:44:34,384 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2022-11-20 20:44:34,385 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:44:34,385 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:44:34,385 INFO L229 MonitoredProcess]: Starting monitored process 108 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:44:34,386 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (108)] Waiting until timeout for monitored process [2022-11-20 20:44:34,966 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 10 check-sat command(s) [2022-11-20 20:44:34,967 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:44:34,978 INFO L263 TraceCheckSpWp]: Trace formula consists of 317 conjuncts, 70 conjunts are in the unsatisfiable core [2022-11-20 20:44:34,984 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:44:35,016 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:44:35,025 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:44:35,311 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6073 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6073) |c_#length|)))) is different from true [2022-11-20 20:44:35,339 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:35,339 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:35,364 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:44:35,364 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:44:35,766 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_6074 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6074) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:44:35,789 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:35,789 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:35,814 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:44:35,814 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:44:36,069 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6075 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6075) |c_#length|)))) is different from true [2022-11-20 20:44:36,093 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:36,093 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:36,112 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:44:36,113 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:44:36,574 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6076 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6076) |c_#length|)))) is different from true [2022-11-20 20:44:36,606 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:36,606 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:36,631 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:44:36,631 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:44:37,120 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6077 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6077) |c_#length|)))) is different from true [2022-11-20 20:44:37,144 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:37,145 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:37,164 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:44:37,164 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:44:37,523 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 9 proven. 211 refuted. 0 times theorem prover too weak. 62 trivial. 70 not checked. [2022-11-20 20:44:37,523 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:44:41,057 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:44:41,057 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [845741079] [2022-11-20 20:44:41,057 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [845741079] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:44:41,057 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [495327070] [2022-11-20 20:44:41,058 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2022-11-20 20:44:41,058 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:44:41,058 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:44:41,059 INFO L229 MonitoredProcess]: Starting monitored process 109 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:44:41,061 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (109)] Waiting until timeout for monitored process [2022-11-20 20:44:42,349 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 10 check-sat command(s) [2022-11-20 20:44:42,349 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:44:42,359 INFO L263 TraceCheckSpWp]: Trace formula consists of 317 conjuncts, 79 conjunts are in the unsatisfiable core [2022-11-20 20:44:42,363 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:44:42,392 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:44:43,097 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-20 20:44:43,097 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-11-20 20:44:44,585 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:44:44,586 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:44:44,645 INFO L321 Elim1Store]: treesize reduction 19, result has 32.1 percent of original size [2022-11-20 20:44:44,645 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 24 treesize of output 31 [2022-11-20 20:44:45,220 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6147 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6147) |c_#length|)))) is different from true [2022-11-20 20:44:45,244 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:45,245 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:45,270 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:44:45,270 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:44:45,540 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6148 (_ BitVec 1))) (= |c_#valid| (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_6148))) (exists ((v_ArrVal_6149 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6149))))) is different from true [2022-11-20 20:44:45,572 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:45,572 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:45,617 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:44:45,617 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:44:45,884 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6150 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6150) |c_#length|)))) is different from true [2022-11-20 20:44:45,916 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:45,917 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:45,936 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:44:45,937 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:44:46,052 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 17 proven. 238 refuted. 0 times theorem prover too weak. 49 trivial. 48 not checked. [2022-11-20 20:44:46,052 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:44:55,244 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [495327070] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:44:55,244 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [111544265] [2022-11-20 20:44:55,244 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2022-11-20 20:44:55,245 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:44:55,245 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:44:55,246 INFO L229 MonitoredProcess]: Starting monitored process 110 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:44:55,248 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (110)] Waiting until timeout for monitored process [2022-11-20 20:44:59,045 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 10 check-sat command(s) [2022-11-20 20:44:59,045 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:44:59,057 INFO L263 TraceCheckSpWp]: Trace formula consists of 317 conjuncts, 69 conjunts are in the unsatisfiable core [2022-11-20 20:44:59,061 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:44:59,075 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:44:59,104 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:44:59,233 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6216 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6216))))) is different from true [2022-11-20 20:44:59,257 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:59,258 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:59,282 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:44:59,283 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:44:59,641 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6217 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6217) |c_#length|)))) is different from true [2022-11-20 20:44:59,670 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:59,670 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:59,689 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:44:59,689 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:44:59,808 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6218 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6218) |c_#length|)))) is different from true [2022-11-20 20:44:59,846 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:44:59,847 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:44:59,872 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:44:59,872 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:45:00,239 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6219 (_ BitVec 1))) (= |c_#valid| (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_6219))) (exists ((v_ArrVal_6220 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6220) |c_#length|)))) is different from true [2022-11-20 20:45:00,269 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:45:00,269 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:45:00,314 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:45:00,314 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:45:00,598 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6221 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6221) |c_#length|)))) is different from true [2022-11-20 20:45:00,623 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:45:00,624 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:45:00,649 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:45:00,649 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:45:00,768 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 29 proven. 211 refuted. 0 times theorem prover too weak. 42 trivial. 70 not checked. [2022-11-20 20:45:00,768 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:45:14,782 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [111544265] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:45:14,782 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:45:14,782 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [26, 30, 27] total 48 [2022-11-20 20:45:14,782 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1922713786] [2022-11-20 20:45:14,782 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:45:14,783 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 49 states [2022-11-20 20:45:14,783 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:45:14,783 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 49 interpolants. [2022-11-20 20:45:14,784 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=209, Invalid=1713, Unknown=22, NotChecked=1248, Total=3192 [2022-11-20 20:45:14,784 INFO L87 Difference]: Start difference. First operand 256 states and 342 transitions. Second operand has 49 states, 47 states have (on average 2.25531914893617) internal successors, (106), 45 states have internal predecessors, (106), 15 states have call successors, (15), 3 states have call predecessors, (15), 19 states have return successors, (24), 17 states have call predecessors, (24), 15 states have call successors, (24) [2022-11-20 20:45:21,603 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:45:21,604 INFO L93 Difference]: Finished difference Result 345 states and 462 transitions. [2022-11-20 20:45:21,604 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-11-20 20:45:21,604 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 47 states have (on average 2.25531914893617) internal successors, (106), 45 states have internal predecessors, (106), 15 states have call successors, (15), 3 states have call predecessors, (15), 19 states have return successors, (24), 17 states have call predecessors, (24), 15 states have call successors, (24) Word has length 89 [2022-11-20 20:45:21,605 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:45:21,606 INFO L225 Difference]: With dead ends: 345 [2022-11-20 20:45:21,607 INFO L226 Difference]: Without dead ends: 345 [2022-11-20 20:45:21,607 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 310 GetRequests, 244 SyntacticMatches, 2 SemanticMatches, 64 ConstructedPredicates, 13 IntricatePredicates, 0 DeprecatedPredicates, 384 ImplicationChecksByTransitivity, 31.7s TimeCoverageRelationStatistics Valid=291, Invalid=2495, Unknown=22, NotChecked=1482, Total=4290 [2022-11-20 20:45:21,608 INFO L413 NwaCegarLoop]: 30 mSDtfsCounter, 25 mSDsluCounter, 423 mSDsCounter, 0 mSdLazyCounter, 1501 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 25 SdHoareTripleChecker+Valid, 453 SdHoareTripleChecker+Invalid, 2661 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 1501 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 1145 IncrementalHoareTripleChecker+Unchecked, 3.8s IncrementalHoareTripleChecker+Time [2022-11-20 20:45:21,608 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [25 Valid, 453 Invalid, 2661 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 1501 Invalid, 0 Unknown, 1145 Unchecked, 3.8s Time] [2022-11-20 20:45:21,609 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 345 states. [2022-11-20 20:45:21,617 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 345 to 207. [2022-11-20 20:45:21,618 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 207 states, 162 states have (on average 1.037037037037037) internal successors, (168), 166 states have internal predecessors, (168), 36 states have call successors, (36), 4 states have call predecessors, (36), 7 states have return successors, (65), 36 states have call predecessors, (65), 36 states have call successors, (65) [2022-11-20 20:45:21,619 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 207 states to 207 states and 269 transitions. [2022-11-20 20:45:21,619 INFO L78 Accepts]: Start accepts. Automaton has 207 states and 269 transitions. Word has length 89 [2022-11-20 20:45:21,619 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:45:21,620 INFO L495 AbstractCegarLoop]: Abstraction has 207 states and 269 transitions. [2022-11-20 20:45:21,620 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 49 states, 47 states have (on average 2.25531914893617) internal successors, (106), 45 states have internal predecessors, (106), 15 states have call successors, (15), 3 states have call predecessors, (15), 19 states have return successors, (24), 17 states have call predecessors, (24), 15 states have call successors, (24) [2022-11-20 20:45:21,620 INFO L276 IsEmpty]: Start isEmpty. Operand 207 states and 269 transitions. [2022-11-20 20:45:21,621 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2022-11-20 20:45:21,622 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:45:21,622 INFO L195 NwaCegarLoop]: trace histogram [11, 11, 11, 10, 10, 10, 10, 9, 9, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:45:21,639 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (110)] Forceful destruction successful, exit code 0 [2022-11-20 20:45:21,858 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (108)] Forceful destruction successful, exit code 0 [2022-11-20 20:45:22,046 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (109)] Forceful destruction successful, exit code 0 [2022-11-20 20:45:22,239 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 110 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true,108 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,109 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt [2022-11-20 20:45:22,239 INFO L420 AbstractCegarLoop]: === Iteration 40 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:45:22,239 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:45:22,239 INFO L85 PathProgramCache]: Analyzing trace with hash 1054496655, now seen corresponding path program 9 times [2022-11-20 20:45:22,240 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:45:22,240 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1539673516] [2022-11-20 20:45:22,240 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-20 20:45:22,240 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:45:22,240 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:45:22,241 INFO L229 MonitoredProcess]: Starting monitored process 111 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:45:22,243 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (111)] Waiting until timeout for monitored process [2022-11-20 20:45:23,089 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 11 check-sat command(s) [2022-11-20 20:45:23,090 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:45:23,106 INFO L263 TraceCheckSpWp]: Trace formula consists of 376 conjuncts, 92 conjunts are in the unsatisfiable core [2022-11-20 20:45:23,111 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:45:23,146 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:45:23,156 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:45:23,434 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_6303 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6303) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:45:23,456 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:45:23,457 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:45:23,476 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:45:23,476 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:45:23,695 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6304 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6304) |c_#length|)))) is different from true [2022-11-20 20:45:23,719 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:45:23,720 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:45:23,738 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:45:23,739 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:45:23,970 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6305 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6305))))) is different from true [2022-11-20 20:45:23,997 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:45:23,997 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:45:24,033 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:45:24,033 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:45:24,265 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6306 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6306))))) is different from true [2022-11-20 20:45:24,289 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:45:24,290 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:45:24,315 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:45:24,315 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:45:24,569 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6307 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6307) |c_#length|)))) is different from true [2022-11-20 20:45:24,593 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:45:24,593 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:45:24,612 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:45:24,612 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:45:24,991 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| |c_ldv_malloc_#in~size|) |c_#length|)) is different from true [2022-11-20 20:45:25,035 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-20 20:45:25,035 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-11-20 20:45:25,602 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6309 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6309) |c_#length|)))) is different from true [2022-11-20 20:45:25,629 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:45:25,674 INFO L321 Elim1Store]: treesize reduction 19, result has 32.1 percent of original size [2022-11-20 20:45:25,674 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 24 treesize of output 31 [2022-11-20 20:45:25,706 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:45:25,706 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:45:26,213 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6310 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6310) |c_#length|)))) is different from true [2022-11-20 20:45:26,238 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:45:26,238 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 18 [2022-11-20 20:45:26,257 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:45:26,258 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:45:26,640 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_6311 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6311))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:45:26,670 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:45:26,671 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 18 [2022-11-20 20:45:26,699 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:45:26,699 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:45:27,226 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6312 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6312))))) is different from true [2022-11-20 20:45:27,249 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:45:27,249 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:45:27,274 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:45:27,275 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:45:27,411 INFO L134 CoverageAnalysis]: Checked inductivity of 436 backedges. 15 proven. 239 refuted. 0 times theorem prover too weak. 72 trivial. 110 not checked. [2022-11-20 20:45:27,411 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:45:32,391 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:45:32,391 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1539673516] [2022-11-20 20:45:32,391 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1539673516] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:45:32,391 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1518424532] [2022-11-20 20:45:32,391 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-20 20:45:32,392 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:45:32,392 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:45:32,392 INFO L229 MonitoredProcess]: Starting monitored process 112 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:45:32,394 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (112)] Waiting until timeout for monitored process [2022-11-20 20:45:34,259 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 11 check-sat command(s) [2022-11-20 20:45:34,259 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:45:34,297 INFO L263 TraceCheckSpWp]: Trace formula consists of 376 conjuncts, 110 conjunts are in the unsatisfiable core [2022-11-20 20:45:34,303 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:45:34,318 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:45:34,327 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:45:34,466 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6395 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6395) |c_#length|)) (exists ((v_ArrVal_6394 (_ BitVec 1))) (= (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_6394) |c_#valid|)))) is different from true [2022-11-20 20:45:34,541 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:45:34,541 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:45:34,548 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:45:34,878 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:45:34,878 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:45:34,899 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:45:35,219 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2022-11-20 20:45:35,645 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-11-20 20:45:35,652 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-11-20 20:45:44,158 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-20 20:45:44,158 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-11-20 20:45:44,204 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:45:44,204 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:45:44,723 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 4 [2022-11-20 20:45:44,809 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6402 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6402))))) is different from true [2022-11-20 20:45:44,834 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:45:44,834 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:45:44,859 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:45:44,860 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:45:45,002 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6403 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6403))))) is different from true [2022-11-20 20:45:45,035 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:45:45,035 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:45:45,067 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:45:45,067 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:45:45,194 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-20 20:45:45,195 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-11-20 20:45:45,855 INFO L321 Elim1Store]: treesize reduction 20, result has 57.4 percent of original size [2022-11-20 20:45:45,855 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 24 treesize of output 43 [2022-11-20 20:45:47,118 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:45:47,119 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:45:47,172 INFO L321 Elim1Store]: treesize reduction 19, result has 32.1 percent of original size [2022-11-20 20:45:47,172 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 17 treesize of output 26 [2022-11-20 20:45:47,833 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6409 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6409) |c_#length|)))) is different from true [2022-11-20 20:45:47,861 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:45:47,862 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:45:47,900 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:45:47,901 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:45:48,190 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6410 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6410))))) is different from true [2022-11-20 20:45:48,215 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:45:48,216 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:45:48,241 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:45:48,241 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:45:48,275 INFO L134 CoverageAnalysis]: Checked inductivity of 436 backedges. 24 proven. 264 refuted. 12 times theorem prover too weak. 46 trivial. 90 not checked. [2022-11-20 20:45:48,275 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:45:51,042 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [1518424532] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:45:51,042 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1908017984] [2022-11-20 20:45:51,042 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-20 20:45:51,042 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:45:51,043 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:45:51,043 INFO L229 MonitoredProcess]: Starting monitored process 113 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:45:51,046 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (113)] Waiting until timeout for monitored process [2022-11-20 20:45:54,706 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 11 check-sat command(s) [2022-11-20 20:45:54,707 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:45:54,719 INFO L263 TraceCheckSpWp]: Trace formula consists of 376 conjuncts, 94 conjunts are in the unsatisfiable core [2022-11-20 20:45:54,723 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:45:54,739 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:45:54,753 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:45:54,893 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6492 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6492) |c_#length|)))) is different from true [2022-11-20 20:45:54,920 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:45:54,921 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:45:54,946 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:45:54,946 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:45:55,061 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6493 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6493))))) is different from true [2022-11-20 20:45:55,087 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:45:55,088 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:45:55,110 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:45:55,110 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:45:55,232 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_6494 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6494))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:45:55,261 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:45:55,261 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:45:55,280 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:45:55,281 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:45:55,411 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6495 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6495))))) is different from true [2022-11-20 20:45:55,439 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:45:55,440 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:45:55,465 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:45:55,465 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:45:55,583 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6496 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6496) |c_#length|)))) is different from true [2022-11-20 20:45:55,611 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:45:55,612 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:45:55,636 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:45:55,637 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:45:55,922 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_6497 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6497))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:45:55,952 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:45:55,953 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:45:55,978 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:45:55,978 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:45:56,271 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6498 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6498) |c_#length|)))) is different from true [2022-11-20 20:45:56,303 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:45:56,303 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:45:56,331 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:45:56,331 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:45:56,614 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_6499 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6499) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:45:56,639 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:45:56,639 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:45:56,658 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:45:56,659 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:45:56,959 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6500 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6500))))) is different from true [2022-11-20 20:45:56,986 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:45:56,987 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:45:57,012 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:45:57,012 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:45:57,129 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6501 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6501) |c_#length|)))) is different from true [2022-11-20 20:45:57,153 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:45:57,154 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:45:57,173 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:45:57,173 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:45:57,203 INFO L134 CoverageAnalysis]: Checked inductivity of 436 backedges. 10 proven. 226 refuted. 0 times theorem prover too weak. 90 trivial. 110 not checked. [2022-11-20 20:45:57,203 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:46:04,037 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1908017984] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:46:04,037 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:46:04,037 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [41, 45, 36] total 79 [2022-11-20 20:46:04,037 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [248890840] [2022-11-20 20:46:04,037 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:46:04,038 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 80 states [2022-11-20 20:46:04,038 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:46:04,038 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 80 interpolants. [2022-11-20 20:46:04,039 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=264, Invalid=3000, Unknown=28, NotChecked=3350, Total=6642 [2022-11-20 20:46:04,039 INFO L87 Difference]: Start difference. First operand 207 states and 269 transitions. Second operand has 80 states, 78 states have (on average 1.7820512820512822) internal successors, (139), 74 states have internal predecessors, (139), 18 states have call successors, (18), 4 states have call predecessors, (18), 29 states have return successors, (30), 20 states have call predecessors, (30), 18 states have call successors, (30) [2022-11-20 20:46:36,117 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:46:36,117 INFO L93 Difference]: Finished difference Result 395 states and 519 transitions. [2022-11-20 20:46:36,118 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 67 states. [2022-11-20 20:46:36,118 INFO L78 Accepts]: Start accepts. Automaton has has 80 states, 78 states have (on average 1.7820512820512822) internal successors, (139), 74 states have internal predecessors, (139), 18 states have call successors, (18), 4 states have call predecessors, (18), 29 states have return successors, (30), 20 states have call predecessors, (30), 18 states have call successors, (30) Word has length 98 [2022-11-20 20:46:36,118 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:46:36,120 INFO L225 Difference]: With dead ends: 395 [2022-11-20 20:46:36,120 INFO L226 Difference]: Without dead ends: 395 [2022-11-20 20:46:36,122 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 334 GetRequests, 217 SyntacticMatches, 4 SemanticMatches, 113 ConstructedPredicates, 25 IntricatePredicates, 0 DeprecatedPredicates, 2228 ImplicationChecksByTransitivity, 54.5s TimeCoverageRelationStatistics Valid=495, Invalid=7583, Unknown=32, NotChecked=5000, Total=13110 [2022-11-20 20:46:36,123 INFO L413 NwaCegarLoop]: 59 mSDtfsCounter, 94 mSDsluCounter, 817 mSDsCounter, 0 mSdLazyCounter, 2482 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 97 SdHoareTripleChecker+Valid, 876 SdHoareTripleChecker+Invalid, 5524 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 2482 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 2984 IncrementalHoareTripleChecker+Unchecked, 6.3s IncrementalHoareTripleChecker+Time [2022-11-20 20:46:36,123 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [97 Valid, 876 Invalid, 5524 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 2482 Invalid, 0 Unknown, 2984 Unchecked, 6.3s Time] [2022-11-20 20:46:36,124 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 395 states. [2022-11-20 20:46:36,133 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 395 to 343. [2022-11-20 20:46:36,133 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 343 states, 269 states have (on average 1.0408921933085502) internal successors, (280), 274 states have internal predecessors, (280), 58 states have call successors, (58), 9 states have call predecessors, (58), 14 states have return successors, (115), 59 states have call predecessors, (115), 58 states have call successors, (115) [2022-11-20 20:46:36,135 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 453 transitions. [2022-11-20 20:46:36,136 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 453 transitions. Word has length 98 [2022-11-20 20:46:36,136 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:46:36,136 INFO L495 AbstractCegarLoop]: Abstraction has 343 states and 453 transitions. [2022-11-20 20:46:36,136 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 80 states, 78 states have (on average 1.7820512820512822) internal successors, (139), 74 states have internal predecessors, (139), 18 states have call successors, (18), 4 states have call predecessors, (18), 29 states have return successors, (30), 20 states have call predecessors, (30), 18 states have call successors, (30) [2022-11-20 20:46:36,137 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 453 transitions. [2022-11-20 20:46:36,138 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2022-11-20 20:46:36,139 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:46:36,139 INFO L195 NwaCegarLoop]: trace histogram [11, 11, 10, 10, 10, 10, 10, 9, 9, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:46:36,156 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (113)] Forceful destruction successful, exit code 0 [2022-11-20 20:46:36,365 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (111)] Forceful destruction successful, exit code 0 [2022-11-20 20:46:36,567 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (112)] Forceful destruction successful, exit code 0 [2022-11-20 20:46:36,755 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 113 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true,111 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,112 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt [2022-11-20 20:46:36,756 INFO L420 AbstractCegarLoop]: === Iteration 41 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:46:36,756 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:46:36,756 INFO L85 PathProgramCache]: Analyzing trace with hash -1995706160, now seen corresponding path program 24 times [2022-11-20 20:46:36,756 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:46:36,757 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [298673159] [2022-11-20 20:46:36,757 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2022-11-20 20:46:36,757 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:46:36,757 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:46:36,758 INFO L229 MonitoredProcess]: Starting monitored process 114 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:46:36,759 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (114)] Waiting until timeout for monitored process [2022-11-20 20:46:37,577 INFO L228 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 11 check-sat command(s) [2022-11-20 20:46:37,578 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:46:37,593 INFO L263 TraceCheckSpWp]: Trace formula consists of 370 conjuncts, 87 conjunts are in the unsatisfiable core [2022-11-20 20:46:37,611 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:46:37,643 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:46:37,653 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:46:37,931 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_6581 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6581) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:46:37,955 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:46:37,956 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:46:37,981 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:46:37,981 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:46:38,203 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6582 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6582) |c_#length|)))) is different from true [2022-11-20 20:46:38,244 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:46:38,245 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:46:38,270 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:46:38,270 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:46:38,535 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_6583 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6583) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:46:38,559 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:46:38,560 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:46:38,580 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:46:38,580 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:46:38,833 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6584 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6584))))) is different from true [2022-11-20 20:46:38,859 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:46:38,859 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:46:38,885 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:46:38,885 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:46:39,147 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6585 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6585) |c_#length|)))) is different from true [2022-11-20 20:46:39,183 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:46:39,184 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:46:39,209 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:46:39,209 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:46:39,482 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6586 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6586) |c_#length|)))) is different from true [2022-11-20 20:46:39,507 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:46:39,508 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:46:39,533 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:46:39,534 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:46:39,817 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6587 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6587) |c_#length|)))) is different from true [2022-11-20 20:46:39,849 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:46:39,849 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:46:39,875 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:46:39,875 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:46:40,532 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6588 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6588) |c_#length|)))) is different from true [2022-11-20 20:46:40,561 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:46:40,562 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:46:40,587 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:46:40,587 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:46:40,911 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_6589 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6589))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:46:40,946 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:46:40,947 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:46:40,972 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:46:40,973 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:46:41,102 INFO L134 CoverageAnalysis]: Checked inductivity of 436 backedges. 14 proven. 242 refuted. 0 times theorem prover too weak. 72 trivial. 108 not checked. [2022-11-20 20:46:41,102 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:46:46,001 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:46:46,001 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [298673159] [2022-11-20 20:46:46,001 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [298673159] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:46:46,002 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1411941605] [2022-11-20 20:46:46,002 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2022-11-20 20:46:46,002 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:46:46,002 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:46:46,003 INFO L229 MonitoredProcess]: Starting monitored process 115 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:46:46,005 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (115)] Waiting until timeout for monitored process [2022-11-20 20:46:47,832 INFO L228 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 11 check-sat command(s) [2022-11-20 20:46:47,832 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:46:47,848 INFO L263 TraceCheckSpWp]: Trace formula consists of 370 conjuncts, 101 conjunts are in the unsatisfiable core [2022-11-20 20:46:47,854 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:46:47,869 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:46:47,884 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:46:48,187 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:46:48,187 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:46:48,199 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:46:48,613 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6672 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6672))) (exists ((v_ArrVal_6671 (_ BitVec 1))) (= |c_#valid| (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_6671))))) is different from true [2022-11-20 20:46:48,695 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:46:48,696 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:46:48,708 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:46:48,843 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6674 (_ BitVec 1))) (= (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_6674) |c_#valid|)) (exists ((v_ArrVal_6673 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6673))))) is different from true [2022-11-20 20:46:48,885 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:46:48,886 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:46:48,951 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:46:48,951 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:46:49,121 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6676 (_ BitVec 1))) (= (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_6676) |c_#valid|)) (exists ((v_ArrVal_6675 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6675) |c_#length|)))) is different from true [2022-11-20 20:46:49,239 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:46:49,239 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:46:49,254 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:46:49,416 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_6677 (_ BitVec 1))) (= (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_6677) |c_#valid|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6678 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6678) |c_#length|)))) is different from true [2022-11-20 20:46:49,455 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:46:49,456 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:46:49,501 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:46:49,502 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:46:49,630 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6679 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6679))))) is different from true [2022-11-20 20:46:49,661 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:46:49,662 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:46:49,689 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:46:49,689 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:46:50,104 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-20 20:46:50,105 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-11-20 20:46:51,311 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6682 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6682))))) is different from true [2022-11-20 20:46:51,340 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:46:51,381 INFO L321 Elim1Store]: treesize reduction 19, result has 32.1 percent of original size [2022-11-20 20:46:51,381 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 17 treesize of output 26 [2022-11-20 20:46:51,413 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:46:51,413 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:46:51,540 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6683 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6683))))) is different from true [2022-11-20 20:46:51,581 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:46:51,581 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:46:51,607 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:46:51,607 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:46:51,624 INFO L134 CoverageAnalysis]: Checked inductivity of 436 backedges. 14 proven. 252 refuted. 0 times theorem prover too weak. 72 trivial. 98 not checked. [2022-11-20 20:46:51,624 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:46:55,922 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [1411941605] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:46:55,922 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [206641004] [2022-11-20 20:46:55,923 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2022-11-20 20:46:55,923 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:46:55,923 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:46:55,924 INFO L229 MonitoredProcess]: Starting monitored process 116 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:46:55,926 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (116)] Waiting until timeout for monitored process [2022-11-20 20:47:00,981 INFO L228 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 11 check-sat command(s) [2022-11-20 20:47:00,981 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 20:47:01,006 INFO L263 TraceCheckSpWp]: Trace formula consists of 370 conjuncts, 91 conjunts are in the unsatisfiable core [2022-11-20 20:47:01,011 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:47:01,025 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:47:01,038 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:47:01,171 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6763 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6763))))) is different from true [2022-11-20 20:47:01,199 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:47:01,200 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:47:01,219 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:47:01,220 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:47:01,561 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:47:01,562 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:47:01,612 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-11-20 20:47:01,612 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-11-20 20:47:02,188 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6766 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6766) |c_#length|)))) is different from true [2022-11-20 20:47:02,230 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:47:02,231 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:47:02,276 INFO L321 Elim1Store]: treesize reduction 12, result has 42.9 percent of original size [2022-11-20 20:47:02,277 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 20 treesize of output 22 [2022-11-20 20:47:02,402 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_6767 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6767) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:47:02,426 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:47:02,427 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:47:02,452 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:47:02,453 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:47:02,573 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6768 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6768))))) is different from true [2022-11-20 20:47:02,601 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:47:02,602 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:47:02,621 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:47:02,621 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:47:02,760 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6769 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6769))))) is different from true [2022-11-20 20:47:02,791 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:47:02,792 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:47:02,824 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:47:02,824 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:47:02,974 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6770 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6770) |c_#length|)))) is different from true [2022-11-20 20:47:03,014 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:47:03,014 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:47:03,046 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:47:03,046 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:47:03,297 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6771 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6771) |c_#length|)))) is different from true [2022-11-20 20:47:03,324 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:47:03,325 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:47:03,351 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:47:03,351 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:47:03,471 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6772 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6772) |c_#length|)))) is different from true [2022-11-20 20:47:03,495 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:47:03,496 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:47:03,521 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:47:03,522 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:47:03,547 INFO L134 CoverageAnalysis]: Checked inductivity of 436 backedges. 14 proven. 246 refuted. 0 times theorem prover too weak. 72 trivial. 104 not checked. [2022-11-20 20:47:03,547 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:47:04,191 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [206641004] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:47:04,191 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:47:04,191 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [36, 36, 37] total 64 [2022-11-20 20:47:04,191 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [674041812] [2022-11-20 20:47:04,191 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:47:04,192 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 65 states [2022-11-20 20:47:04,192 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:47:04,192 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 65 interpolants. [2022-11-20 20:47:04,193 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=198, Invalid=1679, Unknown=25, NotChecked=2520, Total=4422 [2022-11-20 20:47:04,193 INFO L87 Difference]: Start difference. First operand 343 states and 453 transitions. Second operand has 65 states, 63 states have (on average 2.0952380952380953) internal successors, (132), 62 states have internal predecessors, (132), 15 states have call successors, (15), 3 states have call predecessors, (15), 30 states have return successors, (30), 19 states have call predecessors, (30), 15 states have call successors, (30) [2022-11-20 20:47:11,655 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 20:47:11,655 INFO L93 Difference]: Finished difference Result 458 states and 597 transitions. [2022-11-20 20:47:11,656 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-11-20 20:47:11,656 INFO L78 Accepts]: Start accepts. Automaton has has 65 states, 63 states have (on average 2.0952380952380953) internal successors, (132), 62 states have internal predecessors, (132), 15 states have call successors, (15), 3 states have call predecessors, (15), 30 states have return successors, (30), 19 states have call predecessors, (30), 15 states have call successors, (30) Word has length 98 [2022-11-20 20:47:11,657 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 20:47:11,659 INFO L225 Difference]: With dead ends: 458 [2022-11-20 20:47:11,659 INFO L226 Difference]: Without dead ends: 458 [2022-11-20 20:47:11,660 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 307 GetRequests, 233 SyntacticMatches, 2 SemanticMatches, 72 ConstructedPredicates, 24 IntricatePredicates, 0 DeprecatedPredicates, 442 ImplicationChecksByTransitivity, 18.3s TimeCoverageRelationStatistics Valid=242, Invalid=2279, Unknown=25, NotChecked=2856, Total=5402 [2022-11-20 20:47:11,660 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 28 mSDsluCounter, 428 mSDsCounter, 0 mSdLazyCounter, 827 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 460 SdHoareTripleChecker+Invalid, 2914 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 827 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 2063 IncrementalHoareTripleChecker+Unchecked, 2.3s IncrementalHoareTripleChecker+Time [2022-11-20 20:47:11,660 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [28 Valid, 460 Invalid, 2914 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 827 Invalid, 0 Unknown, 2063 Unchecked, 2.3s Time] [2022-11-20 20:47:11,663 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 458 states. [2022-11-20 20:47:11,694 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 458 to 449. [2022-11-20 20:47:11,694 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 449 states, 351 states have (on average 1.0455840455840455) internal successors, (367), 359 states have internal predecessors, (367), 74 states have call successors, (74), 14 states have call predecessors, (74), 22 states have return successors, (147), 75 states have call predecessors, (147), 74 states have call successors, (147) [2022-11-20 20:47:11,696 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 449 states to 449 states and 588 transitions. [2022-11-20 20:47:11,697 INFO L78 Accepts]: Start accepts. Automaton has 449 states and 588 transitions. Word has length 98 [2022-11-20 20:47:11,697 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 20:47:11,697 INFO L495 AbstractCegarLoop]: Abstraction has 449 states and 588 transitions. [2022-11-20 20:47:11,698 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 65 states, 63 states have (on average 2.0952380952380953) internal successors, (132), 62 states have internal predecessors, (132), 15 states have call successors, (15), 3 states have call predecessors, (15), 30 states have return successors, (30), 19 states have call predecessors, (30), 15 states have call successors, (30) [2022-11-20 20:47:11,698 INFO L276 IsEmpty]: Start isEmpty. Operand 449 states and 588 transitions. [2022-11-20 20:47:11,700 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2022-11-20 20:47:11,700 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 20:47:11,700 INFO L195 NwaCegarLoop]: trace histogram [11, 11, 10, 10, 10, 10, 9, 9, 9, 2, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 20:47:11,719 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (115)] Forceful destruction successful, exit code 0 [2022-11-20 20:47:11,925 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (114)] Forceful destruction successful, exit code 0 [2022-11-20 20:47:12,128 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (116)] Forceful destruction successful, exit code 0 [2022-11-20 20:47:12,315 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 115 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt,114 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,116 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:47:12,315 INFO L420 AbstractCegarLoop]: === Iteration 42 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-11-20 20:47:12,316 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 20:47:12,316 INFO L85 PathProgramCache]: Analyzing trace with hash 1793702511, now seen corresponding path program 25 times [2022-11-20 20:47:12,316 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-11-20 20:47:12,316 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2078090617] [2022-11-20 20:47:12,316 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-20 20:47:12,317 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-11-20 20:47:12,317 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat [2022-11-20 20:47:12,318 INFO L229 MonitoredProcess]: Starting monitored process 117 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-11-20 20:47:12,320 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (117)] Waiting until timeout for monitored process [2022-11-20 20:47:12,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:47:12,932 INFO L263 TraceCheckSpWp]: Trace formula consists of 364 conjuncts, 86 conjunts are in the unsatisfiable core [2022-11-20 20:47:12,937 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:47:12,969 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:47:12,979 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:47:13,271 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6850 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6850) |c_#length|)))) is different from true [2022-11-20 20:47:13,294 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:47:13,295 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:47:13,314 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:47:13,315 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:47:13,540 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6851 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6851) |c_#length|)))) is different from true [2022-11-20 20:47:13,576 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:47:13,577 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:47:13,602 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:47:13,602 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:47:13,844 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6852 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6852) |c_#length|)))) is different from true [2022-11-20 20:47:13,872 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:47:13,873 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:47:13,892 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:47:13,892 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:47:14,140 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6853 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6853) |c_#length|)))) is different from true [2022-11-20 20:47:14,165 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:47:14,165 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:47:14,185 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:47:14,185 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:47:14,455 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_6854 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6854))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:47:14,484 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:47:14,485 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:47:14,504 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:47:14,504 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:47:14,777 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6855 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6855) |c_#length|)))) is different from true [2022-11-20 20:47:14,802 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:47:14,803 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:47:14,823 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:47:14,823 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:47:15,128 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6856 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6856) |c_#length|)))) is different from true [2022-11-20 20:47:15,159 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:47:15,159 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:47:15,185 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:47:15,185 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:47:15,957 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6857 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6857) |c_#length|)))) is different from true [2022-11-20 20:47:15,982 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:47:15,983 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:47:16,003 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:47:16,003 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:47:16,131 INFO L134 CoverageAnalysis]: Checked inductivity of 436 backedges. 10 proven. 230 refuted. 0 times theorem prover too weak. 92 trivial. 104 not checked. [2022-11-20 20:47:16,131 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:47:17,024 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-11-20 20:47:17,024 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2078090617] [2022-11-20 20:47:17,025 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2078090617] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:47:17,025 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [2128081377] [2022-11-20 20:47:17,025 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-20 20:47:17,025 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-11-20 20:47:17,025 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 [2022-11-20 20:47:17,026 INFO L229 MonitoredProcess]: Starting monitored process 118 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-11-20 20:47:17,028 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/cvc4 --incremental --print-success --lang smt (118)] Waiting until timeout for monitored process [2022-11-20 20:47:18,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:47:18,190 INFO L263 TraceCheckSpWp]: Trace formula consists of 364 conjuncts, 86 conjunts are in the unsatisfiable core [2022-11-20 20:47:18,194 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:47:18,209 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:47:18,225 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:47:18,364 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6935 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6935) |c_#length|)))) is different from true [2022-11-20 20:47:18,388 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:47:18,389 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:47:18,408 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:47:18,408 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:47:18,532 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6936 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6936) |c_#length|)))) is different from true [2022-11-20 20:47:18,556 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:47:18,557 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:47:18,581 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:47:18,582 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:47:18,702 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6937 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6937))))) is different from true [2022-11-20 20:47:18,731 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:47:18,732 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:47:18,757 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:47:18,757 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:47:18,876 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6938 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6938) |c_#length|)))) is different from true [2022-11-20 20:47:18,908 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:47:18,909 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:47:18,928 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:47:18,929 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:47:19,045 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6939 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6939) |c_#length|)))) is different from true [2022-11-20 20:47:19,077 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:47:19,077 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:47:19,103 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:47:19,103 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:47:19,221 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6940 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6940) |c_#length|)))) is different from true [2022-11-20 20:47:19,248 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:47:19,249 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:47:19,268 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:47:19,268 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:47:19,390 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6941 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6941) |c_#length|)))) is different from true [2022-11-20 20:47:19,415 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:47:19,415 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:47:19,441 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:47:19,441 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:47:19,843 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_6942 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_6942))))) is different from true [2022-11-20 20:47:19,867 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:47:19,868 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:47:19,887 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:47:19,888 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:47:19,918 INFO L134 CoverageAnalysis]: Checked inductivity of 436 backedges. 10 proven. 230 refuted. 0 times theorem prover too weak. 92 trivial. 104 not checked. [2022-11-20 20:47:19,918 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:47:22,503 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [2128081377] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:47:22,504 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1301505215] [2022-11-20 20:47:22,504 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-20 20:47:22,504 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 20:47:22,504 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 [2022-11-20 20:47:22,505 INFO L229 MonitoredProcess]: Starting monitored process 119 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 20:47:22,507 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0bfc2016-d274-48ee-9547-997741d778e8/bin/utaipan-6cKwYrpEi9/z3 -smt2 -in SMTLIB2_COMPLIANT=true (119)] Waiting until timeout for monitored process [2022-11-20 20:47:23,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 20:47:23,070 INFO L263 TraceCheckSpWp]: Trace formula consists of 364 conjuncts, 85 conjunts are in the unsatisfiable core [2022-11-20 20:47:23,074 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 20:47:23,089 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-11-20 20:47:23,099 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-20 20:47:23,235 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_7020 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_7020) |c_#length|)))) is different from true [2022-11-20 20:47:23,267 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:47:23,268 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:47:23,293 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:47:23,293 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:47:23,405 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_7021 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_7021))))) is different from true [2022-11-20 20:47:23,447 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:47:23,448 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:47:23,467 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:47:23,468 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:47:23,588 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_7022 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_7022) |c_#length|)))) is different from true [2022-11-20 20:47:23,623 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:47:23,624 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:47:23,654 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:47:23,654 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:47:23,778 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_7023 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_7023) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:47:23,810 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:47:23,811 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:47:23,830 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:47:23,831 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:47:23,955 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_7024 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_7024) |c_#length|)))) is different from true [2022-11-20 20:47:23,983 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:47:23,984 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:47:24,003 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:47:24,004 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:47:24,124 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_7025 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_7025) |c_#length|)))) is different from true [2022-11-20 20:47:24,155 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:47:24,156 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:47:24,175 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:47:24,175 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:47:24,300 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_7026 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_7026))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:47:24,324 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:47:24,325 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:47:24,344 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:47:24,344 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:47:24,909 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_7027 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_7027))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-11-20 20:47:24,933 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-20 20:47:24,933 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-11-20 20:47:24,959 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-11-20 20:47:24,959 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-11-20 20:47:24,985 INFO L134 CoverageAnalysis]: Checked inductivity of 436 backedges. 16 proven. 244 refuted. 0 times theorem prover too weak. 72 trivial. 104 not checked. [2022-11-20 20:47:24,985 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 20:47:28,252 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1301505215] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 20:47:28,253 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 20:47:28,253 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [32, 32, 34] total 50 [2022-11-20 20:47:28,253 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [922988203] [2022-11-20 20:47:28,253 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 20:47:28,254 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 51 states [2022-11-20 20:47:28,254 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-11-20 20:47:28,254 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 51 interpolants. [2022-11-20 20:47:28,255 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=142, Invalid=742, Unknown=24, NotChecked=1848, Total=2756 [2022-11-20 20:47:28,255 INFO L87 Difference]: Start difference. First operand 449 states and 588 transitions. Second operand has 51 states, 49 states have (on average 2.142857142857143) internal successors, (105), 50 states have internal predecessors, (105), 12 states have call successors, (12), 3 states have call predecessors, (12), 27 states have return successors, (28), 12 states have call predecessors, (28), 12 states have call successors, (28)