./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/memsafety/test-0234-2.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version 38b53e6a Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/memsafety/test-0234-2.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 3248e88e6fd49fdcf0a9f78f1aa9e69276951d353f75f39f6bb30d51b2e53989 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-38b53e6 [2022-11-26 00:19:54,371 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-26 00:19:54,373 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-26 00:19:54,404 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-26 00:19:54,404 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-26 00:19:54,412 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-26 00:19:54,416 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-26 00:19:54,419 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-26 00:19:54,421 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-26 00:19:54,427 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-26 00:19:54,428 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-26 00:19:54,430 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-26 00:19:54,430 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-26 00:19:54,431 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-26 00:19:54,432 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-26 00:19:54,434 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-26 00:19:54,435 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-26 00:19:54,436 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-26 00:19:54,443 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-26 00:19:54,451 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-26 00:19:54,455 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-26 00:19:54,458 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-26 00:19:54,461 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-26 00:19:54,462 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-26 00:19:54,474 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-26 00:19:54,475 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-26 00:19:54,475 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-26 00:19:54,477 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-26 00:19:54,478 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-26 00:19:54,479 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-26 00:19:54,480 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-26 00:19:54,482 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-26 00:19:54,484 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-26 00:19:54,488 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-26 00:19:54,489 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-26 00:19:54,491 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-26 00:19:54,492 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-26 00:19:54,492 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-26 00:19:54,492 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-26 00:19:54,494 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-26 00:19:54,495 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-26 00:19:54,496 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf [2022-11-26 00:19:54,556 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-26 00:19:54,556 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-26 00:19:54,557 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-26 00:19:54,557 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-26 00:19:54,558 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-26 00:19:54,559 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-26 00:19:54,559 INFO L138 SettingsManager]: * User list type=DISABLED [2022-11-26 00:19:54,559 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-11-26 00:19:54,559 INFO L138 SettingsManager]: * Explicit value domain=true [2022-11-26 00:19:54,560 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-11-26 00:19:54,561 INFO L138 SettingsManager]: * Octagon Domain=false [2022-11-26 00:19:54,561 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-11-26 00:19:54,562 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-11-26 00:19:54,562 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-11-26 00:19:54,562 INFO L138 SettingsManager]: * Interval Domain=false [2022-11-26 00:19:54,562 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-11-26 00:19:54,563 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-11-26 00:19:54,563 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-11-26 00:19:54,564 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-26 00:19:54,564 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-26 00:19:54,565 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-26 00:19:54,565 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-26 00:19:54,565 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-26 00:19:54,565 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-26 00:19:54,566 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-26 00:19:54,566 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-26 00:19:54,567 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-11-26 00:19:54,567 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-11-26 00:19:54,567 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-11-26 00:19:54,567 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-26 00:19:54,568 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-11-26 00:19:54,568 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-26 00:19:54,568 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-26 00:19:54,569 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-26 00:19:54,569 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-26 00:19:54,569 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-26 00:19:54,569 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-26 00:19:54,570 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-11-26 00:19:54,570 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-26 00:19:54,570 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-11-26 00:19:54,570 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-26 00:19:54,571 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-11-26 00:19:54,571 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 3248e88e6fd49fdcf0a9f78f1aa9e69276951d353f75f39f6bb30d51b2e53989 [2022-11-26 00:19:54,849 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-26 00:19:54,872 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-26 00:19:54,875 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-26 00:19:54,877 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-26 00:19:54,878 INFO L275 PluginConnector]: CDTParser initialized [2022-11-26 00:19:54,879 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/../../sv-benchmarks/c/memsafety/test-0234-2.i [2022-11-26 00:19:58,063 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-26 00:19:58,374 INFO L351 CDTParser]: Found 1 translation units. [2022-11-26 00:19:58,375 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/sv-benchmarks/c/memsafety/test-0234-2.i [2022-11-26 00:19:58,400 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/data/830db1113/9e18081789244755adb3ccdc9b5978ab/FLAGccca2c933 [2022-11-26 00:19:58,414 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/data/830db1113/9e18081789244755adb3ccdc9b5978ab [2022-11-26 00:19:58,417 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-26 00:19:58,418 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-26 00:19:58,419 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-26 00:19:58,420 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-26 00:19:58,425 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-26 00:19:58,425 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 26.11 12:19:58" (1/1) ... [2022-11-26 00:19:58,427 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@25faea2b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:19:58, skipping insertion in model container [2022-11-26 00:19:58,427 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 26.11 12:19:58" (1/1) ... [2022-11-26 00:19:58,435 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-26 00:19:58,509 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-26 00:19:58,985 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-26 00:19:59,001 INFO L203 MainTranslator]: Completed pre-run [2022-11-26 00:19:59,073 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-26 00:19:59,125 INFO L208 MainTranslator]: Completed translation [2022-11-26 00:19:59,126 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:19:59 WrapperNode [2022-11-26 00:19:59,126 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-26 00:19:59,127 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-26 00:19:59,127 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-26 00:19:59,128 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-26 00:19:59,136 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:19:59" (1/1) ... [2022-11-26 00:19:59,166 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:19:59" (1/1) ... [2022-11-26 00:19:59,218 INFO L138 Inliner]: procedures = 188, calls = 58, calls flagged for inlining = 14, calls inlined = 14, statements flattened = 197 [2022-11-26 00:19:59,221 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-26 00:19:59,222 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-26 00:19:59,222 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-26 00:19:59,223 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-26 00:19:59,231 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:19:59" (1/1) ... [2022-11-26 00:19:59,232 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:19:59" (1/1) ... [2022-11-26 00:19:59,236 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:19:59" (1/1) ... [2022-11-26 00:19:59,236 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:19:59" (1/1) ... [2022-11-26 00:19:59,257 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:19:59" (1/1) ... [2022-11-26 00:19:59,265 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:19:59" (1/1) ... [2022-11-26 00:19:59,267 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:19:59" (1/1) ... [2022-11-26 00:19:59,269 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:19:59" (1/1) ... [2022-11-26 00:19:59,277 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-26 00:19:59,278 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-26 00:19:59,278 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-26 00:19:59,278 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-26 00:19:59,279 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:19:59" (1/1) ... [2022-11-26 00:19:59,285 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-26 00:19:59,296 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:19:59,308 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-26 00:19:59,310 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-26 00:19:59,361 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-11-26 00:19:59,361 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-26 00:19:59,361 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-11-26 00:19:59,361 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-11-26 00:19:59,362 INFO L130 BoogieDeclarations]: Found specification of procedure zalloc_or_die [2022-11-26 00:19:59,362 INFO L138 BoogieDeclarations]: Found implementation of procedure zalloc_or_die [2022-11-26 00:19:59,362 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-11-26 00:19:59,362 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-11-26 00:19:59,362 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-26 00:19:59,362 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-26 00:19:59,363 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-26 00:19:59,567 INFO L235 CfgBuilder]: Building ICFG [2022-11-26 00:19:59,583 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-26 00:20:00,232 INFO L276 CfgBuilder]: Performing block encoding [2022-11-26 00:20:00,346 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-26 00:20:00,348 INFO L300 CfgBuilder]: Removed 10 assume(true) statements. [2022-11-26 00:20:00,356 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.11 12:20:00 BoogieIcfgContainer [2022-11-26 00:20:00,356 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-26 00:20:00,358 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-26 00:20:00,358 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-26 00:20:00,360 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-26 00:20:00,360 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 26.11 12:19:58" (1/3) ... [2022-11-26 00:20:00,361 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5ff40648 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 26.11 12:20:00, skipping insertion in model container [2022-11-26 00:20:00,361 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 12:19:59" (2/3) ... [2022-11-26 00:20:00,361 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5ff40648 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 26.11 12:20:00, skipping insertion in model container [2022-11-26 00:20:00,362 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.11 12:20:00" (3/3) ... [2022-11-26 00:20:00,363 INFO L112 eAbstractionObserver]: Analyzing ICFG test-0234-2.i [2022-11-26 00:20:00,378 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-26 00:20:00,378 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 70 error locations. [2022-11-26 00:20:00,426 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-26 00:20:00,434 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@77ad521d, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-26 00:20:00,434 INFO L358 AbstractCegarLoop]: Starting to check reachability of 70 error locations. [2022-11-26 00:20:00,439 INFO L276 IsEmpty]: Start isEmpty. Operand has 150 states, 72 states have (on average 2.263888888888889) internal successors, (163), 142 states have internal predecessors, (163), 6 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2022-11-26 00:20:00,447 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-11-26 00:20:00,448 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:20:00,448 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-11-26 00:20:00,449 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr32REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 67 more)] === [2022-11-26 00:20:00,455 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:20:00,456 INFO L85 PathProgramCache]: Analyzing trace with hash 343908, now seen corresponding path program 1 times [2022-11-26 00:20:00,468 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:20:00,468 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [601129183] [2022-11-26 00:20:00,469 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:20:00,469 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:20:00,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:20:00,684 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:20:00,685 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:20:00,685 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [601129183] [2022-11-26 00:20:00,687 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [601129183] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-26 00:20:00,687 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-26 00:20:00,687 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-26 00:20:00,690 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1553790893] [2022-11-26 00:20:00,691 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-26 00:20:00,695 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-26 00:20:00,697 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:20:00,745 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-26 00:20:00,745 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-26 00:20:00,749 INFO L87 Difference]: Start difference. First operand has 150 states, 72 states have (on average 2.263888888888889) internal successors, (163), 142 states have internal predecessors, (163), 6 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) Second operand has 2 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:20:00,884 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:20:00,884 INFO L93 Difference]: Finished difference Result 150 states and 165 transitions. [2022-11-26 00:20:00,886 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-26 00:20:00,887 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-11-26 00:20:00,888 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:20:00,901 INFO L225 Difference]: With dead ends: 150 [2022-11-26 00:20:00,901 INFO L226 Difference]: Without dead ends: 149 [2022-11-26 00:20:00,904 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-26 00:20:00,912 INFO L413 NwaCegarLoop]: 141 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 24 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 141 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 24 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-26 00:20:00,913 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 141 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 24 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-26 00:20:00,935 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 149 states. [2022-11-26 00:20:00,958 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 149 to 149. [2022-11-26 00:20:00,959 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 149 states, 72 states have (on average 2.111111111111111) internal successors, (152), 141 states have internal predecessors, (152), 6 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2022-11-26 00:20:00,962 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 164 transitions. [2022-11-26 00:20:00,964 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 164 transitions. Word has length 3 [2022-11-26 00:20:00,964 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:20:00,964 INFO L495 AbstractCegarLoop]: Abstraction has 149 states and 164 transitions. [2022-11-26 00:20:00,965 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:20:00,965 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 164 transitions. [2022-11-26 00:20:00,965 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-11-26 00:20:00,965 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:20:00,966 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-11-26 00:20:00,966 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-26 00:20:00,966 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting zalloc_or_dieErr0ASSERT_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 67 more)] === [2022-11-26 00:20:00,967 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:20:00,967 INFO L85 PathProgramCache]: Analyzing trace with hash 326485871, now seen corresponding path program 1 times [2022-11-26 00:20:00,968 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:20:00,968 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1092975186] [2022-11-26 00:20:00,968 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:20:00,968 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:20:01,003 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-11-26 00:20:01,004 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1828891356] [2022-11-26 00:20:01,004 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:20:01,005 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:20:01,006 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:20:01,012 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:20:01,033 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-26 00:20:01,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:20:01,130 INFO L263 TraceCheckSpWp]: Trace formula consists of 85 conjuncts, 6 conjunts are in the unsatisfiable core [2022-11-26 00:20:01,135 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:20:01,203 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-26 00:20:01,218 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:20:01,218 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-26 00:20:01,218 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:20:01,219 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1092975186] [2022-11-26 00:20:01,219 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-11-26 00:20:01,219 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1828891356] [2022-11-26 00:20:01,220 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1828891356] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-26 00:20:01,220 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-26 00:20:01,220 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-26 00:20:01,221 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2142940746] [2022-11-26 00:20:01,222 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-26 00:20:01,223 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-26 00:20:01,223 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:20:01,224 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-26 00:20:01,224 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-26 00:20:01,225 INFO L87 Difference]: Start difference. First operand 149 states and 164 transitions. Second operand has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:20:01,387 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:20:01,388 INFO L93 Difference]: Finished difference Result 148 states and 163 transitions. [2022-11-26 00:20:01,388 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-26 00:20:01,388 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-11-26 00:20:01,389 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:20:01,390 INFO L225 Difference]: With dead ends: 148 [2022-11-26 00:20:01,390 INFO L226 Difference]: Without dead ends: 148 [2022-11-26 00:20:01,391 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-26 00:20:01,392 INFO L413 NwaCegarLoop]: 136 mSDtfsCounter, 5 mSDsluCounter, 87 mSDsCounter, 0 mSdLazyCounter, 97 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5 SdHoareTripleChecker+Valid, 223 SdHoareTripleChecker+Invalid, 97 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 97 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-26 00:20:01,393 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [5 Valid, 223 Invalid, 97 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 97 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-26 00:20:01,394 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 148 states. [2022-11-26 00:20:01,402 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 148 to 148. [2022-11-26 00:20:01,403 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 148 states, 72 states have (on average 2.0972222222222223) internal successors, (151), 140 states have internal predecessors, (151), 6 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2022-11-26 00:20:01,405 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 148 states to 148 states and 163 transitions. [2022-11-26 00:20:01,405 INFO L78 Accepts]: Start accepts. Automaton has 148 states and 163 transitions. Word has length 5 [2022-11-26 00:20:01,405 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:20:01,406 INFO L495 AbstractCegarLoop]: Abstraction has 148 states and 163 transitions. [2022-11-26 00:20:01,406 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:20:01,406 INFO L276 IsEmpty]: Start isEmpty. Operand 148 states and 163 transitions. [2022-11-26 00:20:01,406 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-11-26 00:20:01,407 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:20:01,407 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1] [2022-11-26 00:20:01,419 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-26 00:20:01,613 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:20:01,614 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting zalloc_or_dieErr1ASSERT_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 67 more)] === [2022-11-26 00:20:01,614 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:20:01,614 INFO L85 PathProgramCache]: Analyzing trace with hash 1531127730, now seen corresponding path program 1 times [2022-11-26 00:20:01,615 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:20:01,615 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1812893815] [2022-11-26 00:20:01,615 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:20:01,615 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:20:01,633 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-11-26 00:20:01,649 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1148250121] [2022-11-26 00:20:01,649 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:20:01,650 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:20:01,650 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:20:01,651 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:20:01,685 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-26 00:20:01,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:20:01,757 INFO L263 TraceCheckSpWp]: Trace formula consists of 87 conjuncts, 20 conjunts are in the unsatisfiable core [2022-11-26 00:20:01,759 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:20:01,829 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-11-26 00:20:01,862 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-26 00:20:01,862 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-26 00:20:01,862 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:20:01,862 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1812893815] [2022-11-26 00:20:01,863 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-11-26 00:20:01,863 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1148250121] [2022-11-26 00:20:01,863 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1148250121] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-26 00:20:01,863 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-26 00:20:01,863 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-26 00:20:01,864 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1222175038] [2022-11-26 00:20:01,864 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-26 00:20:01,864 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-26 00:20:01,864 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:20:01,865 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-26 00:20:01,865 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-26 00:20:01,866 INFO L87 Difference]: Start difference. First operand 148 states and 163 transitions. Second operand has 4 states, 3 states have (on average 1.6666666666666667) internal successors, (5), 3 states have internal predecessors, (5), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:20:02,104 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:20:02,105 INFO L93 Difference]: Finished difference Result 153 states and 168 transitions. [2022-11-26 00:20:02,105 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-26 00:20:02,106 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 1.6666666666666667) internal successors, (5), 3 states have internal predecessors, (5), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-11-26 00:20:02,106 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:20:02,107 INFO L225 Difference]: With dead ends: 153 [2022-11-26 00:20:02,108 INFO L226 Difference]: Without dead ends: 153 [2022-11-26 00:20:02,108 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-26 00:20:02,109 INFO L413 NwaCegarLoop]: 131 mSDtfsCounter, 8 mSDsluCounter, 227 mSDsCounter, 0 mSdLazyCounter, 126 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 358 SdHoareTripleChecker+Invalid, 130 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 126 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-26 00:20:02,110 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [8 Valid, 358 Invalid, 130 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 126 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-26 00:20:02,111 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 153 states. [2022-11-26 00:20:02,120 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 153 to 153. [2022-11-26 00:20:02,121 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 153 states, 76 states have (on average 2.0526315789473686) internal successors, (156), 144 states have internal predecessors, (156), 6 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2022-11-26 00:20:02,123 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 153 states to 153 states and 168 transitions. [2022-11-26 00:20:02,123 INFO L78 Accepts]: Start accepts. Automaton has 153 states and 168 transitions. Word has length 6 [2022-11-26 00:20:02,123 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:20:02,124 INFO L495 AbstractCegarLoop]: Abstraction has 153 states and 168 transitions. [2022-11-26 00:20:02,124 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 1.6666666666666667) internal successors, (5), 3 states have internal predecessors, (5), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-26 00:20:02,124 INFO L276 IsEmpty]: Start isEmpty. Operand 153 states and 168 transitions. [2022-11-26 00:20:02,125 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-11-26 00:20:02,125 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:20:02,126 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:20:02,137 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-26 00:20:02,332 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:20:02,333 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting zalloc_or_dieErr1ASSERT_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 67 more)] === [2022-11-26 00:20:02,334 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:20:02,334 INFO L85 PathProgramCache]: Analyzing trace with hash 1594514815, now seen corresponding path program 1 times [2022-11-26 00:20:02,334 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:20:02,334 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1583213065] [2022-11-26 00:20:02,334 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:20:02,335 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:20:02,382 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-11-26 00:20:02,382 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1069409312] [2022-11-26 00:20:02,383 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:20:02,383 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:20:02,383 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:20:02,384 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:20:02,411 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-26 00:20:02,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:20:02,620 INFO L263 TraceCheckSpWp]: Trace formula consists of 499 conjuncts, 19 conjunts are in the unsatisfiable core [2022-11-26 00:20:02,626 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:20:02,791 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-26 00:20:02,934 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2022-11-26 00:20:05,118 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 31 proven. 0 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2022-11-26 00:20:05,119 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-26 00:20:05,119 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:20:05,119 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1583213065] [2022-11-26 00:20:05,119 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-11-26 00:20:05,120 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1069409312] [2022-11-26 00:20:05,120 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1069409312] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-26 00:20:05,120 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-26 00:20:05,120 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-26 00:20:05,120 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1416453217] [2022-11-26 00:20:05,121 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-26 00:20:05,121 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-26 00:20:05,121 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:20:05,122 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-26 00:20:05,123 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=12, Unknown=1, NotChecked=0, Total=20 [2022-11-26 00:20:05,123 INFO L87 Difference]: Start difference. First operand 153 states and 168 transitions. Second operand has 5 states, 4 states have (on average 5.5) internal successors, (22), 5 states have internal predecessors, (22), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2022-11-26 00:20:11,086 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-11-26 00:20:11,154 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:20:11,154 INFO L93 Difference]: Finished difference Result 157 states and 172 transitions. [2022-11-26 00:20:11,155 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-26 00:20:11,155 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 5.5) internal successors, (22), 5 states have internal predecessors, (22), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) Word has length 45 [2022-11-26 00:20:11,156 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:20:11,157 INFO L225 Difference]: With dead ends: 157 [2022-11-26 00:20:11,157 INFO L226 Difference]: Without dead ends: 155 [2022-11-26 00:20:11,157 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 46 GetRequests, 41 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 4.2s TimeCoverageRelationStatistics Valid=17, Invalid=23, Unknown=2, NotChecked=0, Total=42 [2022-11-26 00:20:11,160 INFO L413 NwaCegarLoop]: 130 mSDtfsCounter, 7 mSDsluCounter, 338 mSDsCounter, 0 mSdLazyCounter, 175 mSolverCounterSat, 5 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7 SdHoareTripleChecker+Valid, 468 SdHoareTripleChecker+Invalid, 182 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 175 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.9s IncrementalHoareTripleChecker+Time [2022-11-26 00:20:11,160 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [7 Valid, 468 Invalid, 182 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 175 Invalid, 2 Unknown, 0 Unchecked, 3.9s Time] [2022-11-26 00:20:11,161 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 155 states. [2022-11-26 00:20:11,168 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 155 to 155. [2022-11-26 00:20:11,169 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 155 states, 78 states have (on average 2.0256410256410255) internal successors, (158), 146 states have internal predecessors, (158), 6 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2022-11-26 00:20:11,176 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 155 states to 155 states and 170 transitions. [2022-11-26 00:20:11,176 INFO L78 Accepts]: Start accepts. Automaton has 155 states and 170 transitions. Word has length 45 [2022-11-26 00:20:11,176 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:20:11,176 INFO L495 AbstractCegarLoop]: Abstraction has 155 states and 170 transitions. [2022-11-26 00:20:11,177 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 5.5) internal successors, (22), 5 states have internal predecessors, (22), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 1 states have call successors, (5) [2022-11-26 00:20:11,177 INFO L276 IsEmpty]: Start isEmpty. Operand 155 states and 170 transitions. [2022-11-26 00:20:11,178 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-26 00:20:11,178 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:20:11,178 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:20:11,194 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-26 00:20:11,379 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:20:11,379 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting zalloc_or_dieErr1ASSERT_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 67 more)] === [2022-11-26 00:20:11,380 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:20:11,380 INFO L85 PathProgramCache]: Analyzing trace with hash -1996657454, now seen corresponding path program 1 times [2022-11-26 00:20:11,380 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:20:11,380 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2045840092] [2022-11-26 00:20:11,380 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:20:11,381 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:20:11,435 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-11-26 00:20:11,435 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [279496930] [2022-11-26 00:20:11,435 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:20:11,436 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:20:11,436 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:20:11,437 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:20:11,457 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-26 00:20:11,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:20:11,804 INFO L263 TraceCheckSpWp]: Trace formula consists of 574 conjuncts, 22 conjunts are in the unsatisfiable core [2022-11-26 00:20:11,809 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:20:11,840 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-26 00:20:11,863 INFO L134 CoverageAnalysis]: Checked inductivity of 100 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 85 trivial. 0 not checked. [2022-11-26 00:20:11,863 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-26 00:20:11,863 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:20:11,863 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2045840092] [2022-11-26 00:20:11,863 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-11-26 00:20:11,864 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [279496930] [2022-11-26 00:20:11,864 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [279496930] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-26 00:20:11,864 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-26 00:20:11,864 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-26 00:20:11,864 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [424562434] [2022-11-26 00:20:11,864 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-26 00:20:11,865 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-26 00:20:11,865 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:20:11,865 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-26 00:20:11,866 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-26 00:20:11,866 INFO L87 Difference]: Start difference. First operand 155 states and 170 transitions. Second operand has 4 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 1 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-11-26 00:20:12,052 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:20:12,052 INFO L93 Difference]: Finished difference Result 154 states and 169 transitions. [2022-11-26 00:20:12,052 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-26 00:20:12,053 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 1 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) Word has length 50 [2022-11-26 00:20:12,053 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:20:12,054 INFO L225 Difference]: With dead ends: 154 [2022-11-26 00:20:12,054 INFO L226 Difference]: Without dead ends: 154 [2022-11-26 00:20:12,054 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 47 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-26 00:20:12,055 INFO L413 NwaCegarLoop]: 138 mSDtfsCounter, 8 mSDsluCounter, 234 mSDsCounter, 0 mSdLazyCounter, 118 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 372 SdHoareTripleChecker+Invalid, 118 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 118 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-26 00:20:12,056 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [8 Valid, 372 Invalid, 118 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 118 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-26 00:20:12,057 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 154 states. [2022-11-26 00:20:12,063 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 154 to 154. [2022-11-26 00:20:12,064 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 154 states, 78 states have (on average 2.0128205128205128) internal successors, (157), 145 states have internal predecessors, (157), 6 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2022-11-26 00:20:12,075 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 154 states to 154 states and 169 transitions. [2022-11-26 00:20:12,076 INFO L78 Accepts]: Start accepts. Automaton has 154 states and 169 transitions. Word has length 50 [2022-11-26 00:20:12,076 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:20:12,076 INFO L495 AbstractCegarLoop]: Abstraction has 154 states and 169 transitions. [2022-11-26 00:20:12,076 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 6.333333333333333) internal successors, (19), 3 states have internal predecessors, (19), 1 states have call successors, (6), 2 states have call predecessors, (6), 1 states have return successors, (5), 1 states have call predecessors, (5), 1 states have call successors, (5) [2022-11-26 00:20:12,077 INFO L276 IsEmpty]: Start isEmpty. Operand 154 states and 169 transitions. [2022-11-26 00:20:12,078 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-11-26 00:20:12,079 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:20:12,080 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:20:12,090 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2022-11-26 00:20:12,288 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:20:12,289 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 67 more)] === [2022-11-26 00:20:12,289 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:20:12,289 INFO L85 PathProgramCache]: Analyzing trace with hash -1064292080, now seen corresponding path program 1 times [2022-11-26 00:20:12,289 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:20:12,290 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1637752148] [2022-11-26 00:20:12,290 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:20:12,290 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:20:12,342 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-11-26 00:20:12,344 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [541085768] [2022-11-26 00:20:12,345 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:20:12,345 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:20:12,345 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:20:12,346 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:20:12,376 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-26 00:20:12,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:20:12,574 INFO L263 TraceCheckSpWp]: Trace formula consists of 617 conjuncts, 22 conjunts are in the unsatisfiable core [2022-11-26 00:20:12,582 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:20:12,652 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_217 Int)) (= |c_#valid| (store |c_old(#valid)| |c_zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_217))) is different from true [2022-11-26 00:20:12,749 INFO L321 Elim1Store]: treesize reduction 15, result has 25.0 percent of original size [2022-11-26 00:20:12,750 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 14 [2022-11-26 00:20:12,765 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 61 proven. 6 refuted. 0 times theorem prover too weak. 58 trivial. 1 not checked. [2022-11-26 00:20:12,765 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:20:13,013 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-26 00:20:13,013 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 11 [2022-11-26 00:20:13,037 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 61 proven. 7 refuted. 0 times theorem prover too weak. 58 trivial. 0 not checked. [2022-11-26 00:20:13,037 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:20:13,038 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1637752148] [2022-11-26 00:20:13,038 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-11-26 00:20:13,038 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [541085768] [2022-11-26 00:20:13,038 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [541085768] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:20:13,038 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1374646081] [2022-11-26 00:20:13,059 INFO L159 IcfgInterpreter]: Started Sifa with 24 locations of interest [2022-11-26 00:20:13,059 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:20:13,064 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:20:13,070 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:20:13,070 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:20:13,153 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:20:13,162 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:20:13,193 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:20:13,204 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:20:13,217 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:20:13,307 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-11-26 00:20:13,326 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 197 treesize of output 196 [2022-11-26 00:20:13,344 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-11-26 00:20:13,435 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:20:13,443 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:20:13,451 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:20:13,487 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:20:13,500 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:20:13,546 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:20:13,559 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:20:14,862 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 80 for LOIs [2022-11-26 00:20:14,917 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:20:14,944 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:20:15,098 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:20:15,124 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:20:15,154 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:20:15,232 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:20:15,243 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:20:15,255 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:20:15,281 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:20:22,161 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2336#(and (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (<= 4 |ULTIMATE.start_l3_insert_~list#1.offset|) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (= |ULTIMATE.start_l4_insert_~item~0#1.offset| 0) (= |ULTIMATE.start_l4_insert_~list#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (= |~#list~0.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l2_insert_~list#1.offset|) (= |ULTIMATE.start_l3_insert_~item~1#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (= |ULTIMATE.start_l2_insert_~item~2#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (<= |ULTIMATE.start_l2_insert_~list#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (= |ULTIMATE.start_l0_insert_~item~4#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= |ULTIMATE.start_l1_insert_~list#1.offset| 4) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (<= 0 |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l4_insert_#t~ret7#1.base| 0)) (<= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (<= |ULTIMATE.start_l4_insert_~list#1.offset| 0) (= |ULTIMATE.start_l0_insert_#in~list#1.base| |~#list~0.base|) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= |ULTIMATE.start_l0_insert_~list#1.base| |ULTIMATE.start_l0_insert_#in~list#1.base|) (not (= (select |#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1)) (= |ULTIMATE.start_l4_insert_#t~ret7#1.offset| 0) (<= 0 |ULTIMATE.start_l4_insert_~list#1.offset|) (= |ULTIMATE.start_l0_insert_~item~4#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (<= 4 |ULTIMATE.start_l1_insert_~list#1.offset|) (<= 3 |ULTIMATE.start_l0_insert_~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= (+ |ULTIMATE.start_l0_insert_~item~4#1.offset| 4) |ULTIMATE.start_l1_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| |ULTIMATE.start_l2_insert_#in~list#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_l4_insert_#in~list#1.offset| 0) (<= |ULTIMATE.start_l3_insert_~list#1.offset| 4) (= |ULTIMATE.start_l2_insert_~item~2#1.offset| 0) (= (+ |ULTIMATE.start_l2_insert_~item~2#1.offset| 4) |ULTIMATE.start_l3_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l4_insert_#in~list#1.offset|) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| 0) (< 0 |#StackHeapBarrier|) (= |#NULL.base| 0))' at error location [2022-11-26 00:20:22,162 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:20:22,162 INFO L184 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2022-11-26 00:20:22,162 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 8] total 11 [2022-11-26 00:20:22,163 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1172177778] [2022-11-26 00:20:22,163 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2022-11-26 00:20:22,164 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-11-26 00:20:22,164 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:20:22,165 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-11-26 00:20:22,167 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=152, Invalid=907, Unknown=1, NotChecked=62, Total=1122 [2022-11-26 00:20:22,167 INFO L87 Difference]: Start difference. First operand 154 states and 169 transitions. Second operand has 12 states, 10 states have (on average 3.2) internal successors, (32), 10 states have internal predecessors, (32), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-26 00:20:22,811 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:20:22,811 INFO L93 Difference]: Finished difference Result 187 states and 206 transitions. [2022-11-26 00:20:22,812 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-26 00:20:22,812 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 10 states have (on average 3.2) internal successors, (32), 10 states have internal predecessors, (32), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 54 [2022-11-26 00:20:22,813 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:20:22,814 INFO L225 Difference]: With dead ends: 187 [2022-11-26 00:20:22,814 INFO L226 Difference]: Without dead ends: 187 [2022-11-26 00:20:22,815 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 165 GetRequests, 120 SyntacticMatches, 9 SemanticMatches, 36 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 266 ImplicationChecksByTransitivity, 7.1s TimeCoverageRelationStatistics Valid=182, Invalid=1153, Unknown=1, NotChecked=70, Total=1406 [2022-11-26 00:20:22,816 INFO L413 NwaCegarLoop]: 115 mSDtfsCounter, 92 mSDsluCounter, 620 mSDsCounter, 0 mSdLazyCounter, 581 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 92 SdHoareTripleChecker+Valid, 735 SdHoareTripleChecker+Invalid, 788 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 581 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 184 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-26 00:20:22,816 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [92 Valid, 735 Invalid, 788 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 581 Invalid, 0 Unknown, 184 Unchecked, 0.5s Time] [2022-11-26 00:20:22,819 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 187 states. [2022-11-26 00:20:22,831 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 187 to 152. [2022-11-26 00:20:22,832 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 152 states, 78 states have (on average 1.9871794871794872) internal successors, (155), 143 states have internal predecessors, (155), 6 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2022-11-26 00:20:22,833 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 152 states to 152 states and 167 transitions. [2022-11-26 00:20:22,833 INFO L78 Accepts]: Start accepts. Automaton has 152 states and 167 transitions. Word has length 54 [2022-11-26 00:20:22,834 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:20:22,834 INFO L495 AbstractCegarLoop]: Abstraction has 152 states and 167 transitions. [2022-11-26 00:20:22,834 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 10 states have (on average 3.2) internal successors, (32), 10 states have internal predecessors, (32), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-26 00:20:22,834 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 167 transitions. [2022-11-26 00:20:22,850 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-11-26 00:20:22,857 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:20:22,858 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:20:22,870 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-11-26 00:20:23,065 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable5 [2022-11-26 00:20:23,066 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 67 more)] === [2022-11-26 00:20:23,066 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:20:23,066 INFO L85 PathProgramCache]: Analyzing trace with hash -1064292079, now seen corresponding path program 1 times [2022-11-26 00:20:23,067 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:20:23,067 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1065267951] [2022-11-26 00:20:23,067 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:20:23,067 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:20:23,091 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-11-26 00:20:23,091 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [668177591] [2022-11-26 00:20:23,091 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:20:23,091 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:20:23,092 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:20:23,093 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:20:23,113 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-11-26 00:20:23,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:20:23,496 INFO L263 TraceCheckSpWp]: Trace formula consists of 617 conjuncts, 25 conjunts are in the unsatisfiable core [2022-11-26 00:20:23,500 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:20:23,537 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-26 00:20:23,572 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:20:23,667 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 67 proven. 9 refuted. 0 times theorem prover too weak. 50 trivial. 0 not checked. [2022-11-26 00:20:23,668 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:20:23,967 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 28 proven. 8 refuted. 0 times theorem prover too weak. 90 trivial. 0 not checked. [2022-11-26 00:20:23,967 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:20:23,967 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1065267951] [2022-11-26 00:20:23,967 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-11-26 00:20:23,967 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [668177591] [2022-11-26 00:20:23,968 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [668177591] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:20:23,968 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [965826155] [2022-11-26 00:20:23,974 INFO L159 IcfgInterpreter]: Started Sifa with 24 locations of interest [2022-11-26 00:20:23,974 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:20:23,975 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:20:23,975 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:20:23,975 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:20:24,034 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:20:24,043 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:20:24,072 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:20:24,083 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:20:24,096 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:20:24,157 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 197 treesize of output 196 [2022-11-26 00:20:24,172 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-11-26 00:20:24,186 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-11-26 00:20:24,257 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:20:24,268 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:20:24,279 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:20:24,323 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:20:24,334 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:20:24,372 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:20:24,378 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:20:25,664 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 80 for LOIs [2022-11-26 00:20:25,720 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:20:25,738 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:20:25,884 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:20:25,919 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:20:25,939 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:20:26,023 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:20:26,034 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:20:26,046 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:20:26,058 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:20:32,520 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3035#(and (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (<= 4 |ULTIMATE.start_l3_insert_~list#1.offset|) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (= |ULTIMATE.start_l4_insert_~item~0#1.offset| 0) (= |ULTIMATE.start_l4_insert_~list#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (= |~#list~0.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l2_insert_~list#1.offset|) (= |ULTIMATE.start_l3_insert_~item~1#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (= |ULTIMATE.start_l2_insert_~item~2#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (<= |ULTIMATE.start_l2_insert_~list#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (= |ULTIMATE.start_l0_insert_~item~4#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= |ULTIMATE.start_l1_insert_~list#1.offset| 4) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (<= 0 |ULTIMATE.start_l0_insert_#in~list#1.offset|) (< (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l4_insert_#t~ret7#1.base| 0)) (<= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (<= |ULTIMATE.start_l4_insert_~list#1.offset| 0) (= |ULTIMATE.start_l0_insert_#in~list#1.base| |~#list~0.base|) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= |ULTIMATE.start_l0_insert_~list#1.base| |ULTIMATE.start_l0_insert_#in~list#1.base|) (= |ULTIMATE.start_l4_insert_#t~ret7#1.offset| 0) (<= 0 |ULTIMATE.start_l4_insert_~list#1.offset|) (= |ULTIMATE.start_l0_insert_~item~4#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (<= 4 |ULTIMATE.start_l1_insert_~list#1.offset|) (<= 3 |ULTIMATE.start_l0_insert_~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= (+ |ULTIMATE.start_l0_insert_~item~4#1.offset| 4) |ULTIMATE.start_l1_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| |ULTIMATE.start_l2_insert_#in~list#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_l4_insert_#in~list#1.offset| 0) (<= |ULTIMATE.start_l3_insert_~list#1.offset| 4) (= |ULTIMATE.start_l2_insert_~item~2#1.offset| 0) (= (+ |ULTIMATE.start_l2_insert_~item~2#1.offset| 4) |ULTIMATE.start_l3_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l4_insert_#in~list#1.offset|) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| 0) (< 0 |#StackHeapBarrier|) (= |#NULL.base| 0))' at error location [2022-11-26 00:20:32,520 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:20:32,520 INFO L184 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2022-11-26 00:20:32,521 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 6] total 11 [2022-11-26 00:20:32,521 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1511213863] [2022-11-26 00:20:32,521 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2022-11-26 00:20:32,522 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-11-26 00:20:32,522 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:20:32,523 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-11-26 00:20:32,523 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=162, Invalid=894, Unknown=0, NotChecked=0, Total=1056 [2022-11-26 00:20:32,524 INFO L87 Difference]: Start difference. First operand 152 states and 167 transitions. Second operand has 11 states, 9 states have (on average 3.7777777777777777) internal successors, (34), 11 states have internal predecessors, (34), 2 states have call successors, (7), 2 states have call predecessors, (7), 4 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-11-26 00:20:33,199 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:20:33,200 INFO L93 Difference]: Finished difference Result 162 states and 179 transitions. [2022-11-26 00:20:33,200 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-26 00:20:33,201 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 9 states have (on average 3.7777777777777777) internal successors, (34), 11 states have internal predecessors, (34), 2 states have call successors, (7), 2 states have call predecessors, (7), 4 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 54 [2022-11-26 00:20:33,201 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:20:33,202 INFO L225 Difference]: With dead ends: 162 [2022-11-26 00:20:33,202 INFO L226 Difference]: Without dead ends: 158 [2022-11-26 00:20:33,203 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 166 GetRequests, 123 SyntacticMatches, 6 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 395 ImplicationChecksByTransitivity, 6.8s TimeCoverageRelationStatistics Valid=215, Invalid=1267, Unknown=0, NotChecked=0, Total=1482 [2022-11-26 00:20:33,204 INFO L413 NwaCegarLoop]: 128 mSDtfsCounter, 11 mSDsluCounter, 913 mSDsCounter, 0 mSdLazyCounter, 392 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 11 SdHoareTripleChecker+Valid, 1041 SdHoareTripleChecker+Invalid, 403 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 392 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-26 00:20:33,204 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [11 Valid, 1041 Invalid, 403 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 392 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-26 00:20:33,205 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 158 states. [2022-11-26 00:20:33,209 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 158 to 158. [2022-11-26 00:20:33,210 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 158 states, 84 states have (on average 1.9166666666666667) internal successors, (161), 149 states have internal predecessors, (161), 6 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2022-11-26 00:20:33,211 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 158 states to 158 states and 173 transitions. [2022-11-26 00:20:33,211 INFO L78 Accepts]: Start accepts. Automaton has 158 states and 173 transitions. Word has length 54 [2022-11-26 00:20:33,212 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:20:33,212 INFO L495 AbstractCegarLoop]: Abstraction has 158 states and 173 transitions. [2022-11-26 00:20:33,212 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 9 states have (on average 3.7777777777777777) internal successors, (34), 11 states have internal predecessors, (34), 2 states have call successors, (7), 2 states have call predecessors, (7), 4 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-11-26 00:20:33,212 INFO L276 IsEmpty]: Start isEmpty. Operand 158 states and 173 transitions. [2022-11-26 00:20:33,214 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2022-11-26 00:20:33,214 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:20:33,214 INFO L195 NwaCegarLoop]: trace histogram [24, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:20:33,228 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2022-11-26 00:20:33,428 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2022-11-26 00:20:33,429 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 67 more)] === [2022-11-26 00:20:33,429 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:20:33,429 INFO L85 PathProgramCache]: Analyzing trace with hash 349084997, now seen corresponding path program 2 times [2022-11-26 00:20:33,430 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:20:33,430 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1304482454] [2022-11-26 00:20:33,430 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:20:33,430 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:20:33,482 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-11-26 00:20:33,483 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1229250100] [2022-11-26 00:20:33,483 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-26 00:20:33,483 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:20:33,483 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:20:33,489 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:20:33,509 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-11-26 00:20:33,979 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-26 00:20:33,980 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:20:33,982 INFO L263 TraceCheckSpWp]: Trace formula consists of 365 conjuncts, 46 conjunts are in the unsatisfiable core [2022-11-26 00:20:33,986 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:20:34,006 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-26 00:20:34,014 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-26 00:20:34,182 WARN L859 $PredicateComparison]: unable to prove that (exists ((|zalloc_or_die_calloc_model_~ptr~0#1.base| Int)) (and (exists ((v_ArrVal_634 Int)) (= (store |c_old(#length)| |zalloc_or_die_calloc_model_~ptr~0#1.base| v_ArrVal_634) |c_#length|)) (= (select |c_old(#valid)| |zalloc_or_die_calloc_model_~ptr~0#1.base|) 0))) is different from true [2022-11-26 00:20:34,232 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:20:34,233 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-11-26 00:20:34,245 INFO L321 Elim1Store]: treesize reduction 4, result has 50.0 percent of original size [2022-11-26 00:20:34,245 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 11 [2022-11-26 00:20:34,265 INFO L134 CoverageAnalysis]: Checked inductivity of 495 backedges. 229 proven. 0 refuted. 0 times theorem prover too weak. 238 trivial. 28 not checked. [2022-11-26 00:20:34,265 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:20:36,401 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:20:36,402 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1304482454] [2022-11-26 00:20:36,402 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-11-26 00:20:36,402 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1229250100] [2022-11-26 00:20:36,402 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1229250100] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:20:36,402 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [225329246] [2022-11-26 00:20:36,404 INFO L159 IcfgInterpreter]: Started Sifa with 24 locations of interest [2022-11-26 00:20:36,404 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:20:36,404 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:20:36,404 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:20:36,404 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:20:36,463 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:20:36,471 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:20:36,492 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:20:36,504 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:20:36,516 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:20:36,573 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-11-26 00:20:36,586 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 197 treesize of output 196 [2022-11-26 00:20:36,599 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-11-26 00:20:36,660 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:20:36,666 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:20:36,673 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:20:36,701 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:20:36,711 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:20:36,747 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:20:36,753 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:20:37,933 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 80 for LOIs [2022-11-26 00:20:37,968 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:20:38,001 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:20:38,107 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:20:38,168 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:20:38,205 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:20:38,255 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:20:38,270 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:20:38,279 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:20:38,291 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:20:44,726 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3620#(and (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (<= 4 |ULTIMATE.start_l3_insert_~list#1.offset|) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (= |ULTIMATE.start_l4_insert_~item~0#1.offset| 0) (= |ULTIMATE.start_l4_insert_~list#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (= |~#list~0.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l2_insert_~list#1.offset|) (= |ULTIMATE.start_l3_insert_~item~1#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (= |ULTIMATE.start_l2_insert_~item~2#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (<= |ULTIMATE.start_l2_insert_~list#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (= |ULTIMATE.start_l0_insert_~item~4#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= |ULTIMATE.start_l1_insert_~list#1.offset| 4) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (<= 0 |ULTIMATE.start_l0_insert_#in~list#1.offset|) (< (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l4_insert_#t~ret7#1.base| 0)) (<= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (<= |ULTIMATE.start_l4_insert_~list#1.offset| 0) (= |ULTIMATE.start_l0_insert_#in~list#1.base| |~#list~0.base|) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= |ULTIMATE.start_l0_insert_~list#1.base| |ULTIMATE.start_l0_insert_#in~list#1.base|) (= |ULTIMATE.start_l4_insert_#t~ret7#1.offset| 0) (<= 0 |ULTIMATE.start_l4_insert_~list#1.offset|) (= |ULTIMATE.start_l0_insert_~item~4#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (<= 4 |ULTIMATE.start_l1_insert_~list#1.offset|) (<= 3 |ULTIMATE.start_l0_insert_~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= (+ |ULTIMATE.start_l0_insert_~item~4#1.offset| 4) |ULTIMATE.start_l1_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| |ULTIMATE.start_l2_insert_#in~list#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_l4_insert_#in~list#1.offset| 0) (<= |ULTIMATE.start_l3_insert_~list#1.offset| 4) (= |ULTIMATE.start_l2_insert_~item~2#1.offset| 0) (= (+ |ULTIMATE.start_l2_insert_~item~2#1.offset| 4) |ULTIMATE.start_l3_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l4_insert_#in~list#1.offset|) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| 0) (< 0 |#StackHeapBarrier|) (= |#NULL.base| 0))' at error location [2022-11-26 00:20:44,726 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:20:44,727 INFO L184 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2022-11-26 00:20:44,727 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9] total 9 [2022-11-26 00:20:44,727 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [617673190] [2022-11-26 00:20:44,727 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2022-11-26 00:20:44,728 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-26 00:20:44,728 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:20:44,728 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-26 00:20:44,729 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=151, Invalid=908, Unknown=1, NotChecked=62, Total=1122 [2022-11-26 00:20:44,729 INFO L87 Difference]: Start difference. First operand 158 states and 173 transitions. Second operand has 10 states, 7 states have (on average 3.857142857142857) internal successors, (27), 7 states have internal predecessors, (27), 2 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-26 00:20:45,575 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:20:45,576 INFO L93 Difference]: Finished difference Result 197 states and 219 transitions. [2022-11-26 00:20:45,576 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-26 00:20:45,576 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 7 states have (on average 3.857142857142857) internal successors, (27), 7 states have internal predecessors, (27), 2 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 72 [2022-11-26 00:20:45,577 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:20:45,579 INFO L225 Difference]: With dead ends: 197 [2022-11-26 00:20:45,579 INFO L226 Difference]: Without dead ends: 197 [2022-11-26 00:20:45,580 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 148 GetRequests, 107 SyntacticMatches, 6 SemanticMatches, 35 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 257 ImplicationChecksByTransitivity, 8.7s TimeCoverageRelationStatistics Valid=166, Invalid=1097, Unknown=1, NotChecked=68, Total=1332 [2022-11-26 00:20:45,584 INFO L413 NwaCegarLoop]: 86 mSDtfsCounter, 246 mSDsluCounter, 373 mSDsCounter, 0 mSdLazyCounter, 708 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 246 SdHoareTripleChecker+Valid, 459 SdHoareTripleChecker+Invalid, 892 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 708 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 173 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-26 00:20:45,585 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [246 Valid, 459 Invalid, 892 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 708 Invalid, 0 Unknown, 173 Unchecked, 0.7s Time] [2022-11-26 00:20:45,586 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 197 states. [2022-11-26 00:20:45,590 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 197 to 156. [2022-11-26 00:20:45,590 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 156 states, 84 states have (on average 1.8928571428571428) internal successors, (159), 147 states have internal predecessors, (159), 6 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2022-11-26 00:20:45,591 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 156 states to 156 states and 171 transitions. [2022-11-26 00:20:45,591 INFO L78 Accepts]: Start accepts. Automaton has 156 states and 171 transitions. Word has length 72 [2022-11-26 00:20:45,592 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:20:45,592 INFO L495 AbstractCegarLoop]: Abstraction has 156 states and 171 transitions. [2022-11-26 00:20:45,592 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 7 states have (on average 3.857142857142857) internal successors, (27), 7 states have internal predecessors, (27), 2 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-26 00:20:45,592 INFO L276 IsEmpty]: Start isEmpty. Operand 156 states and 171 transitions. [2022-11-26 00:20:45,597 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2022-11-26 00:20:45,597 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:20:45,598 INFO L195 NwaCegarLoop]: trace histogram [24, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:20:45,610 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2022-11-26 00:20:45,801 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:20:45,801 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 67 more)] === [2022-11-26 00:20:45,802 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:20:45,802 INFO L85 PathProgramCache]: Analyzing trace with hash -2063257611, now seen corresponding path program 1 times [2022-11-26 00:20:45,802 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:20:45,802 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [273433589] [2022-11-26 00:20:45,802 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:20:45,802 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:20:45,849 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-11-26 00:20:45,853 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [586129084] [2022-11-26 00:20:45,853 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:20:45,854 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:20:45,854 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:20:45,855 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:20:45,862 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-11-26 00:20:46,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:20:46,171 INFO L263 TraceCheckSpWp]: Trace formula consists of 903 conjuncts, 33 conjunts are in the unsatisfiable core [2022-11-26 00:20:46,175 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:20:46,244 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_962 Int)) (= |c_#valid| (store |c_old(#valid)| |c_zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_962))) is different from true [2022-11-26 00:20:46,322 INFO L321 Elim1Store]: treesize reduction 15, result has 25.0 percent of original size [2022-11-26 00:20:46,322 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 14 [2022-11-26 00:20:46,345 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_963 Int)) (= |c_#valid| (store |c_old(#valid)| |c_zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_963))) is different from true [2022-11-26 00:20:46,450 INFO L321 Elim1Store]: treesize reduction 15, result has 25.0 percent of original size [2022-11-26 00:20:46,451 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 14 [2022-11-26 00:20:46,475 INFO L134 CoverageAnalysis]: Checked inductivity of 495 backedges. 260 proven. 54 refuted. 0 times theorem prover too weak. 178 trivial. 3 not checked. [2022-11-26 00:20:46,476 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:20:46,909 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-11-26 00:20:46,910 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 11 [2022-11-26 00:20:46,926 INFO L134 CoverageAnalysis]: Checked inductivity of 495 backedges. 260 proven. 56 refuted. 0 times theorem prover too weak. 179 trivial. 0 not checked. [2022-11-26 00:20:46,926 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:20:46,927 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [273433589] [2022-11-26 00:20:46,927 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-11-26 00:20:46,927 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [586129084] [2022-11-26 00:20:46,927 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [586129084] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:20:46,927 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [485176974] [2022-11-26 00:20:46,930 INFO L159 IcfgInterpreter]: Started Sifa with 25 locations of interest [2022-11-26 00:20:46,930 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:20:46,930 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:20:46,931 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:20:46,931 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:20:46,961 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:20:46,967 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:20:46,988 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:20:46,998 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:20:47,010 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:20:47,057 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 197 treesize of output 196 [2022-11-26 00:20:47,071 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-11-26 00:20:47,084 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-11-26 00:20:47,147 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:20:47,153 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:20:47,159 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:20:47,183 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:20:47,191 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:20:47,224 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:20:47,229 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:20:48,181 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:20:48,197 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:20:48,223 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 1 [2022-11-26 00:20:48,373 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 80 for LOIs [2022-11-26 00:20:48,409 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:20:48,432 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:20:48,537 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:20:48,574 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:20:48,606 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:20:48,654 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:20:48,663 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:20:48,673 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:20:48,687 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:20:55,505 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4447#(and (not (= (select |#valid| |ULTIMATE.start_l4_insert_~list#1.base|) 1)) (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (<= 4 |ULTIMATE.start_l3_insert_~list#1.offset|) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (= |ULTIMATE.start_l4_insert_~item~0#1.offset| 0) (= |ULTIMATE.start_l4_insert_~list#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (<= (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (= |~#list~0.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l2_insert_~list#1.offset|) (= |ULTIMATE.start_l3_insert_~item~1#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (= (select |#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (= |ULTIMATE.start_l2_insert_~item~2#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (<= |ULTIMATE.start_l2_insert_~list#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (= |ULTIMATE.start_l0_insert_~item~4#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= |ULTIMATE.start_l1_insert_~list#1.offset| 4) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (<= 0 |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (<= |ULTIMATE.start_l4_insert_~list#1.offset| 0) (= |ULTIMATE.start_l0_insert_#in~list#1.base| |~#list~0.base|) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= |ULTIMATE.start_l0_insert_~list#1.base| |ULTIMATE.start_l0_insert_#in~list#1.base|) (not (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0)) (<= 0 |ULTIMATE.start_l4_insert_~list#1.offset|) (= |ULTIMATE.start_l0_insert_~item~4#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (<= 4 |ULTIMATE.start_l1_insert_~list#1.offset|) (<= 3 |ULTIMATE.start_l0_insert_~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= (+ |ULTIMATE.start_l0_insert_~item~4#1.offset| 4) |ULTIMATE.start_l1_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| |ULTIMATE.start_l2_insert_#in~list#1.offset|) (= |#NULL.offset| 0) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0) (<= |ULTIMATE.start_l4_insert_#in~list#1.offset| 0) (<= |ULTIMATE.start_l3_insert_~list#1.offset| 4) (= |ULTIMATE.start_l2_insert_~item~2#1.offset| 0) (= (+ |ULTIMATE.start_l2_insert_~item~2#1.offset| 4) |ULTIMATE.start_l3_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l4_insert_#in~list#1.offset|) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| 0) (< 0 |#StackHeapBarrier|) (= |#NULL.base| 0))' at error location [2022-11-26 00:20:55,505 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:20:55,506 INFO L184 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2022-11-26 00:20:55,506 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 9] total 13 [2022-11-26 00:20:55,506 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [814956934] [2022-11-26 00:20:55,506 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2022-11-26 00:20:55,507 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-26 00:20:55,507 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:20:55,507 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-26 00:20:55,508 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=167, Invalid=1029, Unknown=2, NotChecked=134, Total=1332 [2022-11-26 00:20:55,508 INFO L87 Difference]: Start difference. First operand 156 states and 171 transitions. Second operand has 14 states, 12 states have (on average 2.9166666666666665) internal successors, (35), 12 states have internal predecessors, (35), 2 states have call successors, (8), 3 states have call predecessors, (8), 4 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) [2022-11-26 00:20:56,254 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:20:56,254 INFO L93 Difference]: Finished difference Result 188 states and 207 transitions. [2022-11-26 00:20:56,255 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-26 00:20:56,256 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 12 states have (on average 2.9166666666666665) internal successors, (35), 12 states have internal predecessors, (35), 2 states have call successors, (8), 3 states have call predecessors, (8), 4 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) Word has length 73 [2022-11-26 00:20:56,256 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:20:56,258 INFO L225 Difference]: With dead ends: 188 [2022-11-26 00:20:56,258 INFO L226 Difference]: Without dead ends: 188 [2022-11-26 00:20:56,259 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 225 GetRequests, 170 SyntacticMatches, 14 SemanticMatches, 41 ConstructedPredicates, 2 IntricatePredicates, 0 DeprecatedPredicates, 334 ImplicationChecksByTransitivity, 7.2s TimeCoverageRelationStatistics Valid=205, Invalid=1441, Unknown=2, NotChecked=158, Total=1806 [2022-11-26 00:20:56,259 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 168 mSDsluCounter, 713 mSDsCounter, 0 mSdLazyCounter, 715 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 168 SdHoareTripleChecker+Valid, 821 SdHoareTripleChecker+Invalid, 1123 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 715 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 384 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-26 00:20:56,260 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [168 Valid, 821 Invalid, 1123 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 715 Invalid, 0 Unknown, 384 Unchecked, 0.6s Time] [2022-11-26 00:20:56,261 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 188 states. [2022-11-26 00:20:56,264 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 188 to 153. [2022-11-26 00:20:56,265 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 153 states, 84 states have (on average 1.8571428571428572) internal successors, (156), 144 states have internal predecessors, (156), 6 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2022-11-26 00:20:56,266 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 153 states to 153 states and 168 transitions. [2022-11-26 00:20:56,266 INFO L78 Accepts]: Start accepts. Automaton has 153 states and 168 transitions. Word has length 73 [2022-11-26 00:20:56,267 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:20:56,267 INFO L495 AbstractCegarLoop]: Abstraction has 153 states and 168 transitions. [2022-11-26 00:20:56,267 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 12 states have (on average 2.9166666666666665) internal successors, (35), 12 states have internal predecessors, (35), 2 states have call successors, (8), 3 states have call predecessors, (8), 4 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) [2022-11-26 00:20:56,268 INFO L276 IsEmpty]: Start isEmpty. Operand 153 states and 168 transitions. [2022-11-26 00:20:56,269 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2022-11-26 00:20:56,269 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:20:56,269 INFO L195 NwaCegarLoop]: trace histogram [24, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:20:56,282 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2022-11-26 00:20:56,482 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:20:56,482 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 67 more)] === [2022-11-26 00:20:56,483 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:20:56,483 INFO L85 PathProgramCache]: Analyzing trace with hash -2063257610, now seen corresponding path program 1 times [2022-11-26 00:20:56,483 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:20:56,483 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [336753964] [2022-11-26 00:20:56,483 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:20:56,483 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:20:56,535 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-11-26 00:20:56,536 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1631576597] [2022-11-26 00:20:56,536 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:20:56,536 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:20:56,536 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:20:56,537 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:20:56,543 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-11-26 00:20:58,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:20:58,603 INFO L263 TraceCheckSpWp]: Trace formula consists of 903 conjuncts, 58 conjunts are in the unsatisfiable core [2022-11-26 00:20:58,606 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:20:58,675 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-26 00:21:01,672 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_1295 Int) (|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (and (= |c_#length| (store |c_old(#length)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_1295)) (= (select |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 0))) is different from true [2022-11-26 00:21:01,734 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:21:01,735 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:21:01,743 INFO L321 Elim1Store]: treesize reduction 4, result has 50.0 percent of original size [2022-11-26 00:21:01,744 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 11 [2022-11-26 00:21:01,864 INFO L134 CoverageAnalysis]: Checked inductivity of 495 backedges. 193 proven. 96 refuted. 0 times theorem prover too weak. 158 trivial. 48 not checked. [2022-11-26 00:21:01,864 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:21:01,991 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:21:01,991 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [336753964] [2022-11-26 00:21:01,991 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-11-26 00:21:01,992 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1631576597] [2022-11-26 00:21:01,992 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1631576597] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:21:01,992 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2027387413] [2022-11-26 00:21:01,994 INFO L159 IcfgInterpreter]: Started Sifa with 25 locations of interest [2022-11-26 00:21:01,994 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:21:01,995 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:21:01,995 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:21:01,995 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:21:02,025 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:21:02,033 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:21:02,054 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:21:02,063 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:21:02,076 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:21:02,124 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-11-26 00:21:02,138 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-11-26 00:21:02,151 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 197 treesize of output 196 [2022-11-26 00:21:02,199 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:21:02,206 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:21:02,213 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:21:02,239 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:21:02,246 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:21:02,288 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:21:02,298 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:21:03,278 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:21:03,299 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 1 [2022-11-26 00:21:03,313 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:21:03,460 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 80 for LOIs [2022-11-26 00:21:03,516 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:21:03,543 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:21:03,649 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:21:03,669 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:21:03,695 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:21:03,762 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:21:03,776 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:21:03,787 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:21:03,800 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:21:30,375 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5071#(and (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (<= 4 |ULTIMATE.start_l3_insert_~list#1.offset|) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (= |ULTIMATE.start_l4_insert_~item~0#1.offset| 0) (= |ULTIMATE.start_l4_insert_~list#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (<= (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (= |~#list~0.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l2_insert_~list#1.offset|) (= |ULTIMATE.start_l3_insert_~item~1#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (= (select |#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (= |ULTIMATE.start_l2_insert_~item~2#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (<= |ULTIMATE.start_l2_insert_~list#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (= |ULTIMATE.start_l0_insert_~item~4#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= |ULTIMATE.start_l1_insert_~list#1.offset| 4) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (<= 0 |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (<= |ULTIMATE.start_l4_insert_~list#1.offset| 0) (= |ULTIMATE.start_l0_insert_#in~list#1.base| |~#list~0.base|) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (< (select |#length| |ULTIMATE.start_l4_insert_~list#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~list#1.offset|)) (<= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= |ULTIMATE.start_l0_insert_~list#1.base| |ULTIMATE.start_l0_insert_#in~list#1.base|) (not (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0)) (<= 0 |ULTIMATE.start_l4_insert_~list#1.offset|) (= |ULTIMATE.start_l0_insert_~item~4#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (<= 4 |ULTIMATE.start_l1_insert_~list#1.offset|) (<= 3 |ULTIMATE.start_l0_insert_~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= (+ |ULTIMATE.start_l0_insert_~item~4#1.offset| 4) |ULTIMATE.start_l1_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| |ULTIMATE.start_l2_insert_#in~list#1.offset|) (= |#NULL.offset| 0) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0) (<= |ULTIMATE.start_l4_insert_#in~list#1.offset| 0) (<= |ULTIMATE.start_l3_insert_~list#1.offset| 4) (= |ULTIMATE.start_l2_insert_~item~2#1.offset| 0) (= (+ |ULTIMATE.start_l2_insert_~item~2#1.offset| 4) |ULTIMATE.start_l3_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l4_insert_#in~list#1.offset|) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| 0) (< 0 |#StackHeapBarrier|) (= |#NULL.base| 0))' at error location [2022-11-26 00:21:30,375 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:21:30,375 INFO L184 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2022-11-26 00:21:30,375 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19] total 19 [2022-11-26 00:21:30,376 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [186233186] [2022-11-26 00:21:30,376 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2022-11-26 00:21:30,376 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 19 states [2022-11-26 00:21:30,376 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:21:30,377 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2022-11-26 00:21:30,378 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=188, Invalid=1620, Unknown=2, NotChecked=82, Total=1892 [2022-11-26 00:21:30,378 INFO L87 Difference]: Start difference. First operand 153 states and 168 transitions. Second operand has 19 states, 17 states have (on average 2.1176470588235294) internal successors, (36), 16 states have internal predecessors, (36), 2 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-26 00:21:32,406 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-11-26 00:21:39,075 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-11-26 00:21:40,278 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:21:40,279 INFO L93 Difference]: Finished difference Result 160 states and 182 transitions. [2022-11-26 00:21:40,279 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-26 00:21:40,279 INFO L78 Accepts]: Start accepts. Automaton has has 19 states, 17 states have (on average 2.1176470588235294) internal successors, (36), 16 states have internal predecessors, (36), 2 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 73 [2022-11-26 00:21:40,280 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:21:40,281 INFO L225 Difference]: With dead ends: 160 [2022-11-26 00:21:40,281 INFO L226 Difference]: Without dead ends: 157 [2022-11-26 00:21:40,282 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 156 GetRequests, 100 SyntacticMatches, 6 SemanticMatches, 50 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 596 ImplicationChecksByTransitivity, 34.0s TimeCoverageRelationStatistics Valid=244, Invalid=2307, Unknown=3, NotChecked=98, Total=2652 [2022-11-26 00:21:40,283 INFO L413 NwaCegarLoop]: 127 mSDtfsCounter, 15 mSDsluCounter, 1036 mSDsCounter, 0 mSdLazyCounter, 900 mSolverCounterSat, 6 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 1163 SdHoareTripleChecker+Invalid, 1067 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 900 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 159 IncrementalHoareTripleChecker+Unchecked, 5.4s IncrementalHoareTripleChecker+Time [2022-11-26 00:21:40,283 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 1163 Invalid, 1067 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 900 Invalid, 2 Unknown, 159 Unchecked, 5.4s Time] [2022-11-26 00:21:40,284 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 157 states. [2022-11-26 00:21:40,289 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 157 to 155. [2022-11-26 00:21:40,290 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 155 states, 85 states have (on average 1.8588235294117648) internal successors, (158), 146 states have internal predecessors, (158), 6 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (10), 6 states have call predecessors, (10), 6 states have call successors, (10) [2022-11-26 00:21:40,291 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 155 states to 155 states and 174 transitions. [2022-11-26 00:21:40,291 INFO L78 Accepts]: Start accepts. Automaton has 155 states and 174 transitions. Word has length 73 [2022-11-26 00:21:40,292 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:21:40,292 INFO L495 AbstractCegarLoop]: Abstraction has 155 states and 174 transitions. [2022-11-26 00:21:40,292 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 19 states, 17 states have (on average 2.1176470588235294) internal successors, (36), 16 states have internal predecessors, (36), 2 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-26 00:21:40,293 INFO L276 IsEmpty]: Start isEmpty. Operand 155 states and 174 transitions. [2022-11-26 00:21:40,294 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2022-11-26 00:21:40,294 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:21:40,294 INFO L195 NwaCegarLoop]: trace histogram [25, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:21:40,312 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2022-11-26 00:21:40,511 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-26 00:21:40,512 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 67 more)] === [2022-11-26 00:21:40,512 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:21:40,512 INFO L85 PathProgramCache]: Analyzing trace with hash -1757261347, now seen corresponding path program 2 times [2022-11-26 00:21:40,512 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:21:40,513 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2050970042] [2022-11-26 00:21:40,513 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:21:40,513 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:21:40,564 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-11-26 00:21:40,565 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1888432716] [2022-11-26 00:21:40,565 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-26 00:21:40,565 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:21:40,565 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:21:40,567 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:21:40,584 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2022-11-26 00:21:41,552 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-11-26 00:21:41,553 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:21:41,556 INFO L263 TraceCheckSpWp]: Trace formula consists of 381 conjuncts, 28 conjunts are in the unsatisfiable core [2022-11-26 00:21:41,559 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:21:41,582 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-26 00:21:41,621 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:21:41,778 INFO L134 CoverageAnalysis]: Checked inductivity of 525 backedges. 145 proven. 10 refuted. 0 times theorem prover too weak. 370 trivial. 0 not checked. [2022-11-26 00:21:41,778 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:21:42,252 INFO L134 CoverageAnalysis]: Checked inductivity of 525 backedges. 145 proven. 10 refuted. 0 times theorem prover too weak. 370 trivial. 0 not checked. [2022-11-26 00:21:42,252 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:21:42,253 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2050970042] [2022-11-26 00:21:42,253 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-11-26 00:21:42,253 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1888432716] [2022-11-26 00:21:42,253 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1888432716] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:21:42,253 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1852833501] [2022-11-26 00:21:42,256 INFO L159 IcfgInterpreter]: Started Sifa with 25 locations of interest [2022-11-26 00:21:42,256 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:21:42,256 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:21:42,257 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:21:42,257 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:21:42,289 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:21:42,297 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:21:42,318 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:21:42,331 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:21:42,342 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:21:42,426 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-26 00:21:42,426 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 182 treesize of output 185 [2022-11-26 00:21:42,468 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-26 00:21:42,468 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 178 treesize of output 181 [2022-11-26 00:21:42,506 INFO L321 Elim1Store]: treesize reduction 15, result has 42.3 percent of original size [2022-11-26 00:21:42,507 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 176 treesize of output 179 [2022-11-26 00:21:42,662 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:21:42,692 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:21:42,701 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:21:42,742 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:21:42,749 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:21:42,839 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:21:42,846 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:21:44,284 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:21:44,305 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 1 [2022-11-26 00:21:44,322 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:21:44,486 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 80 for LOIs [2022-11-26 00:21:44,551 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:21:44,567 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:21:44,697 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:21:44,717 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:21:44,760 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:21:44,804 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:21:44,813 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:21:44,824 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:21:44,835 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:21:52,402 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5879#(and (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (<= 4 |ULTIMATE.start_l3_insert_~list#1.offset|) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (= |ULTIMATE.start_l4_insert_~item~0#1.offset| 0) (= |ULTIMATE.start_l4_insert_~list#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (<= (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (= |~#list~0.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l2_insert_~list#1.offset|) (= |ULTIMATE.start_l3_insert_~item~1#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (= (select |#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (= |ULTIMATE.start_l2_insert_~item~2#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (<= |ULTIMATE.start_l2_insert_~list#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (= |ULTIMATE.start_l0_insert_~item~4#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= |ULTIMATE.start_l1_insert_~list#1.offset| 4) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (<= 0 |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (<= |ULTIMATE.start_l4_insert_~list#1.offset| 0) (= |ULTIMATE.start_l0_insert_#in~list#1.base| |~#list~0.base|) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (< (select |#length| |ULTIMATE.start_l4_insert_~list#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~list#1.offset|)) (<= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= |ULTIMATE.start_l0_insert_~list#1.base| |ULTIMATE.start_l0_insert_#in~list#1.base|) (not (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0)) (<= 0 |ULTIMATE.start_l4_insert_~list#1.offset|) (= |ULTIMATE.start_l0_insert_~item~4#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (<= 4 |ULTIMATE.start_l1_insert_~list#1.offset|) (<= 3 |ULTIMATE.start_l0_insert_~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= (+ |ULTIMATE.start_l0_insert_~item~4#1.offset| 4) |ULTIMATE.start_l1_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| |ULTIMATE.start_l2_insert_#in~list#1.offset|) (= |#NULL.offset| 0) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0) (<= |ULTIMATE.start_l4_insert_#in~list#1.offset| 0) (<= |ULTIMATE.start_l3_insert_~list#1.offset| 4) (= |ULTIMATE.start_l2_insert_~item~2#1.offset| 0) (= (+ |ULTIMATE.start_l2_insert_~item~2#1.offset| 4) |ULTIMATE.start_l3_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l4_insert_#in~list#1.offset|) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| 0) (< 0 |#StackHeapBarrier|) (= |#NULL.base| 0))' at error location [2022-11-26 00:21:52,403 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:21:52,403 INFO L184 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2022-11-26 00:21:52,403 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 9] total 16 [2022-11-26 00:21:52,403 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [587152770] [2022-11-26 00:21:52,403 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2022-11-26 00:21:52,404 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2022-11-26 00:21:52,404 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:21:52,404 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2022-11-26 00:21:52,405 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=212, Invalid=1270, Unknown=0, NotChecked=0, Total=1482 [2022-11-26 00:21:52,405 INFO L87 Difference]: Start difference. First operand 155 states and 174 transitions. Second operand has 16 states, 14 states have (on average 2.4285714285714284) internal successors, (34), 16 states have internal predecessors, (34), 1 states have call successors, (6), 1 states have call predecessors, (6), 3 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-11-26 00:21:54,179 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:21:54,179 INFO L93 Difference]: Finished difference Result 163 states and 182 transitions. [2022-11-26 00:21:54,180 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-11-26 00:21:54,180 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 14 states have (on average 2.4285714285714284) internal successors, (34), 16 states have internal predecessors, (34), 1 states have call successors, (6), 1 states have call predecessors, (6), 3 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) Word has length 74 [2022-11-26 00:21:54,180 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:21:54,181 INFO L225 Difference]: With dead ends: 163 [2022-11-26 00:21:54,181 INFO L226 Difference]: Without dead ends: 160 [2022-11-26 00:21:54,182 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 237 GetRequests, 177 SyntacticMatches, 6 SemanticMatches, 54 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 810 ImplicationChecksByTransitivity, 9.1s TimeCoverageRelationStatistics Valid=457, Invalid=2623, Unknown=0, NotChecked=0, Total=3080 [2022-11-26 00:21:54,183 INFO L413 NwaCegarLoop]: 122 mSDtfsCounter, 50 mSDsluCounter, 870 mSDsCounter, 0 mSdLazyCounter, 437 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 50 SdHoareTripleChecker+Valid, 992 SdHoareTripleChecker+Invalid, 478 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 437 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-26 00:21:54,183 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [50 Valid, 992 Invalid, 478 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 437 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-26 00:21:54,184 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 160 states. [2022-11-26 00:21:54,187 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 160 to 160. [2022-11-26 00:21:54,188 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 160 states, 91 states have (on average 1.7912087912087913) internal successors, (163), 151 states have internal predecessors, (163), 6 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2022-11-26 00:21:54,189 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 160 states to 160 states and 175 transitions. [2022-11-26 00:21:54,189 INFO L78 Accepts]: Start accepts. Automaton has 160 states and 175 transitions. Word has length 74 [2022-11-26 00:21:54,190 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:21:54,190 INFO L495 AbstractCegarLoop]: Abstraction has 160 states and 175 transitions. [2022-11-26 00:21:54,190 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 14 states have (on average 2.4285714285714284) internal successors, (34), 16 states have internal predecessors, (34), 1 states have call successors, (6), 1 states have call predecessors, (6), 3 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-11-26 00:21:54,190 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 175 transitions. [2022-11-26 00:21:54,192 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 85 [2022-11-26 00:21:54,192 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:21:54,192 INFO L195 NwaCegarLoop]: trace histogram [35, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:21:54,206 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2022-11-26 00:21:54,406 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-11-26 00:21:54,406 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 67 more)] === [2022-11-26 00:21:54,406 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:21:54,407 INFO L85 PathProgramCache]: Analyzing trace with hash -1548132567, now seen corresponding path program 3 times [2022-11-26 00:21:54,407 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:21:54,407 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1310139544] [2022-11-26 00:21:54,407 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:21:54,407 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:21:54,451 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-11-26 00:21:54,452 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1734826050] [2022-11-26 00:21:54,452 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-26 00:21:54,452 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:21:54,452 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:21:54,453 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:21:54,462 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2022-11-26 00:21:54,875 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-26 00:21:54,875 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:21:54,881 INFO L263 TraceCheckSpWp]: Trace formula consists of 1068 conjuncts, 78 conjunts are in the unsatisfiable core [2022-11-26 00:21:54,885 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:21:54,919 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-26 00:21:54,928 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-26 00:22:03,598 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_2096 Int) (|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (and (= (store |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| 1) |c_#valid|) (= |c_#length| (store |c_old(#length)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_2096)) (= (select |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 0))) is different from true [2022-11-26 00:22:03,715 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:22:03,716 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:22:03,743 INFO L321 Elim1Store]: treesize reduction 18, result has 35.7 percent of original size [2022-11-26 00:22:03,744 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 17 treesize of output 21 [2022-11-26 00:22:03,904 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_2098 Int) (|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (and (= (store |c_old(#length)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_2098) |c_#length|) (= (select |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 0))) is different from true [2022-11-26 00:22:03,996 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:22:03,996 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:22:04,012 INFO L321 Elim1Store]: treesize reduction 8, result has 52.9 percent of original size [2022-11-26 00:22:04,013 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:22:04,497 INFO L134 CoverageAnalysis]: Checked inductivity of 880 backedges. 383 proven. 77 refuted. 0 times theorem prover too weak. 192 trivial. 228 not checked. [2022-11-26 00:22:04,497 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:22:04,925 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:22:04,926 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1310139544] [2022-11-26 00:22:04,926 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-11-26 00:22:04,926 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1734826050] [2022-11-26 00:22:04,926 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1734826050] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:22:04,927 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1637242721] [2022-11-26 00:22:04,929 INFO L159 IcfgInterpreter]: Started Sifa with 25 locations of interest [2022-11-26 00:22:04,929 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:22:04,929 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:22:04,930 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:22:04,930 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:22:04,967 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:22:04,974 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:22:05,000 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:22:05,016 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:22:05,061 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:22:05,116 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 197 treesize of output 196 [2022-11-26 00:22:05,130 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-11-26 00:22:05,145 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-11-26 00:22:05,192 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:22:05,199 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:22:05,208 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:22:05,246 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:22:05,252 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:22:05,282 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:22:05,288 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:22:06,329 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:22:06,344 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 1 [2022-11-26 00:22:06,363 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:22:06,504 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 80 for LOIs [2022-11-26 00:22:06,580 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:22:06,613 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:22:06,695 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:22:06,730 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:22:06,824 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:22:06,867 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:22:06,877 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:22:06,887 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:22:06,901 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:22:33,488 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6539#(and (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (<= 4 |ULTIMATE.start_l3_insert_~list#1.offset|) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (= |ULTIMATE.start_l4_insert_~item~0#1.offset| 0) (= |ULTIMATE.start_l4_insert_~list#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (<= (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (= |~#list~0.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l2_insert_~list#1.offset|) (= |ULTIMATE.start_l3_insert_~item~1#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (= (select |#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (= |ULTIMATE.start_l2_insert_~item~2#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (<= |ULTIMATE.start_l2_insert_~list#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (= |ULTIMATE.start_l0_insert_~item~4#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= |ULTIMATE.start_l1_insert_~list#1.offset| 4) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (<= 0 |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (<= |ULTIMATE.start_l4_insert_~list#1.offset| 0) (= |ULTIMATE.start_l0_insert_#in~list#1.base| |~#list~0.base|) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (< (select |#length| |ULTIMATE.start_l4_insert_~list#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~list#1.offset|)) (<= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= |ULTIMATE.start_l0_insert_~list#1.base| |ULTIMATE.start_l0_insert_#in~list#1.base|) (not (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0)) (<= 0 |ULTIMATE.start_l4_insert_~list#1.offset|) (= |ULTIMATE.start_l0_insert_~item~4#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (<= 4 |ULTIMATE.start_l1_insert_~list#1.offset|) (<= 3 |ULTIMATE.start_l0_insert_~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= (+ |ULTIMATE.start_l0_insert_~item~4#1.offset| 4) |ULTIMATE.start_l1_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| |ULTIMATE.start_l2_insert_#in~list#1.offset|) (= |#NULL.offset| 0) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0) (<= |ULTIMATE.start_l4_insert_#in~list#1.offset| 0) (<= |ULTIMATE.start_l3_insert_~list#1.offset| 4) (= |ULTIMATE.start_l2_insert_~item~2#1.offset| 0) (= (+ |ULTIMATE.start_l2_insert_~item~2#1.offset| 4) |ULTIMATE.start_l3_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l4_insert_#in~list#1.offset|) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| 0) (< 0 |#StackHeapBarrier|) (= |#NULL.base| 0))' at error location [2022-11-26 00:22:33,488 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:22:33,489 INFO L184 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2022-11-26 00:22:33,489 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19] total 19 [2022-11-26 00:22:33,489 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1978642549] [2022-11-26 00:22:33,489 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2022-11-26 00:22:33,490 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-11-26 00:22:33,490 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:22:33,490 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-11-26 00:22:33,491 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=192, Invalid=1615, Unknown=7, NotChecked=166, Total=1980 [2022-11-26 00:22:33,492 INFO L87 Difference]: Start difference. First operand 160 states and 175 transitions. Second operand has 20 states, 17 states have (on average 2.411764705882353) internal successors, (41), 18 states have internal predecessors, (41), 3 states have call successors, (6), 2 states have call predecessors, (6), 4 states have return successors, (6), 4 states have call predecessors, (6), 3 states have call successors, (6) [2022-11-26 00:22:35,516 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-11-26 00:22:39,680 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-11-26 00:22:41,889 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-11-26 00:22:44,180 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-11-26 00:22:46,357 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-11-26 00:23:01,128 WARN L233 SmtUtils]: Spent 6.19s on a formula simplification. DAG size of input: 51 DAG size of output: 46 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-26 00:23:09,377 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:23:09,377 INFO L93 Difference]: Finished difference Result 193 states and 213 transitions. [2022-11-26 00:23:09,378 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-26 00:23:09,378 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 17 states have (on average 2.411764705882353) internal successors, (41), 18 states have internal predecessors, (41), 3 states have call successors, (6), 2 states have call predecessors, (6), 4 states have return successors, (6), 4 states have call predecessors, (6), 3 states have call successors, (6) Word has length 84 [2022-11-26 00:23:09,378 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:23:09,379 INFO L225 Difference]: With dead ends: 193 [2022-11-26 00:23:09,379 INFO L226 Difference]: Without dead ends: 193 [2022-11-26 00:23:09,380 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 181 GetRequests, 122 SyntacticMatches, 6 SemanticMatches, 53 ConstructedPredicates, 2 IntricatePredicates, 0 DeprecatedPredicates, 665 ImplicationChecksByTransitivity, 55.1s TimeCoverageRelationStatistics Valid=254, Invalid=2501, Unknown=9, NotChecked=206, Total=2970 [2022-11-26 00:23:09,381 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 238 mSDsluCounter, 918 mSDsCounter, 0 mSdLazyCounter, 1422 mSolverCounterSat, 19 mSolverCounterUnsat, 5 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 16.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 238 SdHoareTripleChecker+Valid, 1006 SdHoareTripleChecker+Invalid, 1809 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 1422 IncrementalHoareTripleChecker+Invalid, 5 IncrementalHoareTripleChecker+Unknown, 363 IncrementalHoareTripleChecker+Unchecked, 16.5s IncrementalHoareTripleChecker+Time [2022-11-26 00:23:09,382 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [238 Valid, 1006 Invalid, 1809 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 1422 Invalid, 5 Unknown, 363 Unchecked, 16.5s Time] [2022-11-26 00:23:09,382 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 193 states. [2022-11-26 00:23:09,386 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 193 to 158. [2022-11-26 00:23:09,386 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 158 states, 91 states have (on average 1.7692307692307692) internal successors, (161), 149 states have internal predecessors, (161), 6 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2022-11-26 00:23:09,387 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 158 states to 158 states and 173 transitions. [2022-11-26 00:23:09,388 INFO L78 Accepts]: Start accepts. Automaton has 158 states and 173 transitions. Word has length 84 [2022-11-26 00:23:09,388 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:23:09,388 INFO L495 AbstractCegarLoop]: Abstraction has 158 states and 173 transitions. [2022-11-26 00:23:09,388 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 17 states have (on average 2.411764705882353) internal successors, (41), 18 states have internal predecessors, (41), 3 states have call successors, (6), 2 states have call predecessors, (6), 4 states have return successors, (6), 4 states have call predecessors, (6), 3 states have call successors, (6) [2022-11-26 00:23:09,389 INFO L276 IsEmpty]: Start isEmpty. Operand 158 states and 173 transitions. [2022-11-26 00:23:09,390 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 89 [2022-11-26 00:23:09,390 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:23:09,390 INFO L195 NwaCegarLoop]: trace histogram [35, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:23:09,405 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Ended with exit code 0 [2022-11-26 00:23:09,599 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:23:09,599 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr8REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 67 more)] === [2022-11-26 00:23:09,599 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:23:09,599 INFO L85 PathProgramCache]: Analyzing trace with hash 1555294490, now seen corresponding path program 1 times [2022-11-26 00:23:09,600 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:23:09,600 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1134103557] [2022-11-26 00:23:09,600 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:23:09,600 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:23:09,643 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-11-26 00:23:09,644 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [973060824] [2022-11-26 00:23:09,644 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:23:09,644 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:23:09,644 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:23:09,645 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:23:09,648 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2022-11-26 00:23:10,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:23:10,082 INFO L263 TraceCheckSpWp]: Trace formula consists of 1112 conjuncts, 48 conjunts are in the unsatisfiable core [2022-11-26 00:23:10,086 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:23:10,176 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_2582 Int) (|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (and (= |c_#valid| (store |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_2582)) (= (select |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 0))) is different from true [2022-11-26 00:23:10,239 INFO L321 Elim1Store]: treesize reduction 18, result has 35.7 percent of original size [2022-11-26 00:23:10,239 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 17 treesize of output 21 [2022-11-26 00:23:10,255 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_2583 Int)) (= |c_#valid| (store |c_old(#valid)| |c_zalloc_or_die_calloc_model_~ptr~0#1.base| v_ArrVal_2583))) is different from true [2022-11-26 00:23:10,279 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_2583 Int)) (= |c_#valid| (store |c_old(#valid)| |c_zalloc_or_die_#res#1.base| v_ArrVal_2583))) is different from true [2022-11-26 00:23:10,297 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-26 00:23:10,298 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-11-26 00:23:10,352 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_2584 Int)) (= |c_#valid| (store |c_old(#valid)| |c_zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_2584))) is different from true [2022-11-26 00:23:10,516 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-26 00:23:10,517 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 16 treesize of output 22 [2022-11-26 00:23:10,601 INFO L134 CoverageAnalysis]: Checked inductivity of 880 backedges. 381 proven. 68 refuted. 0 times theorem prover too weak. 175 trivial. 256 not checked. [2022-11-26 00:23:10,601 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:23:11,327 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:23:11,327 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1134103557] [2022-11-26 00:23:11,327 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-11-26 00:23:11,327 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [973060824] [2022-11-26 00:23:11,327 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [973060824] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:23:11,327 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [934608505] [2022-11-26 00:23:11,330 INFO L159 IcfgInterpreter]: Started Sifa with 29 locations of interest [2022-11-26 00:23:11,330 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:23:11,330 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:23:11,331 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:23:11,331 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:23:11,365 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:23:11,376 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:23:11,401 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:23:11,410 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:23:11,420 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:23:11,458 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 197 treesize of output 196 [2022-11-26 00:23:11,475 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-11-26 00:23:11,487 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-11-26 00:23:11,527 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:23:11,533 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:23:11,541 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:23:11,565 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:23:11,579 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:23:11,613 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:23:11,623 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:23:12,583 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:23:12,603 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 1 [2022-11-26 00:23:12,617 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:23:12,703 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:23:12,704 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:23:12,718 INFO L321 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2022-11-26 00:23:12,718 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 25 treesize of output 27 [2022-11-26 00:23:12,740 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:23:12,741 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:23:12,755 INFO L321 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2022-11-26 00:23:12,755 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 28 [2022-11-26 00:23:12,773 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-11-26 00:23:12,822 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-11-26 00:23:12,869 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:23:12,870 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:23:12,871 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:23:12,895 INFO L321 Elim1Store]: treesize reduction 21, result has 34.4 percent of original size [2022-11-26 00:23:12,895 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 33 treesize of output 35 [2022-11-26 00:23:12,926 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:23:12,928 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:23:12,929 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:23:12,948 INFO L321 Elim1Store]: treesize reduction 21, result has 34.4 percent of original size [2022-11-26 00:23:12,948 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 32 treesize of output 34 [2022-11-26 00:23:13,107 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 80 for LOIs [2022-11-26 00:23:13,147 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:23:13,163 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:23:13,292 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:23:13,337 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:23:13,390 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:23:13,446 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:23:13,456 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:23:13,469 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:23:13,482 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:23:25,060 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7330#(and (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (<= 4 |ULTIMATE.start_l3_insert_~list#1.offset|) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (= |ULTIMATE.start_l4_insert_~item~0#1.offset| 0) (= |ULTIMATE.start_l4_insert_~list#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (<= (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (= |~#list~0.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l2_insert_~list#1.offset|) (= |ULTIMATE.start_l3_insert_~item~1#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (not (= (select |#valid| |ULTIMATE.start_l3_insert_~list#1.base|) 1)) (= (select |#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (= |ULTIMATE.start_l2_insert_~item~2#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (<= |ULTIMATE.start_l2_insert_~list#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (= |ULTIMATE.start_l0_insert_~item~4#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~list#1.base|) |ULTIMATE.start_l4_insert_~list#1.offset|) |ULTIMATE.start_l4_insert_~item~0#1.offset|) (<= |ULTIMATE.start_l1_insert_~list#1.offset| 4) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (= (select |#valid| |ULTIMATE.start_l4_insert_~list#1.base|) 1) (= |ULTIMATE.start_l4_insert_~item~0#1.base| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~list#1.base|) |ULTIMATE.start_l4_insert_~list#1.offset|)) (<= 0 |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= (+ 4 |ULTIMATE.start_l4_insert_~list#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~list#1.base|)) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (<= |ULTIMATE.start_l4_insert_~list#1.offset| 0) (= |ULTIMATE.start_l0_insert_#in~list#1.base| |~#list~0.base|) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= |ULTIMATE.start_l0_insert_~list#1.base| |ULTIMATE.start_l0_insert_#in~list#1.base|) (not (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0)) (<= 0 |ULTIMATE.start_l4_insert_~list#1.offset|) (= |ULTIMATE.start_l0_insert_~item~4#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (<= 4 |ULTIMATE.start_l1_insert_~list#1.offset|) (<= 3 |ULTIMATE.start_l0_insert_~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= (+ |ULTIMATE.start_l0_insert_~item~4#1.offset| 4) |ULTIMATE.start_l1_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| |ULTIMATE.start_l2_insert_#in~list#1.offset|) (= |#NULL.offset| 0) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0) (<= |ULTIMATE.start_l4_insert_#in~list#1.offset| 0) (<= |ULTIMATE.start_l3_insert_~list#1.offset| 4) (= |ULTIMATE.start_l2_insert_~item~2#1.offset| 0) (= (+ |ULTIMATE.start_l2_insert_~item~2#1.offset| 4) |ULTIMATE.start_l3_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l4_insert_#in~list#1.offset|) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| 0) (< 0 |#StackHeapBarrier|) (= |#NULL.base| 0))' at error location [2022-11-26 00:23:25,060 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:23:25,061 INFO L184 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2022-11-26 00:23:25,061 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16] total 16 [2022-11-26 00:23:25,061 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [180480047] [2022-11-26 00:23:25,061 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2022-11-26 00:23:25,062 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-26 00:23:25,062 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:23:25,063 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-26 00:23:25,064 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=255, Invalid=1919, Unknown=4, NotChecked=372, Total=2550 [2022-11-26 00:23:25,064 INFO L87 Difference]: Start difference. First operand 158 states and 173 transitions. Second operand has 17 states, 13 states have (on average 3.230769230769231) internal successors, (42), 13 states have internal predecessors, (42), 3 states have call successors, (6), 2 states have call predecessors, (6), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2022-11-26 00:23:26,172 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:23:26,173 INFO L93 Difference]: Finished difference Result 187 states and 205 transitions. [2022-11-26 00:23:26,174 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-26 00:23:26,174 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 13 states have (on average 3.230769230769231) internal successors, (42), 13 states have internal predecessors, (42), 3 states have call successors, (6), 2 states have call predecessors, (6), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) Word has length 88 [2022-11-26 00:23:26,174 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:23:26,176 INFO L225 Difference]: With dead ends: 187 [2022-11-26 00:23:26,176 INFO L226 Difference]: Without dead ends: 187 [2022-11-26 00:23:26,177 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 220 GetRequests, 155 SyntacticMatches, 11 SemanticMatches, 54 ConstructedPredicates, 4 IntricatePredicates, 0 DeprecatedPredicates, 806 ImplicationChecksByTransitivity, 12.2s TimeCoverageRelationStatistics Valid=303, Invalid=2361, Unknown=4, NotChecked=412, Total=3080 [2022-11-26 00:23:26,178 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 153 mSDsluCounter, 753 mSDsCounter, 0 mSdLazyCounter, 716 mSolverCounterSat, 25 mSolverCounterUnsat, 32 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 153 SdHoareTripleChecker+Valid, 855 SdHoareTripleChecker+Invalid, 1414 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 716 IncrementalHoareTripleChecker+Invalid, 32 IncrementalHoareTripleChecker+Unknown, 641 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-11-26 00:23:26,178 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [153 Valid, 855 Invalid, 1414 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 716 Invalid, 32 Unknown, 641 Unchecked, 0.9s Time] [2022-11-26 00:23:26,179 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 187 states. [2022-11-26 00:23:26,183 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 187 to 155. [2022-11-26 00:23:26,183 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 155 states, 91 states have (on average 1.7362637362637363) internal successors, (158), 146 states have internal predecessors, (158), 6 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2022-11-26 00:23:26,184 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 155 states to 155 states and 170 transitions. [2022-11-26 00:23:26,184 INFO L78 Accepts]: Start accepts. Automaton has 155 states and 170 transitions. Word has length 88 [2022-11-26 00:23:26,185 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:23:26,185 INFO L495 AbstractCegarLoop]: Abstraction has 155 states and 170 transitions. [2022-11-26 00:23:26,185 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 13 states have (on average 3.230769230769231) internal successors, (42), 13 states have internal predecessors, (42), 3 states have call successors, (6), 2 states have call predecessors, (6), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2022-11-26 00:23:26,186 INFO L276 IsEmpty]: Start isEmpty. Operand 155 states and 170 transitions. [2022-11-26 00:23:26,187 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 89 [2022-11-26 00:23:26,187 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:23:26,187 INFO L195 NwaCegarLoop]: trace histogram [35, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:23:26,197 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Forceful destruction successful, exit code 0 [2022-11-26 00:23:26,393 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:23:26,393 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 67 more)] === [2022-11-26 00:23:26,394 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:23:26,394 INFO L85 PathProgramCache]: Analyzing trace with hash 1555294491, now seen corresponding path program 1 times [2022-11-26 00:23:26,394 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:23:26,394 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [931781374] [2022-11-26 00:23:26,394 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:23:26,394 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:23:26,481 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-11-26 00:23:26,481 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1015710517] [2022-11-26 00:23:26,482 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:23:26,482 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:23:26,482 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:23:26,483 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:23:26,508 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2022-11-26 00:23:27,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:23:27,562 INFO L263 TraceCheckSpWp]: Trace formula consists of 1112 conjuncts, 62 conjunts are in the unsatisfiable core [2022-11-26 00:23:27,565 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:23:27,620 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-26 00:23:30,624 WARN L859 $PredicateComparison]: unable to prove that (exists ((|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int) (v_ArrVal_3075 Int)) (and (= (store |c_old(#length)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_3075) |c_#length|) (= (select |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 0))) is different from true [2022-11-26 00:23:30,721 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:23:30,722 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:23:30,731 INFO L321 Elim1Store]: treesize reduction 4, result has 50.0 percent of original size [2022-11-26 00:23:30,731 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 11 [2022-11-26 00:23:30,885 INFO L134 CoverageAnalysis]: Checked inductivity of 880 backedges. 357 proven. 145 refuted. 0 times theorem prover too weak. 254 trivial. 124 not checked. [2022-11-26 00:23:30,885 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:23:31,009 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:23:31,009 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [931781374] [2022-11-26 00:23:31,009 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-11-26 00:23:31,010 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1015710517] [2022-11-26 00:23:31,010 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1015710517] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:23:31,010 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1853961668] [2022-11-26 00:23:31,012 INFO L159 IcfgInterpreter]: Started Sifa with 29 locations of interest [2022-11-26 00:23:31,013 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:23:31,013 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:23:31,013 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:23:31,013 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:23:31,049 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:23:31,059 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:23:31,120 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:23:31,136 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:23:31,151 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:23:31,200 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-11-26 00:23:31,243 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 197 treesize of output 196 [2022-11-26 00:23:31,259 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-11-26 00:23:31,322 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:23:31,329 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:23:31,338 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:23:31,362 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:23:31,371 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:23:31,407 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:23:31,417 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:23:32,425 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:23:32,440 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 1 [2022-11-26 00:23:32,465 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:23:32,557 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:23:32,558 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:23:32,572 INFO L321 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2022-11-26 00:23:32,572 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 25 treesize of output 27 [2022-11-26 00:23:32,597 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-11-26 00:23:32,617 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:23:32,618 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:23:32,635 INFO L321 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2022-11-26 00:23:32,636 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 28 [2022-11-26 00:23:32,685 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-11-26 00:23:32,702 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:23:32,704 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:23:32,704 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:23:32,724 INFO L321 Elim1Store]: treesize reduction 21, result has 34.4 percent of original size [2022-11-26 00:23:32,725 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 33 treesize of output 35 [2022-11-26 00:23:32,769 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:23:32,770 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:23:32,771 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:23:32,792 INFO L321 Elim1Store]: treesize reduction 21, result has 34.4 percent of original size [2022-11-26 00:23:32,793 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 32 treesize of output 34 [2022-11-26 00:23:32,969 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 80 for LOIs [2022-11-26 00:23:33,014 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:23:33,041 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:23:33,155 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:23:33,210 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:23:33,277 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:23:33,340 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:23:33,352 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:23:33,365 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:23:33,378 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:24:07,529 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8017#(and (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (<= 4 |ULTIMATE.start_l3_insert_~list#1.offset|) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (= |ULTIMATE.start_l4_insert_~item~0#1.offset| 0) (= |ULTIMATE.start_l4_insert_~list#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (<= (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (= |~#list~0.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l2_insert_~list#1.offset|) (= |ULTIMATE.start_l3_insert_~item~1#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (= (select |#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (= |ULTIMATE.start_l2_insert_~item~2#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (<= |ULTIMATE.start_l2_insert_~list#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (= |ULTIMATE.start_l0_insert_~item~4#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~list#1.base|) |ULTIMATE.start_l4_insert_~list#1.offset|) |ULTIMATE.start_l4_insert_~item~0#1.offset|) (<= |ULTIMATE.start_l1_insert_~list#1.offset| 4) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (= (select |#valid| |ULTIMATE.start_l4_insert_~list#1.base|) 1) (= |ULTIMATE.start_l4_insert_~item~0#1.base| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~list#1.base|) |ULTIMATE.start_l4_insert_~list#1.offset|)) (<= 0 |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= (+ 4 |ULTIMATE.start_l4_insert_~list#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~list#1.base|)) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (<= |ULTIMATE.start_l4_insert_~list#1.offset| 0) (= |ULTIMATE.start_l0_insert_#in~list#1.base| |~#list~0.base|) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= |ULTIMATE.start_l0_insert_~list#1.base| |ULTIMATE.start_l0_insert_#in~list#1.base|) (not (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0)) (<= 0 |ULTIMATE.start_l4_insert_~list#1.offset|) (= |ULTIMATE.start_l0_insert_~item~4#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (<= 4 |ULTIMATE.start_l1_insert_~list#1.offset|) (<= 3 |ULTIMATE.start_l0_insert_~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| 0) (< (select |#length| |ULTIMATE.start_l3_insert_~list#1.base|) (+ |ULTIMATE.start_l3_insert_~list#1.offset| 4)) (= |ULTIMATE.start_l0_insert_~list#1.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= (+ |ULTIMATE.start_l0_insert_~item~4#1.offset| 4) |ULTIMATE.start_l1_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| |ULTIMATE.start_l2_insert_#in~list#1.offset|) (= |#NULL.offset| 0) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0) (<= |ULTIMATE.start_l4_insert_#in~list#1.offset| 0) (<= |ULTIMATE.start_l3_insert_~list#1.offset| 4) (= |ULTIMATE.start_l2_insert_~item~2#1.offset| 0) (= (+ |ULTIMATE.start_l2_insert_~item~2#1.offset| 4) |ULTIMATE.start_l3_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l4_insert_#in~list#1.offset|) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| 0) (< 0 |#StackHeapBarrier|) (= |#NULL.base| 0))' at error location [2022-11-26 00:24:07,529 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:24:07,529 INFO L184 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2022-11-26 00:24:07,529 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21] total 21 [2022-11-26 00:24:07,530 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [284141724] [2022-11-26 00:24:07,530 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2022-11-26 00:24:07,530 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 21 states [2022-11-26 00:24:07,530 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:24:07,531 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2022-11-26 00:24:07,532 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=243, Invalid=2110, Unknown=3, NotChecked=94, Total=2450 [2022-11-26 00:24:07,532 INFO L87 Difference]: Start difference. First operand 155 states and 170 transitions. Second operand has 21 states, 19 states have (on average 2.210526315789474) internal successors, (42), 18 states have internal predecessors, (42), 2 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-26 00:24:09,568 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-11-26 00:24:18,900 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-11-26 00:24:21,143 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-11-26 00:24:21,995 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:24:21,995 INFO L93 Difference]: Finished difference Result 160 states and 180 transitions. [2022-11-26 00:24:21,995 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-26 00:24:21,996 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 19 states have (on average 2.210526315789474) internal successors, (42), 18 states have internal predecessors, (42), 2 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 88 [2022-11-26 00:24:21,996 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:24:21,997 INFO L225 Difference]: With dead ends: 160 [2022-11-26 00:24:21,997 INFO L226 Difference]: Without dead ends: 157 [2022-11-26 00:24:21,999 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 191 GetRequests, 128 SyntacticMatches, 6 SemanticMatches, 57 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 785 ImplicationChecksByTransitivity, 43.8s TimeCoverageRelationStatistics Valid=307, Invalid=2999, Unknown=4, NotChecked=112, Total=3422 [2022-11-26 00:24:21,999 INFO L413 NwaCegarLoop]: 122 mSDtfsCounter, 16 mSDsluCounter, 1191 mSDsCounter, 0 mSdLazyCounter, 1019 mSolverCounterSat, 6 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 1313 SdHoareTripleChecker+Invalid, 1179 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 1019 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 151 IncrementalHoareTripleChecker+Unchecked, 7.7s IncrementalHoareTripleChecker+Time [2022-11-26 00:24:22,000 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 1313 Invalid, 1179 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 1019 Invalid, 3 Unknown, 151 Unchecked, 7.7s Time] [2022-11-26 00:24:22,000 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 157 states. [2022-11-26 00:24:22,005 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 157 to 157. [2022-11-26 00:24:22,005 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 157 states, 92 states have (on average 1.7391304347826086) internal successors, (160), 148 states have internal predecessors, (160), 6 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (10), 6 states have call predecessors, (10), 6 states have call successors, (10) [2022-11-26 00:24:22,007 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 157 states to 157 states and 176 transitions. [2022-11-26 00:24:22,007 INFO L78 Accepts]: Start accepts. Automaton has 157 states and 176 transitions. Word has length 88 [2022-11-26 00:24:22,007 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:24:22,007 INFO L495 AbstractCegarLoop]: Abstraction has 157 states and 176 transitions. [2022-11-26 00:24:22,008 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 21 states, 19 states have (on average 2.210526315789474) internal successors, (42), 18 states have internal predecessors, (42), 2 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-26 00:24:22,008 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 176 transitions. [2022-11-26 00:24:22,009 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-11-26 00:24:22,009 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:24:22,009 INFO L195 NwaCegarLoop]: trace histogram [36, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:24:22,034 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Ended with exit code 0 [2022-11-26 00:24:22,232 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2022-11-26 00:24:22,232 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 67 more)] === [2022-11-26 00:24:22,232 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:24:22,232 INFO L85 PathProgramCache]: Analyzing trace with hash 2010909308, now seen corresponding path program 2 times [2022-11-26 00:24:22,232 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:24:22,232 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1057247974] [2022-11-26 00:24:22,232 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:24:22,233 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:24:22,285 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-11-26 00:24:22,285 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1112867472] [2022-11-26 00:24:22,285 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-26 00:24:22,285 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:24:22,286 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:24:22,287 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:24:22,291 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2022-11-26 00:24:27,070 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-11-26 00:24:27,070 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:24:27,079 INFO L263 TraceCheckSpWp]: Trace formula consists of 719 conjuncts, 51 conjunts are in the unsatisfiable core [2022-11-26 00:24:27,082 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:24:27,095 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-26 00:24:30,021 WARN L859 $PredicateComparison]: unable to prove that (exists ((|zalloc_or_die_calloc_model_~ptr~0#1.base| Int)) (and (= (select |c_old(#valid)| |zalloc_or_die_calloc_model_~ptr~0#1.base|) 0) (exists ((v_ArrVal_3572 Int)) (= (store |c_old(#length)| |zalloc_or_die_calloc_model_~ptr~0#1.base| v_ArrVal_3572) |c_#length|)))) is different from true [2022-11-26 00:24:30,095 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:24:30,096 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:24:30,109 INFO L321 Elim1Store]: treesize reduction 4, result has 50.0 percent of original size [2022-11-26 00:24:30,110 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 11 [2022-11-26 00:24:30,233 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-11-26 00:24:30,242 INFO L134 CoverageAnalysis]: Checked inductivity of 921 backedges. 461 proven. 21 refuted. 0 times theorem prover too weak. 359 trivial. 80 not checked. [2022-11-26 00:24:30,242 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:24:30,336 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:24:30,336 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1057247974] [2022-11-26 00:24:30,336 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-11-26 00:24:30,336 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1112867472] [2022-11-26 00:24:30,336 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1112867472] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:24:30,336 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1194439493] [2022-11-26 00:24:30,338 INFO L159 IcfgInterpreter]: Started Sifa with 29 locations of interest [2022-11-26 00:24:30,338 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:24:30,338 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:24:30,339 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:24:30,339 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:24:30,368 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:24:30,375 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:24:30,392 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:24:30,403 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:24:30,416 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:24:30,545 INFO L321 Elim1Store]: treesize reduction 15, result has 42.3 percent of original size [2022-11-26 00:24:30,546 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 184 treesize of output 187 [2022-11-26 00:24:30,628 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-26 00:24:30,628 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 178 treesize of output 181 [2022-11-26 00:24:30,694 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-26 00:24:30,694 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 174 treesize of output 177 [2022-11-26 00:24:30,801 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:24:30,811 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:24:30,817 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:24:30,851 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:24:30,881 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:24:30,922 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:24:30,928 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:24:32,135 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:24:32,151 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 1 [2022-11-26 00:24:32,166 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:24:32,240 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-11-26 00:24:32,258 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:24:32,259 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:24:32,275 INFO L321 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2022-11-26 00:24:32,275 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 28 [2022-11-26 00:24:32,309 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:24:32,310 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:24:32,324 INFO L321 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2022-11-26 00:24:32,325 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 25 treesize of output 27 [2022-11-26 00:24:32,375 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:24:32,376 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:24:32,379 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:24:32,395 INFO L321 Elim1Store]: treesize reduction 21, result has 34.4 percent of original size [2022-11-26 00:24:32,396 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 32 treesize of output 34 [2022-11-26 00:24:32,419 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:24:32,421 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:24:32,421 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:24:32,438 INFO L321 Elim1Store]: treesize reduction 21, result has 34.4 percent of original size [2022-11-26 00:24:32,439 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 33 treesize of output 35 [2022-11-26 00:24:32,468 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-11-26 00:24:32,602 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 80 for LOIs [2022-11-26 00:24:32,633 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:24:32,654 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:24:32,758 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:24:32,787 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:24:32,819 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:24:32,873 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:24:32,885 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:24:32,898 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:24:32,911 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:25:01,145 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8683#(and (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (<= 4 |ULTIMATE.start_l3_insert_~list#1.offset|) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (= |ULTIMATE.start_l4_insert_~item~0#1.offset| 0) (= |ULTIMATE.start_l4_insert_~list#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (<= (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (= |~#list~0.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l2_insert_~list#1.offset|) (= |ULTIMATE.start_l3_insert_~item~1#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (= (select |#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (= |ULTIMATE.start_l2_insert_~item~2#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (<= |ULTIMATE.start_l2_insert_~list#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (= |ULTIMATE.start_l0_insert_~item~4#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~list#1.base|) |ULTIMATE.start_l4_insert_~list#1.offset|) |ULTIMATE.start_l4_insert_~item~0#1.offset|) (<= |ULTIMATE.start_l1_insert_~list#1.offset| 4) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (= (select |#valid| |ULTIMATE.start_l4_insert_~list#1.base|) 1) (= |ULTIMATE.start_l4_insert_~item~0#1.base| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~list#1.base|) |ULTIMATE.start_l4_insert_~list#1.offset|)) (<= 0 |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= (+ 4 |ULTIMATE.start_l4_insert_~list#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~list#1.base|)) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (<= |ULTIMATE.start_l4_insert_~list#1.offset| 0) (= |ULTIMATE.start_l0_insert_#in~list#1.base| |~#list~0.base|) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= |ULTIMATE.start_l0_insert_~list#1.base| |ULTIMATE.start_l0_insert_#in~list#1.base|) (not (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0)) (<= 0 |ULTIMATE.start_l4_insert_~list#1.offset|) (= |ULTIMATE.start_l0_insert_~item~4#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (<= 4 |ULTIMATE.start_l1_insert_~list#1.offset|) (<= 3 |ULTIMATE.start_l0_insert_~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| 0) (< (select |#length| |ULTIMATE.start_l3_insert_~list#1.base|) (+ |ULTIMATE.start_l3_insert_~list#1.offset| 4)) (= |ULTIMATE.start_l0_insert_~list#1.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= (+ |ULTIMATE.start_l0_insert_~item~4#1.offset| 4) |ULTIMATE.start_l1_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| |ULTIMATE.start_l2_insert_#in~list#1.offset|) (= |#NULL.offset| 0) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0) (<= |ULTIMATE.start_l4_insert_#in~list#1.offset| 0) (<= |ULTIMATE.start_l3_insert_~list#1.offset| 4) (= |ULTIMATE.start_l2_insert_~item~2#1.offset| 0) (= (+ |ULTIMATE.start_l2_insert_~item~2#1.offset| 4) |ULTIMATE.start_l3_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l4_insert_#in~list#1.offset|) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| 0) (< 0 |#StackHeapBarrier|) (= |#NULL.base| 0))' at error location [2022-11-26 00:25:01,145 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:25:01,145 INFO L184 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2022-11-26 00:25:01,146 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17] total 17 [2022-11-26 00:25:01,146 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1424164257] [2022-11-26 00:25:01,146 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2022-11-26 00:25:01,146 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-26 00:25:01,146 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:25:01,147 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-26 00:25:01,147 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=232, Invalid=1750, Unknown=2, NotChecked=86, Total=2070 [2022-11-26 00:25:01,147 INFO L87 Difference]: Start difference. First operand 157 states and 176 transitions. Second operand has 17 states, 15 states have (on average 2.466666666666667) internal successors, (37), 14 states have internal predecessors, (37), 2 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-26 00:25:03,162 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-11-26 00:25:09,296 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-11-26 00:25:09,862 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:25:09,862 INFO L93 Difference]: Finished difference Result 162 states and 186 transitions. [2022-11-26 00:25:09,862 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-26 00:25:09,863 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 15 states have (on average 2.466666666666667) internal successors, (37), 14 states have internal predecessors, (37), 2 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 89 [2022-11-26 00:25:09,863 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:25:09,864 INFO L225 Difference]: With dead ends: 162 [2022-11-26 00:25:09,864 INFO L226 Difference]: Without dead ends: 159 [2022-11-26 00:25:09,865 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 195 GetRequests, 134 SyntacticMatches, 6 SemanticMatches, 55 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 799 ImplicationChecksByTransitivity, 34.3s TimeCoverageRelationStatistics Valid=307, Invalid=2774, Unknown=3, NotChecked=108, Total=3192 [2022-11-26 00:25:09,866 INFO L413 NwaCegarLoop]: 126 mSDtfsCounter, 20 mSDsluCounter, 463 mSDsCounter, 0 mSdLazyCounter, 741 mSolverCounterSat, 7 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 589 SdHoareTripleChecker+Invalid, 902 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 741 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 152 IncrementalHoareTripleChecker+Unchecked, 5.4s IncrementalHoareTripleChecker+Time [2022-11-26 00:25:09,866 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 589 Invalid, 902 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 741 Invalid, 2 Unknown, 152 Unchecked, 5.4s Time] [2022-11-26 00:25:09,867 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 159 states. [2022-11-26 00:25:09,871 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 159 to 158. [2022-11-26 00:25:09,871 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 158 states, 93 states have (on average 1.7419354838709677) internal successors, (162), 149 states have internal predecessors, (162), 6 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (10), 6 states have call predecessors, (10), 6 states have call successors, (10) [2022-11-26 00:25:09,872 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 158 states to 158 states and 178 transitions. [2022-11-26 00:25:09,872 INFO L78 Accepts]: Start accepts. Automaton has 158 states and 178 transitions. Word has length 89 [2022-11-26 00:25:09,872 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:25:09,873 INFO L495 AbstractCegarLoop]: Abstraction has 158 states and 178 transitions. [2022-11-26 00:25:09,873 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 15 states have (on average 2.466666666666667) internal successors, (37), 14 states have internal predecessors, (37), 2 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-26 00:25:09,873 INFO L276 IsEmpty]: Start isEmpty. Operand 158 states and 178 transitions. [2022-11-26 00:25:09,874 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 91 [2022-11-26 00:25:09,874 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:25:09,874 INFO L195 NwaCegarLoop]: trace histogram [37, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:25:09,885 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Forceful destruction successful, exit code 0 [2022-11-26 00:25:10,081 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2022-11-26 00:25:10,081 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 67 more)] === [2022-11-26 00:25:10,082 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:25:10,082 INFO L85 PathProgramCache]: Analyzing trace with hash -1044900549, now seen corresponding path program 3 times [2022-11-26 00:25:10,082 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:25:10,082 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [412369545] [2022-11-26 00:25:10,082 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:25:10,082 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:25:10,123 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-11-26 00:25:10,124 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1002371377] [2022-11-26 00:25:10,124 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-26 00:25:10,124 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:25:10,124 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:25:10,125 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:25:10,131 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2022-11-26 00:25:11,658 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-26 00:25:11,658 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:25:11,665 INFO L263 TraceCheckSpWp]: Trace formula consists of 1142 conjuncts, 71 conjunts are in the unsatisfiable core [2022-11-26 00:25:11,673 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:25:11,687 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-26 00:25:11,694 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:25:14,406 WARN L859 $PredicateComparison]: unable to prove that (exists ((|zalloc_or_die_calloc_model_~ptr~0#1.base| Int)) (and (exists ((v_ArrVal_4084 Int)) (= (store |c_old(#length)| |zalloc_or_die_calloc_model_~ptr~0#1.base| v_ArrVal_4084) |c_#length|)) (= (select |c_old(#valid)| |zalloc_or_die_calloc_model_~ptr~0#1.base|) 0))) is different from true [2022-11-26 00:25:14,738 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_4084 Int) (|zalloc_or_die_calloc_model_~ptr~0#1.base| Int)) (and (= (store |c_old(#length)| |zalloc_or_die_calloc_model_~ptr~0#1.base| v_ArrVal_4084) |c_#length|) (= (select |c_old(#valid)| |zalloc_or_die_calloc_model_~ptr~0#1.base|) 0))) is different from true [2022-11-26 00:25:14,778 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:25:14,781 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:25:14,789 INFO L321 Elim1Store]: treesize reduction 4, result has 50.0 percent of original size [2022-11-26 00:25:14,790 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 11 [2022-11-26 00:25:14,945 INFO L134 CoverageAnalysis]: Checked inductivity of 963 backedges. 485 proven. 105 refuted. 0 times theorem prover too weak. 310 trivial. 63 not checked. [2022-11-26 00:25:14,945 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:25:15,073 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:25:15,073 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [412369545] [2022-11-26 00:25:15,073 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-11-26 00:25:15,073 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1002371377] [2022-11-26 00:25:15,073 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1002371377] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:25:15,073 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1151593360] [2022-11-26 00:25:15,075 INFO L159 IcfgInterpreter]: Started Sifa with 29 locations of interest [2022-11-26 00:25:15,075 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:25:15,075 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:25:15,075 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:25:15,076 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:25:15,105 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:25:15,112 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:25:15,133 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:25:15,147 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:25:15,202 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:25:15,260 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 197 treesize of output 196 [2022-11-26 00:25:15,273 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-11-26 00:25:15,287 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-11-26 00:25:15,338 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:25:15,360 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:25:15,368 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:25:15,397 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:25:15,409 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:25:15,437 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:25:15,443 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:25:16,330 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:25:16,348 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:25:16,364 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 1 [2022-11-26 00:25:16,440 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:25:16,441 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:25:16,454 INFO L321 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2022-11-26 00:25:16,454 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 25 treesize of output 27 [2022-11-26 00:25:16,487 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:25:16,488 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:25:16,504 INFO L321 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2022-11-26 00:25:16,504 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 28 [2022-11-26 00:25:16,521 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-11-26 00:25:16,574 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:25:16,575 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:25:16,575 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:25:16,593 INFO L321 Elim1Store]: treesize reduction 21, result has 34.4 percent of original size [2022-11-26 00:25:16,597 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 32 treesize of output 34 [2022-11-26 00:25:16,622 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-11-26 00:25:16,645 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:25:16,647 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:25:16,647 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:25:16,665 INFO L321 Elim1Store]: treesize reduction 21, result has 34.4 percent of original size [2022-11-26 00:25:16,665 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 33 treesize of output 35 [2022-11-26 00:25:16,805 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 80 for LOIs [2022-11-26 00:25:16,852 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:25:16,880 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:25:17,021 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:25:17,070 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:25:17,113 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:25:17,156 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:25:17,165 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:25:17,174 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:25:17,183 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:25:42,748 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9367#(and (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (<= 4 |ULTIMATE.start_l3_insert_~list#1.offset|) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (= |ULTIMATE.start_l4_insert_~item~0#1.offset| 0) (= |ULTIMATE.start_l4_insert_~list#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (<= (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (= |~#list~0.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l2_insert_~list#1.offset|) (= |ULTIMATE.start_l3_insert_~item~1#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (= (select |#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (= |ULTIMATE.start_l2_insert_~item~2#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (<= |ULTIMATE.start_l2_insert_~list#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (= |ULTIMATE.start_l0_insert_~item~4#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~list#1.base|) |ULTIMATE.start_l4_insert_~list#1.offset|) |ULTIMATE.start_l4_insert_~item~0#1.offset|) (<= |ULTIMATE.start_l1_insert_~list#1.offset| 4) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (= (select |#valid| |ULTIMATE.start_l4_insert_~list#1.base|) 1) (= |ULTIMATE.start_l4_insert_~item~0#1.base| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~list#1.base|) |ULTIMATE.start_l4_insert_~list#1.offset|)) (<= 0 |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= (+ 4 |ULTIMATE.start_l4_insert_~list#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~list#1.base|)) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (<= |ULTIMATE.start_l4_insert_~list#1.offset| 0) (= |ULTIMATE.start_l0_insert_#in~list#1.base| |~#list~0.base|) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= |ULTIMATE.start_l0_insert_~list#1.base| |ULTIMATE.start_l0_insert_#in~list#1.base|) (not (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0)) (<= 0 |ULTIMATE.start_l4_insert_~list#1.offset|) (= |ULTIMATE.start_l0_insert_~item~4#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (<= 4 |ULTIMATE.start_l1_insert_~list#1.offset|) (<= 3 |ULTIMATE.start_l0_insert_~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| 0) (< (select |#length| |ULTIMATE.start_l3_insert_~list#1.base|) (+ |ULTIMATE.start_l3_insert_~list#1.offset| 4)) (= |ULTIMATE.start_l0_insert_~list#1.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= (+ |ULTIMATE.start_l0_insert_~item~4#1.offset| 4) |ULTIMATE.start_l1_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| |ULTIMATE.start_l2_insert_#in~list#1.offset|) (= |#NULL.offset| 0) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0) (<= |ULTIMATE.start_l4_insert_#in~list#1.offset| 0) (<= |ULTIMATE.start_l3_insert_~list#1.offset| 4) (= |ULTIMATE.start_l2_insert_~item~2#1.offset| 0) (= (+ |ULTIMATE.start_l2_insert_~item~2#1.offset| 4) |ULTIMATE.start_l3_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l4_insert_#in~list#1.offset|) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| 0) (< 0 |#StackHeapBarrier|) (= |#NULL.base| 0))' at error location [2022-11-26 00:25:42,748 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:25:42,749 INFO L184 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2022-11-26 00:25:42,749 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25] total 25 [2022-11-26 00:25:42,749 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [368121097] [2022-11-26 00:25:42,749 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2022-11-26 00:25:42,750 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2022-11-26 00:25:42,750 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:25:42,750 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2022-11-26 00:25:42,751 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=248, Invalid=2408, Unknown=4, NotChecked=202, Total=2862 [2022-11-26 00:25:42,751 INFO L87 Difference]: Start difference. First operand 158 states and 178 transitions. Second operand has 25 states, 23 states have (on average 1.9565217391304348) internal successors, (45), 22 states have internal predecessors, (45), 2 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-26 00:25:55,095 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-11-26 00:25:57,424 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:25:57,424 INFO L93 Difference]: Finished difference Result 164 states and 192 transitions. [2022-11-26 00:25:57,424 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-11-26 00:25:57,425 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 23 states have (on average 1.9565217391304348) internal successors, (45), 22 states have internal predecessors, (45), 2 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 90 [2022-11-26 00:25:57,425 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:25:57,426 INFO L225 Difference]: With dead ends: 164 [2022-11-26 00:25:57,426 INFO L226 Difference]: Without dead ends: 161 [2022-11-26 00:25:57,427 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 199 GetRequests, 128 SyntacticMatches, 7 SemanticMatches, 64 ConstructedPredicates, 2 IntricatePredicates, 0 DeprecatedPredicates, 957 ImplicationChecksByTransitivity, 37.8s TimeCoverageRelationStatistics Valid=321, Invalid=3712, Unknown=7, NotChecked=250, Total=4290 [2022-11-26 00:25:57,427 INFO L413 NwaCegarLoop]: 130 mSDtfsCounter, 8 mSDsluCounter, 1428 mSDsCounter, 0 mSdLazyCounter, 2094 mSolverCounterSat, 8 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 1558 SdHoareTripleChecker+Invalid, 2447 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 2094 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 344 IncrementalHoareTripleChecker+Unchecked, 5.4s IncrementalHoareTripleChecker+Time [2022-11-26 00:25:57,427 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [8 Valid, 1558 Invalid, 2447 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 2094 Invalid, 1 Unknown, 344 Unchecked, 5.4s Time] [2022-11-26 00:25:57,428 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 161 states. [2022-11-26 00:25:57,432 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 161 to 159. [2022-11-26 00:25:57,433 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 159 states, 94 states have (on average 1.7446808510638299) internal successors, (164), 150 states have internal predecessors, (164), 6 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (10), 6 states have call predecessors, (10), 6 states have call successors, (10) [2022-11-26 00:25:57,434 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 159 states to 159 states and 180 transitions. [2022-11-26 00:25:57,434 INFO L78 Accepts]: Start accepts. Automaton has 159 states and 180 transitions. Word has length 90 [2022-11-26 00:25:57,434 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:25:57,435 INFO L495 AbstractCegarLoop]: Abstraction has 159 states and 180 transitions. [2022-11-26 00:25:57,435 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 23 states have (on average 1.9565217391304348) internal successors, (45), 22 states have internal predecessors, (45), 2 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-26 00:25:57,435 INFO L276 IsEmpty]: Start isEmpty. Operand 159 states and 180 transitions. [2022-11-26 00:25:57,436 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 92 [2022-11-26 00:25:57,436 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:25:57,436 INFO L195 NwaCegarLoop]: trace histogram [38, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:25:57,453 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Ended with exit code 0 [2022-11-26 00:25:57,653 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15,16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:25:57,653 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 67 more)] === [2022-11-26 00:25:57,653 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:25:57,654 INFO L85 PathProgramCache]: Analyzing trace with hash -1285725604, now seen corresponding path program 4 times [2022-11-26 00:25:57,654 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:25:57,654 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1679436845] [2022-11-26 00:25:57,654 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:25:57,654 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:25:57,703 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-11-26 00:25:57,703 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [319471277] [2022-11-26 00:25:57,704 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-11-26 00:25:57,704 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:25:57,704 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:25:57,705 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:25:57,708 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2022-11-26 00:26:04,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:26:04,445 INFO L263 TraceCheckSpWp]: Trace formula consists of 1157 conjuncts, 74 conjunts are in the unsatisfiable core [2022-11-26 00:26:04,448 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:26:04,462 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-26 00:26:04,493 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:26:04,667 INFO L134 CoverageAnalysis]: Checked inductivity of 1006 backedges. 248 proven. 15 refuted. 0 times theorem prover too weak. 743 trivial. 0 not checked. [2022-11-26 00:26:04,668 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:26:06,125 INFO L134 CoverageAnalysis]: Checked inductivity of 1006 backedges. 0 proven. 258 refuted. 0 times theorem prover too weak. 748 trivial. 0 not checked. [2022-11-26 00:26:06,126 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:26:06,126 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1679436845] [2022-11-26 00:26:06,126 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-11-26 00:26:06,126 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [319471277] [2022-11-26 00:26:06,126 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [319471277] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:26:06,127 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [221188032] [2022-11-26 00:26:06,128 INFO L159 IcfgInterpreter]: Started Sifa with 29 locations of interest [2022-11-26 00:26:06,129 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:26:06,129 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:26:06,129 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:26:06,129 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:26:06,156 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:26:06,163 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:26:06,231 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:26:06,294 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:26:06,307 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:26:06,443 INFO L321 Elim1Store]: treesize reduction 15, result has 42.3 percent of original size [2022-11-26 00:26:06,444 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 184 treesize of output 187 [2022-11-26 00:26:06,514 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-26 00:26:06,514 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 178 treesize of output 181 [2022-11-26 00:26:06,564 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-26 00:26:06,564 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 174 treesize of output 177 [2022-11-26 00:26:06,687 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:26:06,694 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:26:06,705 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:26:06,777 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:26:06,783 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:26:06,817 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:26:06,842 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:26:08,005 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:26:08,034 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:26:08,074 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 1 [2022-11-26 00:26:08,152 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:26:08,152 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:26:08,166 INFO L321 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2022-11-26 00:26:08,166 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 28 [2022-11-26 00:26:08,183 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-11-26 00:26:08,199 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:26:08,200 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:26:08,215 INFO L321 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2022-11-26 00:26:08,215 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 25 treesize of output 27 [2022-11-26 00:26:08,278 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:26:08,279 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:26:08,280 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:26:08,296 INFO L321 Elim1Store]: treesize reduction 21, result has 34.4 percent of original size [2022-11-26 00:26:08,296 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 33 treesize of output 35 [2022-11-26 00:26:08,321 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:26:08,322 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:26:08,322 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:26:08,339 INFO L321 Elim1Store]: treesize reduction 21, result has 34.4 percent of original size [2022-11-26 00:26:08,340 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 32 treesize of output 34 [2022-11-26 00:26:08,363 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-11-26 00:26:08,500 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 80 for LOIs [2022-11-26 00:26:08,539 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:26:08,561 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:26:08,678 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:26:08,730 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:26:08,782 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:26:08,838 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:26:08,846 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:26:08,856 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:26:08,867 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:26:19,549 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10300#(and (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (<= 4 |ULTIMATE.start_l3_insert_~list#1.offset|) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (= |ULTIMATE.start_l4_insert_~item~0#1.offset| 0) (= |ULTIMATE.start_l4_insert_~list#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (<= (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (= |~#list~0.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l2_insert_~list#1.offset|) (= |ULTIMATE.start_l3_insert_~item~1#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (= (select |#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (= |ULTIMATE.start_l2_insert_~item~2#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (<= |ULTIMATE.start_l2_insert_~list#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (= |ULTIMATE.start_l0_insert_~item~4#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~list#1.base|) |ULTIMATE.start_l4_insert_~list#1.offset|) |ULTIMATE.start_l4_insert_~item~0#1.offset|) (<= |ULTIMATE.start_l1_insert_~list#1.offset| 4) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (= (select |#valid| |ULTIMATE.start_l4_insert_~list#1.base|) 1) (= |ULTIMATE.start_l4_insert_~item~0#1.base| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~list#1.base|) |ULTIMATE.start_l4_insert_~list#1.offset|)) (<= 0 |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= (+ 4 |ULTIMATE.start_l4_insert_~list#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~list#1.base|)) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (<= |ULTIMATE.start_l4_insert_~list#1.offset| 0) (= |ULTIMATE.start_l0_insert_#in~list#1.base| |~#list~0.base|) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= |ULTIMATE.start_l0_insert_~list#1.base| |ULTIMATE.start_l0_insert_#in~list#1.base|) (not (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0)) (<= 0 |ULTIMATE.start_l4_insert_~list#1.offset|) (= |ULTIMATE.start_l0_insert_~item~4#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (<= 4 |ULTIMATE.start_l1_insert_~list#1.offset|) (<= 3 |ULTIMATE.start_l0_insert_~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| 0) (< (select |#length| |ULTIMATE.start_l3_insert_~list#1.base|) (+ |ULTIMATE.start_l3_insert_~list#1.offset| 4)) (= |ULTIMATE.start_l0_insert_~list#1.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= (+ |ULTIMATE.start_l0_insert_~item~4#1.offset| 4) |ULTIMATE.start_l1_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| |ULTIMATE.start_l2_insert_#in~list#1.offset|) (= |#NULL.offset| 0) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0) (<= |ULTIMATE.start_l4_insert_#in~list#1.offset| 0) (<= |ULTIMATE.start_l3_insert_~list#1.offset| 4) (= |ULTIMATE.start_l2_insert_~item~2#1.offset| 0) (= (+ |ULTIMATE.start_l2_insert_~item~2#1.offset| 4) |ULTIMATE.start_l3_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l4_insert_#in~list#1.offset|) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| 0) (< 0 |#StackHeapBarrier|) (= |#NULL.base| 0))' at error location [2022-11-26 00:26:19,550 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:26:19,550 INFO L184 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2022-11-26 00:26:19,550 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10] total 18 [2022-11-26 00:26:19,550 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [986944376] [2022-11-26 00:26:19,550 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2022-11-26 00:26:19,550 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2022-11-26 00:26:19,551 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:26:19,551 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2022-11-26 00:26:19,552 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=274, Invalid=1706, Unknown=0, NotChecked=0, Total=1980 [2022-11-26 00:26:19,552 INFO L87 Difference]: Start difference. First operand 159 states and 180 transitions. Second operand has 18 states, 16 states have (on average 2.8125) internal successors, (45), 18 states have internal predecessors, (45), 2 states have call successors, (11), 2 states have call predecessors, (11), 4 states have return successors, (12), 1 states have call predecessors, (12), 2 states have call successors, (12) [2022-11-26 00:26:20,690 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:26:20,690 INFO L93 Difference]: Finished difference Result 160 states and 176 transitions. [2022-11-26 00:26:20,691 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2022-11-26 00:26:20,691 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 16 states have (on average 2.8125) internal successors, (45), 18 states have internal predecessors, (45), 2 states have call successors, (11), 2 states have call predecessors, (11), 4 states have return successors, (12), 1 states have call predecessors, (12), 2 states have call successors, (12) Word has length 91 [2022-11-26 00:26:20,691 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:26:20,692 INFO L225 Difference]: With dead ends: 160 [2022-11-26 00:26:20,692 INFO L226 Difference]: Without dead ends: 158 [2022-11-26 00:26:20,693 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 287 GetRequests, 222 SyntacticMatches, 6 SemanticMatches, 59 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 922 ImplicationChecksByTransitivity, 11.6s TimeCoverageRelationStatistics Valid=485, Invalid=3175, Unknown=0, NotChecked=0, Total=3660 [2022-11-26 00:26:20,693 INFO L413 NwaCegarLoop]: 118 mSDtfsCounter, 36 mSDsluCounter, 945 mSDsCounter, 0 mSdLazyCounter, 541 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 1063 SdHoareTripleChecker+Invalid, 558 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 541 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-26 00:26:20,694 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [36 Valid, 1063 Invalid, 558 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 541 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-26 00:26:20,694 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 158 states. [2022-11-26 00:26:20,702 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 158 to 158. [2022-11-26 00:26:20,703 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 158 states, 94 states have (on average 1.7127659574468086) internal successors, (161), 149 states have internal predecessors, (161), 6 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2022-11-26 00:26:20,704 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 158 states to 158 states and 173 transitions. [2022-11-26 00:26:20,704 INFO L78 Accepts]: Start accepts. Automaton has 158 states and 173 transitions. Word has length 91 [2022-11-26 00:26:20,704 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:26:20,704 INFO L495 AbstractCegarLoop]: Abstraction has 158 states and 173 transitions. [2022-11-26 00:26:20,705 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 16 states have (on average 2.8125) internal successors, (45), 18 states have internal predecessors, (45), 2 states have call successors, (11), 2 states have call predecessors, (11), 4 states have return successors, (12), 1 states have call predecessors, (12), 2 states have call successors, (12) [2022-11-26 00:26:20,705 INFO L276 IsEmpty]: Start isEmpty. Operand 158 states and 173 transitions. [2022-11-26 00:26:20,706 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2022-11-26 00:26:20,706 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:26:20,706 INFO L195 NwaCegarLoop]: trace histogram [50, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:26:20,734 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Forceful destruction successful, exit code 0 [2022-11-26 00:26:20,906 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2022-11-26 00:26:20,907 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 67 more)] === [2022-11-26 00:26:20,907 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:26:20,907 INFO L85 PathProgramCache]: Analyzing trace with hash -231923256, now seen corresponding path program 5 times [2022-11-26 00:26:20,907 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:26:20,907 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [311311388] [2022-11-26 00:26:20,907 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:26:20,907 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:26:20,958 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-11-26 00:26:20,959 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1969883549] [2022-11-26 00:26:20,959 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-11-26 00:26:20,959 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:26:20,959 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:26:20,960 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:26:20,964 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2022-11-26 00:28:37,167 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-11-26 00:28:37,167 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:28:37,250 INFO L263 TraceCheckSpWp]: Trace formula consists of 839 conjuncts, 44 conjunts are in the unsatisfiable core [2022-11-26 00:28:37,253 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:28:37,270 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-26 00:28:37,302 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:28:37,634 INFO L134 CoverageAnalysis]: Checked inductivity of 1600 backedges. 510 proven. 55 refuted. 0 times theorem prover too weak. 1035 trivial. 0 not checked. [2022-11-26 00:28:37,635 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:28:38,416 INFO L134 CoverageAnalysis]: Checked inductivity of 1600 backedges. 510 proven. 55 refuted. 0 times theorem prover too weak. 1035 trivial. 0 not checked. [2022-11-26 00:28:38,416 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:28:38,416 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [311311388] [2022-11-26 00:28:38,416 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-11-26 00:28:38,416 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1969883549] [2022-11-26 00:28:38,417 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1969883549] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-26 00:28:38,417 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1268954425] [2022-11-26 00:28:38,418 INFO L159 IcfgInterpreter]: Started Sifa with 29 locations of interest [2022-11-26 00:28:38,418 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:28:38,419 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:28:38,419 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:28:38,419 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:28:38,444 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:28:38,451 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:28:38,473 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:28:38,552 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:28:38,563 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:28:38,602 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 197 treesize of output 196 [2022-11-26 00:28:38,615 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-11-26 00:28:38,629 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-11-26 00:28:38,676 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:28:38,682 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:28:38,688 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:28:38,713 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:28:38,720 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:28:38,746 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:28:38,751 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:28:39,600 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 1 [2022-11-26 00:28:39,615 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:28:39,629 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:28:39,702 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:28:39,703 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:28:39,718 INFO L321 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2022-11-26 00:28:39,718 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 28 [2022-11-26 00:28:39,743 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:28:39,744 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:28:39,760 INFO L321 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2022-11-26 00:28:39,760 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 25 treesize of output 27 [2022-11-26 00:28:39,779 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-11-26 00:28:39,826 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:28:39,827 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:28:39,828 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:28:39,845 INFO L321 Elim1Store]: treesize reduction 21, result has 34.4 percent of original size [2022-11-26 00:28:39,845 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 33 treesize of output 35 [2022-11-26 00:28:39,893 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:28:39,894 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:28:39,895 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:28:39,912 INFO L321 Elim1Store]: treesize reduction 21, result has 34.4 percent of original size [2022-11-26 00:28:39,912 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 32 treesize of output 34 [2022-11-26 00:28:39,938 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-11-26 00:28:40,070 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 80 for LOIs [2022-11-26 00:28:40,114 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:28:40,140 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:28:40,229 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:28:40,278 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:28:40,328 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:28:40,367 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:28:40,377 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:28:40,389 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:28:40,399 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:28:52,489 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11317#(and (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (<= 4 |ULTIMATE.start_l3_insert_~list#1.offset|) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (= |ULTIMATE.start_l4_insert_~item~0#1.offset| 0) (= |ULTIMATE.start_l4_insert_~list#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (<= (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (= |~#list~0.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l2_insert_~list#1.offset|) (= |ULTIMATE.start_l3_insert_~item~1#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (= (select |#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (= |ULTIMATE.start_l2_insert_~item~2#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (<= |ULTIMATE.start_l2_insert_~list#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (= |ULTIMATE.start_l0_insert_~item~4#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~list#1.base|) |ULTIMATE.start_l4_insert_~list#1.offset|) |ULTIMATE.start_l4_insert_~item~0#1.offset|) (<= |ULTIMATE.start_l1_insert_~list#1.offset| 4) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (= (select |#valid| |ULTIMATE.start_l4_insert_~list#1.base|) 1) (= |ULTIMATE.start_l4_insert_~item~0#1.base| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~list#1.base|) |ULTIMATE.start_l4_insert_~list#1.offset|)) (<= 0 |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= (+ 4 |ULTIMATE.start_l4_insert_~list#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~list#1.base|)) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (<= |ULTIMATE.start_l4_insert_~list#1.offset| 0) (= |ULTIMATE.start_l0_insert_#in~list#1.base| |~#list~0.base|) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= |ULTIMATE.start_l0_insert_~list#1.base| |ULTIMATE.start_l0_insert_#in~list#1.base|) (not (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0)) (<= 0 |ULTIMATE.start_l4_insert_~list#1.offset|) (= |ULTIMATE.start_l0_insert_~item~4#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (<= 4 |ULTIMATE.start_l1_insert_~list#1.offset|) (<= 3 |ULTIMATE.start_l0_insert_~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| 0) (< (select |#length| |ULTIMATE.start_l3_insert_~list#1.base|) (+ |ULTIMATE.start_l3_insert_~list#1.offset| 4)) (= |ULTIMATE.start_l0_insert_~list#1.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= (+ |ULTIMATE.start_l0_insert_~item~4#1.offset| 4) |ULTIMATE.start_l1_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| |ULTIMATE.start_l2_insert_#in~list#1.offset|) (= |#NULL.offset| 0) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0) (<= |ULTIMATE.start_l4_insert_#in~list#1.offset| 0) (<= |ULTIMATE.start_l3_insert_~list#1.offset| 4) (= |ULTIMATE.start_l2_insert_~item~2#1.offset| 0) (= (+ |ULTIMATE.start_l2_insert_~item~2#1.offset| 4) |ULTIMATE.start_l3_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l4_insert_#in~list#1.offset|) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| 0) (< 0 |#StackHeapBarrier|) (= |#NULL.base| 0))' at error location [2022-11-26 00:28:52,490 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:28:52,490 INFO L184 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2022-11-26 00:28:52,490 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 15] total 28 [2022-11-26 00:28:52,490 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1710461244] [2022-11-26 00:28:52,490 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2022-11-26 00:28:52,491 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-11-26 00:28:52,491 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:28:52,491 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-11-26 00:28:52,493 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=398, Invalid=2572, Unknown=0, NotChecked=0, Total=2970 [2022-11-26 00:28:52,493 INFO L87 Difference]: Start difference. First operand 158 states and 173 transitions. Second operand has 28 states, 26 states have (on average 1.9230769230769231) internal successors, (50), 28 states have internal predecessors, (50), 1 states have call successors, (6), 1 states have call predecessors, (6), 3 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-11-26 00:29:00,057 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:29:00,057 INFO L93 Difference]: Finished difference Result 176 states and 210 transitions. [2022-11-26 00:29:00,058 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2022-11-26 00:29:00,058 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 26 states have (on average 1.9230769230769231) internal successors, (50), 28 states have internal predecessors, (50), 1 states have call successors, (6), 1 states have call predecessors, (6), 3 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) Word has length 103 [2022-11-26 00:29:00,058 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:29:00,059 INFO L225 Difference]: With dead ends: 176 [2022-11-26 00:29:00,059 INFO L226 Difference]: Without dead ends: 174 [2022-11-26 00:29:00,061 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 342 GetRequests, 248 SyntacticMatches, 6 SemanticMatches, 88 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2110 ImplicationChecksByTransitivity, 19.2s TimeCoverageRelationStatistics Valid=1268, Invalid=6742, Unknown=0, NotChecked=0, Total=8010 [2022-11-26 00:29:00,062 INFO L413 NwaCegarLoop]: 117 mSDtfsCounter, 99 mSDsluCounter, 1611 mSDsCounter, 0 mSdLazyCounter, 984 mSolverCounterSat, 52 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 99 SdHoareTripleChecker+Valid, 1728 SdHoareTripleChecker+Invalid, 1036 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 52 IncrementalHoareTripleChecker+Valid, 984 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-11-26 00:29:00,062 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [99 Valid, 1728 Invalid, 1036 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [52 Valid, 984 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-11-26 00:29:00,063 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 174 states. [2022-11-26 00:29:00,067 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 174 to 172. [2022-11-26 00:29:00,067 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 172 states, 108 states have (on average 1.6296296296296295) internal successors, (176), 163 states have internal predecessors, (176), 6 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2022-11-26 00:29:00,068 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 172 states to 172 states and 188 transitions. [2022-11-26 00:29:00,068 INFO L78 Accepts]: Start accepts. Automaton has 172 states and 188 transitions. Word has length 103 [2022-11-26 00:29:00,068 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:29:00,068 INFO L495 AbstractCegarLoop]: Abstraction has 172 states and 188 transitions. [2022-11-26 00:29:00,069 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 26 states have (on average 1.9230769230769231) internal successors, (50), 28 states have internal predecessors, (50), 1 states have call successors, (6), 1 states have call predecessors, (6), 3 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-11-26 00:29:00,069 INFO L276 IsEmpty]: Start isEmpty. Operand 172 states and 188 transitions. [2022-11-26 00:29:00,070 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 116 [2022-11-26 00:29:00,070 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:29:00,070 INFO L195 NwaCegarLoop]: trace histogram [62, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:29:00,113 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Forceful destruction successful, exit code 0 [2022-11-26 00:29:00,285 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable17 [2022-11-26 00:29:00,285 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 67 more)] === [2022-11-26 00:29:00,286 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:29:00,286 INFO L85 PathProgramCache]: Analyzing trace with hash -964040952, now seen corresponding path program 6 times [2022-11-26 00:29:00,286 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:29:00,286 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1322725762] [2022-11-26 00:29:00,286 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:29:00,286 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:29:00,355 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-11-26 00:29:00,355 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1966717412] [2022-11-26 00:29:00,355 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-11-26 00:29:00,355 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:29:00,355 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:29:00,356 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:29:00,361 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2022-11-26 00:29:05,733 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-11-26 00:29:05,734 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-26 00:29:05,746 INFO L263 TraceCheckSpWp]: Trace formula consists of 1517 conjuncts, 114 conjunts are in the unsatisfiable core [2022-11-26 00:29:05,752 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:29:05,818 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-26 00:29:05,827 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-26 00:29:23,134 WARN L859 $PredicateComparison]: unable to prove that (exists ((|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int) (v_ArrVal_6077 Int)) (and (= (store |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| 1) |c_#valid|) (= (store |c_old(#length)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_6077) |c_#length|) (= (select |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 0))) is different from true [2022-11-26 00:29:23,325 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:29:23,326 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:29:23,404 INFO L321 Elim1Store]: treesize reduction 18, result has 35.7 percent of original size [2022-11-26 00:29:23,404 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 17 treesize of output 21 [2022-11-26 00:29:24,687 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-26 00:29:24,688 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 16 treesize of output 22 [2022-11-26 00:29:25,003 INFO L321 Elim1Store]: treesize reduction 36, result has 34.5 percent of original size [2022-11-26 00:29:25,004 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 22 treesize of output 33 [2022-11-26 00:29:26,612 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_6080 Int) (|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (and (= |c_#length| (store |c_old(#length)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_6080)) (= (select |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 0))) is different from true [2022-11-26 00:29:26,824 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:29:26,825 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:29:26,889 INFO L321 Elim1Store]: treesize reduction 12, result has 52.0 percent of original size [2022-11-26 00:29:26,889 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 3 case distinctions, treesize of input 21 treesize of output 25 [2022-11-26 00:29:27,963 INFO L134 CoverageAnalysis]: Checked inductivity of 2338 backedges. 590 proven. 337 refuted. 0 times theorem prover too weak. 389 trivial. 1022 not checked. [2022-11-26 00:29:27,963 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:29:30,429 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:29:30,429 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1322725762] [2022-11-26 00:29:30,429 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-11-26 00:29:30,429 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1966717412] [2022-11-26 00:29:30,429 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1966717412] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:29:30,430 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [147315923] [2022-11-26 00:29:30,431 INFO L159 IcfgInterpreter]: Started Sifa with 29 locations of interest [2022-11-26 00:29:30,431 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:29:30,432 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:29:30,432 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:29:30,432 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:29:30,463 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:29:30,470 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:29:30,489 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:29:30,500 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:29:30,519 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:29:30,574 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-11-26 00:29:30,596 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-11-26 00:29:30,607 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 197 treesize of output 196 [2022-11-26 00:29:30,648 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:29:30,654 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:29:30,660 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:29:30,679 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:29:30,686 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:29:30,712 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:29:30,725 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:29:31,594 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 1 [2022-11-26 00:29:31,614 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:29:31,662 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:29:31,729 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:29:31,730 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:29:31,746 INFO L321 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2022-11-26 00:29:31,746 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 28 [2022-11-26 00:29:31,773 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-11-26 00:29:31,794 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:29:31,796 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:29:31,811 INFO L321 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2022-11-26 00:29:31,811 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 25 treesize of output 27 [2022-11-26 00:29:31,871 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-11-26 00:29:31,888 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:29:31,890 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:29:31,890 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:29:31,907 INFO L321 Elim1Store]: treesize reduction 21, result has 34.4 percent of original size [2022-11-26 00:29:31,907 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 33 treesize of output 35 [2022-11-26 00:29:31,932 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:29:31,933 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:29:31,934 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:29:31,951 INFO L321 Elim1Store]: treesize reduction 21, result has 34.4 percent of original size [2022-11-26 00:29:31,951 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 32 treesize of output 34 [2022-11-26 00:29:32,097 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 80 for LOIs [2022-11-26 00:29:32,129 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:29:32,165 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:29:32,295 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:29:32,320 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:29:32,361 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:29:32,423 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:29:32,432 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:29:32,441 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:29:32,456 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:30:02,821 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '12159#(and (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (<= 4 |ULTIMATE.start_l3_insert_~list#1.offset|) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (= |ULTIMATE.start_l4_insert_~item~0#1.offset| 0) (= |ULTIMATE.start_l4_insert_~list#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (<= (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (= |~#list~0.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l2_insert_~list#1.offset|) (= |ULTIMATE.start_l3_insert_~item~1#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (= (select |#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (= |ULTIMATE.start_l2_insert_~item~2#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (<= |ULTIMATE.start_l2_insert_~list#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (= |ULTIMATE.start_l0_insert_~item~4#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~list#1.base|) |ULTIMATE.start_l4_insert_~list#1.offset|) |ULTIMATE.start_l4_insert_~item~0#1.offset|) (<= |ULTIMATE.start_l1_insert_~list#1.offset| 4) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (= (select |#valid| |ULTIMATE.start_l4_insert_~list#1.base|) 1) (= |ULTIMATE.start_l4_insert_~item~0#1.base| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~list#1.base|) |ULTIMATE.start_l4_insert_~list#1.offset|)) (<= 0 |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= (+ 4 |ULTIMATE.start_l4_insert_~list#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~list#1.base|)) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (<= |ULTIMATE.start_l4_insert_~list#1.offset| 0) (= |ULTIMATE.start_l0_insert_#in~list#1.base| |~#list~0.base|) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= |ULTIMATE.start_l0_insert_~list#1.base| |ULTIMATE.start_l0_insert_#in~list#1.base|) (not (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0)) (<= 0 |ULTIMATE.start_l4_insert_~list#1.offset|) (= |ULTIMATE.start_l0_insert_~item~4#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (<= 4 |ULTIMATE.start_l1_insert_~list#1.offset|) (<= 3 |ULTIMATE.start_l0_insert_~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| 0) (< (select |#length| |ULTIMATE.start_l3_insert_~list#1.base|) (+ |ULTIMATE.start_l3_insert_~list#1.offset| 4)) (= |ULTIMATE.start_l0_insert_~list#1.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= (+ |ULTIMATE.start_l0_insert_~item~4#1.offset| 4) |ULTIMATE.start_l1_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| |ULTIMATE.start_l2_insert_#in~list#1.offset|) (= |#NULL.offset| 0) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0) (<= |ULTIMATE.start_l4_insert_#in~list#1.offset| 0) (<= |ULTIMATE.start_l3_insert_~list#1.offset| 4) (= |ULTIMATE.start_l2_insert_~item~2#1.offset| 0) (= (+ |ULTIMATE.start_l2_insert_~item~2#1.offset| 4) |ULTIMATE.start_l3_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l4_insert_#in~list#1.offset|) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| 0) (< 0 |#StackHeapBarrier|) (= |#NULL.base| 0))' at error location [2022-11-26 00:30:02,822 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:30:02,822 INFO L184 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2022-11-26 00:30:02,822 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [31] total 31 [2022-11-26 00:30:02,822 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [566705398] [2022-11-26 00:30:02,822 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2022-11-26 00:30:02,822 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2022-11-26 00:30:02,823 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:30:02,823 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2022-11-26 00:30:02,824 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=286, Invalid=3136, Unknown=8, NotChecked=230, Total=3660 [2022-11-26 00:30:02,824 INFO L87 Difference]: Start difference. First operand 172 states and 188 transitions. Second operand has 32 states, 27 states have (on average 2.111111111111111) internal successors, (57), 29 states have internal predecessors, (57), 4 states have call successors, (6), 2 states have call predecessors, (6), 5 states have return successors, (6), 5 states have call predecessors, (6), 4 states have call successors, (6) [2022-11-26 00:30:04,872 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-11-26 00:30:09,018 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-11-26 00:30:13,270 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-11-26 00:30:15,480 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-11-26 00:30:17,717 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-11-26 00:30:19,892 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-11-26 00:30:24,104 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-11-26 00:30:26,388 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-11-26 00:30:30,596 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-11-26 00:30:44,625 WARN L233 SmtUtils]: Spent 6.34s on a formula simplification. DAG size of input: 50 DAG size of output: 39 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-26 00:30:54,572 WARN L233 SmtUtils]: Spent 8.24s on a formula simplification. DAG size of input: 66 DAG size of output: 46 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-26 00:31:16,434 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:31:16,434 INFO L93 Difference]: Finished difference Result 204 states and 225 transitions. [2022-11-26 00:31:16,435 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2022-11-26 00:31:16,435 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 27 states have (on average 2.111111111111111) internal successors, (57), 29 states have internal predecessors, (57), 4 states have call successors, (6), 2 states have call predecessors, (6), 5 states have return successors, (6), 5 states have call predecessors, (6), 4 states have call successors, (6) Word has length 115 [2022-11-26 00:31:16,435 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:31:16,437 INFO L225 Difference]: With dead ends: 204 [2022-11-26 00:31:16,437 INFO L226 Difference]: Without dead ends: 204 [2022-11-26 00:31:16,438 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 253 GetRequests, 172 SyntacticMatches, 6 SemanticMatches, 75 ConstructedPredicates, 2 IntricatePredicates, 0 DeprecatedPredicates, 1437 ImplicationChecksByTransitivity, 100.5s TimeCoverageRelationStatistics Valid=409, Invalid=5135, Unknown=14, NotChecked=294, Total=5852 [2022-11-26 00:31:16,439 INFO L413 NwaCegarLoop]: 86 mSDtfsCounter, 300 mSDsluCounter, 1450 mSDsCounter, 0 mSdLazyCounter, 2226 mSolverCounterSat, 28 mSolverCounterUnsat, 9 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 25.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 300 SdHoareTripleChecker+Valid, 1536 SdHoareTripleChecker+Invalid, 2616 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Valid, 2226 IncrementalHoareTripleChecker+Invalid, 9 IncrementalHoareTripleChecker+Unknown, 353 IncrementalHoareTripleChecker+Unchecked, 25.4s IncrementalHoareTripleChecker+Time [2022-11-26 00:31:16,439 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [300 Valid, 1536 Invalid, 2616 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [28 Valid, 2226 Invalid, 9 Unknown, 353 Unchecked, 25.4s Time] [2022-11-26 00:31:16,440 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 204 states. [2022-11-26 00:31:16,446 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 204 to 169. [2022-11-26 00:31:16,447 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 169 states, 108 states have (on average 1.6018518518518519) internal successors, (173), 160 states have internal predecessors, (173), 6 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2022-11-26 00:31:16,448 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 169 states to 169 states and 185 transitions. [2022-11-26 00:31:16,449 INFO L78 Accepts]: Start accepts. Automaton has 169 states and 185 transitions. Word has length 115 [2022-11-26 00:31:16,449 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:31:16,449 INFO L495 AbstractCegarLoop]: Abstraction has 169 states and 185 transitions. [2022-11-26 00:31:16,449 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 27 states have (on average 2.111111111111111) internal successors, (57), 29 states have internal predecessors, (57), 4 states have call successors, (6), 2 states have call predecessors, (6), 5 states have return successors, (6), 5 states have call predecessors, (6), 4 states have call successors, (6) [2022-11-26 00:31:16,450 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 185 transitions. [2022-11-26 00:31:16,451 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 117 [2022-11-26 00:31:16,452 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:31:16,452 INFO L195 NwaCegarLoop]: trace histogram [62, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:31:16,509 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Forceful destruction successful, exit code 0 [2022-11-26 00:31:16,676 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:31:16,676 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 67 more)] === [2022-11-26 00:31:16,677 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:31:16,677 INFO L85 PathProgramCache]: Analyzing trace with hash 179501563, now seen corresponding path program 1 times [2022-11-26 00:31:16,677 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:31:16,677 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [638524655] [2022-11-26 00:31:16,677 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:31:16,677 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:31:16,742 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-11-26 00:31:16,743 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1183768067] [2022-11-26 00:31:16,743 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:31:16,743 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:31:16,743 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:31:16,745 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:31:16,767 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2022-11-26 00:31:21,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:31:21,480 INFO L263 TraceCheckSpWp]: Trace formula consists of 1525 conjuncts, 87 conjunts are in the unsatisfiable core [2022-11-26 00:31:21,483 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:31:21,545 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-26 00:31:32,509 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_6890 Int) (v_ArrVal_6889 Int) (|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (and (= |c_#valid| (store |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_6889)) (= |c_#length| (store |c_old(#length)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_6890)) (= (select |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 0))) is different from true [2022-11-26 00:31:32,731 INFO L321 Elim1Store]: treesize reduction 18, result has 35.7 percent of original size [2022-11-26 00:31:32,731 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 17 treesize of output 21 [2022-11-26 00:31:32,829 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:31:33,102 WARN L859 $PredicateComparison]: unable to prove that (exists ((|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int) (v_ArrVal_6891 Int)) (and (= (store |c_old(#length)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_6891) |c_#length|) (= (select |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 0))) is different from true [2022-11-26 00:31:33,242 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:31:33,243 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:31:33,314 INFO L321 Elim1Store]: treesize reduction 4, result has 50.0 percent of original size [2022-11-26 00:31:33,314 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 11 [2022-11-26 00:31:34,377 INFO L134 CoverageAnalysis]: Checked inductivity of 2338 backedges. 862 proven. 253 refuted. 0 times theorem prover too weak. 495 trivial. 728 not checked. [2022-11-26 00:31:34,377 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:31:38,713 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:31:38,713 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [638524655] [2022-11-26 00:31:38,713 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-11-26 00:31:38,713 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1183768067] [2022-11-26 00:31:38,713 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1183768067] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:31:38,713 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1159141185] [2022-11-26 00:31:38,715 INFO L159 IcfgInterpreter]: Started Sifa with 30 locations of interest [2022-11-26 00:31:38,715 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:31:38,716 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:31:38,716 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:31:38,716 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:31:38,782 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:31:38,790 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:31:38,817 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:31:38,831 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:31:38,843 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:31:38,886 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-11-26 00:31:38,900 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-11-26 00:31:38,912 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 197 treesize of output 196 [2022-11-26 00:31:38,955 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:31:38,961 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:31:38,968 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:31:38,989 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:31:38,998 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:31:39,023 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:31:39,033 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:31:39,907 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 1 [2022-11-26 00:31:39,926 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:31:39,944 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:31:40,019 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:31:40,020 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:31:40,037 INFO L321 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2022-11-26 00:31:40,038 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 28 [2022-11-26 00:31:40,071 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-11-26 00:31:40,099 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:31:40,099 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:31:40,115 INFO L321 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2022-11-26 00:31:40,116 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 25 treesize of output 27 [2022-11-26 00:31:40,173 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-11-26 00:31:40,211 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:31:40,212 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:31:40,213 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:31:40,232 INFO L321 Elim1Store]: treesize reduction 21, result has 34.4 percent of original size [2022-11-26 00:31:40,232 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 33 treesize of output 35 [2022-11-26 00:31:40,260 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:31:40,261 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:31:40,262 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:31:40,280 INFO L321 Elim1Store]: treesize reduction 21, result has 34.4 percent of original size [2022-11-26 00:31:40,280 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 32 treesize of output 34 [2022-11-26 00:31:40,437 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 80 for LOIs [2022-11-26 00:31:40,466 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:31:40,510 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:31:40,656 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:31:40,716 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:31:40,762 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:31:40,806 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:31:40,816 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:31:40,828 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:31:40,843 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:32:19,377 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '12990#(and (<= (+ |ULTIMATE.start_l3_insert_~list#1.offset| 4) (select |#length| |ULTIMATE.start_l3_insert_~list#1.base|)) (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (<= 4 |ULTIMATE.start_l3_insert_~list#1.offset|) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (= |ULTIMATE.start_l4_insert_~item~0#1.offset| 0) (= |ULTIMATE.start_l4_insert_~list#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (<= (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (= |~#list~0.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l2_insert_~list#1.offset|) (= |ULTIMATE.start_l3_insert_~item~1#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (= (select |#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (= |ULTIMATE.start_l2_insert_~item~2#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (<= |ULTIMATE.start_l2_insert_~list#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (= |ULTIMATE.start_l0_insert_~item~4#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~list#1.base|) |ULTIMATE.start_l4_insert_~list#1.offset|) |ULTIMATE.start_l4_insert_~item~0#1.offset|) (<= |ULTIMATE.start_l1_insert_~list#1.offset| 4) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (= (select |#valid| |ULTIMATE.start_l4_insert_~list#1.base|) 1) (= |ULTIMATE.start_l4_insert_~item~0#1.base| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~list#1.base|) |ULTIMATE.start_l4_insert_~list#1.offset|)) (<= 0 |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= (select |#valid| |ULTIMATE.start_l3_insert_~list#1.base|) 1) (<= (+ 4 |ULTIMATE.start_l4_insert_~list#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~list#1.base|)) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (<= |ULTIMATE.start_l4_insert_~list#1.offset| 0) (= |ULTIMATE.start_l0_insert_#in~list#1.base| |~#list~0.base|) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (< (select |#length| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8)) (<= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= |ULTIMATE.start_l0_insert_~list#1.base| |ULTIMATE.start_l0_insert_#in~list#1.base|) (not (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0)) (<= 0 |ULTIMATE.start_l4_insert_~list#1.offset|) (= |ULTIMATE.start_l0_insert_~item~4#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (<= 4 |ULTIMATE.start_l1_insert_~list#1.offset|) (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l3_insert_~list#1.base|) |ULTIMATE.start_l3_insert_~list#1.offset|) |ULTIMATE.start_l3_insert_#t~mem11#1.base|) (<= 3 |ULTIMATE.start_l0_insert_~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= (+ |ULTIMATE.start_l0_insert_~item~4#1.offset| 4) |ULTIMATE.start_l1_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| |ULTIMATE.start_l2_insert_#in~list#1.offset|) (= |#NULL.offset| 0) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0) (<= |ULTIMATE.start_l4_insert_#in~list#1.offset| 0) (<= |ULTIMATE.start_l3_insert_~list#1.offset| 4) (= |ULTIMATE.start_l2_insert_~item~2#1.offset| 0) (= |ULTIMATE.start_l3_insert_#t~mem11#1.offset| (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l3_insert_~list#1.base|) |ULTIMATE.start_l3_insert_~list#1.offset|)) (= (+ |ULTIMATE.start_l2_insert_~item~2#1.offset| 4) |ULTIMATE.start_l3_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l4_insert_#in~list#1.offset|) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| 0) (< 0 |#StackHeapBarrier|) (= |#NULL.base| 0))' at error location [2022-11-26 00:32:19,378 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:32:19,378 INFO L184 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2022-11-26 00:32:19,378 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [26] total 26 [2022-11-26 00:32:19,378 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2094686083] [2022-11-26 00:32:19,378 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2022-11-26 00:32:19,378 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2022-11-26 00:32:19,378 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:32:19,379 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2022-11-26 00:32:19,379 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=275, Invalid=2696, Unknown=7, NotChecked=214, Total=3192 [2022-11-26 00:32:19,379 INFO L87 Difference]: Start difference. First operand 169 states and 185 transitions. Second operand has 27 states, 25 states have (on average 2.12) internal successors, (53), 25 states have internal predecessors, (53), 2 states have call successors, (6), 2 states have call predecessors, (6), 4 states have return successors, (6), 4 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-26 00:32:21,410 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-11-26 00:32:23,483 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.06s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-11-26 00:32:25,748 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-11-26 00:32:27,966 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-11-26 00:32:30,180 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-11-26 00:32:32,358 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-11-26 00:32:36,553 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-11-26 00:32:40,705 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-11-26 00:32:44,920 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-11-26 00:32:47,101 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-11-26 00:32:56,530 WARN L233 SmtUtils]: Spent 6.41s on a formula simplification. DAG size of input: 44 DAG size of output: 39 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-26 00:33:10,885 WARN L233 SmtUtils]: Spent 13.11s on a formula simplification. DAG size of input: 53 DAG size of output: 48 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-11-26 00:33:15,420 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:33:15,420 INFO L93 Difference]: Finished difference Result 199 states and 218 transitions. [2022-11-26 00:33:15,421 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-11-26 00:33:15,421 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 25 states have (on average 2.12) internal successors, (53), 25 states have internal predecessors, (53), 2 states have call successors, (6), 2 states have call predecessors, (6), 4 states have return successors, (6), 4 states have call predecessors, (6), 2 states have call successors, (6) Word has length 116 [2022-11-26 00:33:15,422 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:33:15,422 INFO L225 Difference]: With dead ends: 199 [2022-11-26 00:33:15,423 INFO L226 Difference]: Without dead ends: 199 [2022-11-26 00:33:15,423 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 251 GetRequests, 178 SyntacticMatches, 6 SemanticMatches, 67 ConstructedPredicates, 2 IntricatePredicates, 0 DeprecatedPredicates, 1049 ImplicationChecksByTransitivity, 84.2s TimeCoverageRelationStatistics Valid=362, Invalid=4056, Unknown=12, NotChecked=262, Total=4692 [2022-11-26 00:33:15,424 INFO L413 NwaCegarLoop]: 86 mSDtfsCounter, 227 mSDsluCounter, 1230 mSDsCounter, 0 mSdLazyCounter, 1572 mSolverCounterSat, 12 mSolverCounterUnsat, 10 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 25.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 227 SdHoareTripleChecker+Valid, 1316 SdHoareTripleChecker+Invalid, 1902 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 1572 IncrementalHoareTripleChecker+Invalid, 10 IncrementalHoareTripleChecker+Unknown, 308 IncrementalHoareTripleChecker+Unchecked, 25.4s IncrementalHoareTripleChecker+Time [2022-11-26 00:33:15,424 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [227 Valid, 1316 Invalid, 1902 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 1572 Invalid, 10 Unknown, 308 Unchecked, 25.4s Time] [2022-11-26 00:33:15,425 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 199 states. [2022-11-26 00:33:15,428 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 199 to 168. [2022-11-26 00:33:15,429 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 168 states, 108 states have (on average 1.5925925925925926) internal successors, (172), 159 states have internal predecessors, (172), 6 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2022-11-26 00:33:15,429 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 168 states to 168 states and 184 transitions. [2022-11-26 00:33:15,430 INFO L78 Accepts]: Start accepts. Automaton has 168 states and 184 transitions. Word has length 116 [2022-11-26 00:33:15,430 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:33:15,430 INFO L495 AbstractCegarLoop]: Abstraction has 168 states and 184 transitions. [2022-11-26 00:33:15,430 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 25 states have (on average 2.12) internal successors, (53), 25 states have internal predecessors, (53), 2 states have call successors, (6), 2 states have call predecessors, (6), 4 states have return successors, (6), 4 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-26 00:33:15,431 INFO L276 IsEmpty]: Start isEmpty. Operand 168 states and 184 transitions. [2022-11-26 00:33:15,431 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 120 [2022-11-26 00:33:15,431 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:33:15,432 INFO L195 NwaCegarLoop]: trace histogram [62, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:33:15,484 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Forceful destruction successful, exit code 0 [2022-11-26 00:33:15,645 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19,20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:33:15,645 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr14REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 67 more)] === [2022-11-26 00:33:15,646 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:33:15,646 INFO L85 PathProgramCache]: Analyzing trace with hash 304858496, now seen corresponding path program 1 times [2022-11-26 00:33:15,646 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:33:15,646 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2059279383] [2022-11-26 00:33:15,646 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:33:15,646 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:33:15,719 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-11-26 00:33:15,721 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [203892780] [2022-11-26 00:33:15,722 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:33:15,722 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:33:15,722 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:33:15,723 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:33:15,745 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2022-11-26 00:33:16,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:33:16,531 INFO L263 TraceCheckSpWp]: Trace formula consists of 1561 conjuncts, 57 conjunts are in the unsatisfiable core [2022-11-26 00:33:16,535 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:33:16,776 INFO L321 Elim1Store]: treesize reduction 18, result has 35.7 percent of original size [2022-11-26 00:33:16,777 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 17 treesize of output 21 [2022-11-26 00:33:16,854 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_7724 Int) (|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (and (= |c_#valid| (store |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_7724)) (= (select |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 0))) is different from true [2022-11-26 00:33:16,930 INFO L321 Elim1Store]: treesize reduction 36, result has 34.5 percent of original size [2022-11-26 00:33:16,931 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 22 treesize of output 33 [2022-11-26 00:33:16,976 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_7725 Int)) (= |c_#valid| (store |c_old(#valid)| |c_zalloc_or_die_calloc_model_~ptr~0#1.base| v_ArrVal_7725))) is different from true [2022-11-26 00:33:17,006 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_7725 Int)) (= |c_#valid| (store |c_old(#valid)| |c_zalloc_or_die_#res#1.base| v_ArrVal_7725))) is different from true [2022-11-26 00:33:17,035 INFO L321 Elim1Store]: treesize reduction 20, result has 48.7 percent of original size [2022-11-26 00:33:17,035 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 17 treesize of output 30 [2022-11-26 00:33:17,130 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_7726 Int)) (= |c_#valid| (store |c_old(#valid)| |c_zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_7726))) is different from true [2022-11-26 00:33:17,308 INFO L321 Elim1Store]: treesize reduction 20, result has 57.4 percent of original size [2022-11-26 00:33:17,309 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 31 treesize of output 52 [2022-11-26 00:33:17,582 INFO L134 CoverageAnalysis]: Checked inductivity of 2338 backedges. 554 proven. 502 refuted. 0 times theorem prover too weak. 440 trivial. 842 not checked. [2022-11-26 00:33:17,582 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:33:17,718 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:33:17,718 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2059279383] [2022-11-26 00:33:17,718 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-11-26 00:33:17,718 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [203892780] [2022-11-26 00:33:17,718 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [203892780] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:33:17,718 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [877532596] [2022-11-26 00:33:17,720 INFO L159 IcfgInterpreter]: Started Sifa with 33 locations of interest [2022-11-26 00:33:17,721 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:33:17,721 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:33:17,721 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:33:17,721 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:33:17,753 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:33:17,761 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:33:17,783 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:33:17,793 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:33:17,805 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:33:17,843 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-11-26 00:33:17,857 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-11-26 00:33:17,871 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 197 treesize of output 196 [2022-11-26 00:33:17,915 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:33:17,922 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:33:17,930 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:33:17,959 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:33:17,964 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:33:17,990 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:33:17,998 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:33:18,928 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:33:18,955 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 1 [2022-11-26 00:33:18,973 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:33:19,034 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:33:19,035 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:33:19,049 INFO L321 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2022-11-26 00:33:19,049 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 28 [2022-11-26 00:33:19,074 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-11-26 00:33:19,108 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:33:19,109 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:33:19,123 INFO L321 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2022-11-26 00:33:19,124 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 25 treesize of output 27 [2022-11-26 00:33:19,187 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-11-26 00:33:19,221 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:33:19,223 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:33:19,224 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:33:19,247 INFO L321 Elim1Store]: treesize reduction 21, result has 34.4 percent of original size [2022-11-26 00:33:19,247 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 32 treesize of output 34 [2022-11-26 00:33:19,279 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:33:19,280 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:33:19,281 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:33:19,302 INFO L321 Elim1Store]: treesize reduction 21, result has 34.4 percent of original size [2022-11-26 00:33:19,302 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 33 treesize of output 35 [2022-11-26 00:33:19,405 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:33:19,407 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:33:19,408 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:33:19,447 INFO L321 Elim1Store]: treesize reduction 30, result has 49.2 percent of original size [2022-11-26 00:33:19,448 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 5 case distinctions, treesize of input 35 treesize of output 52 [2022-11-26 00:33:19,483 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:33:19,485 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:33:19,485 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:33:19,524 INFO L321 Elim1Store]: treesize reduction 30, result has 49.2 percent of original size [2022-11-26 00:33:19,524 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 5 case distinctions, treesize of input 34 treesize of output 51 [2022-11-26 00:33:19,558 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 1 [2022-11-26 00:33:19,640 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:33:19,641 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:33:19,643 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:33:19,643 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:33:19,682 INFO L321 Elim1Store]: treesize reduction 56, result has 29.1 percent of original size [2022-11-26 00:33:19,682 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 57 treesize of output 58 [2022-11-26 00:33:19,723 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-11-26 00:33:19,758 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:33:19,759 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:33:19,761 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:33:19,761 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:33:19,815 INFO L321 Elim1Store]: treesize reduction 44, result has 44.3 percent of original size [2022-11-26 00:33:19,816 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 83 treesize of output 82 [2022-11-26 00:33:20,071 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 80 for LOIs [2022-11-26 00:33:20,123 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:33:20,158 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:33:20,232 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:33:20,261 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:33:20,313 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:33:20,362 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:33:20,395 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:33:20,404 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:33:20,415 INFO L180 IcfgInterpreter]: Interpretation finished [2022-11-26 00:33:37,653 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '13817#(and (<= (+ |ULTIMATE.start_l3_insert_~list#1.offset| 4) (select |#length| |ULTIMATE.start_l3_insert_~list#1.base|)) (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (<= 4 |ULTIMATE.start_l3_insert_~list#1.offset|) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (= |ULTIMATE.start_l4_insert_~item~0#1.offset| 0) (= |ULTIMATE.start_l4_insert_~list#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (<= (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (= |~#list~0.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l2_insert_~list#1.offset|) (= |ULTIMATE.start_l3_insert_~item~1#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (= (select |#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (= |ULTIMATE.start_l2_insert_~item~2#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (<= |ULTIMATE.start_l2_insert_~list#1.offset| 0) (or (= |ULTIMATE.start_l4_insert_~item~0#1.base| |ULTIMATE.start_l3_insert_~item~1#1.base|) (and (not (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 4)) 0)) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (and (not (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0)) (not (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l4_insert_~item~0#1.base|)))) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (= |ULTIMATE.start_l0_insert_~item~4#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l3_insert_~list#1.base|) |ULTIMATE.start_l3_insert_~list#1.offset|)) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~list#1.base|) |ULTIMATE.start_l4_insert_~list#1.offset|) |ULTIMATE.start_l4_insert_~item~0#1.offset|) (<= |ULTIMATE.start_l1_insert_~list#1.offset| 4) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (= |ULTIMATE.start_l4_insert_~item~0#1.base| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~list#1.base|) |ULTIMATE.start_l4_insert_~list#1.offset|)) (<= 0 |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= (select |#valid| |ULTIMATE.start_l3_insert_~list#1.base|) 1) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8) (select |#length| |ULTIMATE.start_l3_insert_~item~1#1.base|)) (<= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (<= |ULTIMATE.start_l4_insert_~list#1.offset| 0) (= |ULTIMATE.start_l0_insert_#in~list#1.base| |~#list~0.base|) (not (= (select |#valid| |ULTIMATE.start_l2_insert_~list#1.base|) 1)) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (or (not (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 4)) 0)) (<= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= |ULTIMATE.start_l0_insert_~list#1.base| |ULTIMATE.start_l0_insert_#in~list#1.base|) (<= 0 |ULTIMATE.start_l4_insert_~list#1.offset|) (= |ULTIMATE.start_l0_insert_~item~4#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (<= 4 |ULTIMATE.start_l1_insert_~list#1.offset|) (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l3_insert_~list#1.base|) |ULTIMATE.start_l3_insert_~list#1.offset|) |ULTIMATE.start_l3_insert_~item~1#1.base|) (<= 3 |ULTIMATE.start_l0_insert_~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= (+ |ULTIMATE.start_l0_insert_~item~4#1.offset| 4) |ULTIMATE.start_l1_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| |ULTIMATE.start_l2_insert_#in~list#1.offset|) (= |#NULL.offset| 0) (or (= |ULTIMATE.start_l4_insert_~item~0#1.base| |ULTIMATE.start_l3_insert_~item~1#1.base|) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0)) (<= |ULTIMATE.start_l4_insert_#in~list#1.offset| 0) (<= |ULTIMATE.start_l3_insert_~list#1.offset| 4) (= (select |#valid| |ULTIMATE.start_l3_insert_~item~1#1.base|) 1) (= |ULTIMATE.start_l2_insert_~item~2#1.offset| 0) (= (+ |ULTIMATE.start_l2_insert_~item~2#1.offset| 4) |ULTIMATE.start_l3_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l4_insert_#in~list#1.offset|) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| 0) (< 0 |#StackHeapBarrier|) (= |#NULL.base| 0))' at error location [2022-11-26 00:33:37,653 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-11-26 00:33:37,653 INFO L184 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2022-11-26 00:33:37,653 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18] total 18 [2022-11-26 00:33:37,654 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1477627604] [2022-11-26 00:33:37,654 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2022-11-26 00:33:37,654 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 19 states [2022-11-26 00:33:37,654 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-11-26 00:33:37,655 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2022-11-26 00:33:37,655 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=283, Invalid=1959, Unknown=30, NotChecked=380, Total=2652 [2022-11-26 00:33:37,656 INFO L87 Difference]: Start difference. First operand 168 states and 184 transitions. Second operand has 19 states, 15 states have (on average 3.4) internal successors, (51), 16 states have internal predecessors, (51), 4 states have call successors, (6), 2 states have call predecessors, (6), 6 states have return successors, (6), 5 states have call predecessors, (6), 4 states have call successors, (6) [2022-11-26 00:33:39,149 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-26 00:33:39,149 INFO L93 Difference]: Finished difference Result 195 states and 214 transitions. [2022-11-26 00:33:39,149 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-26 00:33:39,150 INFO L78 Accepts]: Start accepts. Automaton has has 19 states, 15 states have (on average 3.4) internal successors, (51), 16 states have internal predecessors, (51), 4 states have call successors, (6), 2 states have call predecessors, (6), 6 states have return successors, (6), 5 states have call predecessors, (6), 4 states have call successors, (6) Word has length 119 [2022-11-26 00:33:39,150 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-26 00:33:39,151 INFO L225 Difference]: With dead ends: 195 [2022-11-26 00:33:39,152 INFO L226 Difference]: Without dead ends: 195 [2022-11-26 00:33:39,152 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 257 GetRequests, 191 SyntacticMatches, 10 SemanticMatches, 56 ConstructedPredicates, 4 IntricatePredicates, 0 DeprecatedPredicates, 735 ImplicationChecksByTransitivity, 17.9s TimeCoverageRelationStatistics Valid=328, Invalid=2520, Unknown=30, NotChecked=428, Total=3306 [2022-11-26 00:33:39,153 INFO L413 NwaCegarLoop]: 95 mSDtfsCounter, 195 mSDsluCounter, 791 mSDsCounter, 0 mSdLazyCounter, 815 mSolverCounterSat, 36 mSolverCounterUnsat, 31 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 195 SdHoareTripleChecker+Valid, 886 SdHoareTripleChecker+Invalid, 1572 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 36 IncrementalHoareTripleChecker+Valid, 815 IncrementalHoareTripleChecker+Invalid, 31 IncrementalHoareTripleChecker+Unknown, 690 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2022-11-26 00:33:39,153 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [195 Valid, 886 Invalid, 1572 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [36 Valid, 815 Invalid, 31 Unknown, 690 Unchecked, 1.2s Time] [2022-11-26 00:33:39,154 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 195 states. [2022-11-26 00:33:39,161 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 195 to 165. [2022-11-26 00:33:39,162 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 165 states, 108 states have (on average 1.5648148148148149) internal successors, (169), 156 states have internal predecessors, (169), 6 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2022-11-26 00:33:39,163 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 165 states to 165 states and 181 transitions. [2022-11-26 00:33:39,163 INFO L78 Accepts]: Start accepts. Automaton has 165 states and 181 transitions. Word has length 119 [2022-11-26 00:33:39,163 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-26 00:33:39,163 INFO L495 AbstractCegarLoop]: Abstraction has 165 states and 181 transitions. [2022-11-26 00:33:39,164 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 19 states, 15 states have (on average 3.4) internal successors, (51), 16 states have internal predecessors, (51), 4 states have call successors, (6), 2 states have call predecessors, (6), 6 states have return successors, (6), 5 states have call predecessors, (6), 4 states have call successors, (6) [2022-11-26 00:33:39,164 INFO L276 IsEmpty]: Start isEmpty. Operand 165 states and 181 transitions. [2022-11-26 00:33:39,165 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 120 [2022-11-26 00:33:39,165 INFO L187 NwaCegarLoop]: Found error trace [2022-11-26 00:33:39,165 INFO L195 NwaCegarLoop]: trace histogram [62, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-26 00:33:39,178 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Forceful destruction successful, exit code 0 [2022-11-26 00:33:39,376 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable20 [2022-11-26 00:33:39,376 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 67 more)] === [2022-11-26 00:33:39,377 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-26 00:33:39,377 INFO L85 PathProgramCache]: Analyzing trace with hash 304858497, now seen corresponding path program 1 times [2022-11-26 00:33:39,377 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-11-26 00:33:39,377 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1126310715] [2022-11-26 00:33:39,377 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:33:39,377 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-26 00:33:39,460 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-11-26 00:33:39,461 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [810964699] [2022-11-26 00:33:39,461 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-26 00:33:39,461 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-26 00:33:39,461 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 [2022-11-26 00:33:39,463 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-26 00:33:39,493 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2c54f31-4e81-420e-86c6-944959897d3a/bin/utaipan-ByfvJB40ur/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Waiting until timeout for monitored process [2022-11-26 00:33:40,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-26 00:33:40,371 INFO L263 TraceCheckSpWp]: Trace formula consists of 1561 conjuncts, 170 conjunts are in the unsatisfiable core [2022-11-26 00:33:40,378 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-26 00:33:40,509 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-11-26 00:33:53,457 INFO L321 Elim1Store]: treesize reduction 18, result has 35.7 percent of original size [2022-11-26 00:33:53,458 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 17 treesize of output 21 [2022-11-26 00:33:53,482 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:33:56,500 INFO L321 Elim1Store]: treesize reduction 36, result has 34.5 percent of original size [2022-11-26 00:33:56,501 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 22 treesize of output 33 [2022-11-26 00:33:56,577 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-11-26 00:33:59,175 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-26 00:33:59,176 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 16 treesize of output 22 [2022-11-26 00:33:59,428 INFO L321 Elim1Store]: treesize reduction 12, result has 52.0 percent of original size [2022-11-26 00:33:59,429 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 3 case distinctions, treesize of input 21 treesize of output 25 [2022-11-26 00:34:01,626 WARN L859 $PredicateComparison]: unable to prove that (exists ((|zalloc_or_die_calloc_model_~size#1| Int) (|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int) (v_ArrVal_8564 Int) (|zalloc_or_die_calloc_model_~nmemb#1| Int)) (let ((.cse0 (* |zalloc_or_die_calloc_model_~nmemb#1| |zalloc_or_die_calloc_model_~size#1|))) (and (= (store |c_old(#length)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_8564) |c_#length|) (= |c_zalloc_or_die_#Ultimate.C_memset_#amount#1| .cse0) (<= (mod .cse0 4294967296) v_ArrVal_8564)))) is different from true [2022-11-26 00:34:04,157 WARN L859 $PredicateComparison]: unable to prove that (exists ((|zalloc_or_die_calloc_model_~size#1| Int) (|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int) (v_ArrVal_8564 Int) (|zalloc_or_die_calloc_model_~nmemb#1| Int)) (let ((.cse0 (mod (* |zalloc_or_die_calloc_model_~nmemb#1| |zalloc_or_die_calloc_model_~size#1|) 4294967296))) (and (< 8 .cse0) (= (store |c_old(#length)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_8564) |c_#length|) (<= .cse0 v_ArrVal_8564)))) is different from true [2022-11-26 00:34:05,952 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-11-26 00:34:05,953 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 16 treesize of output 22 [2022-11-26 00:34:19,268 INFO L134 CoverageAnalysis]: Checked inductivity of 2338 backedges. 33 proven. 1244 refuted. 0 times theorem prover too weak. 293 trivial. 768 not checked. [2022-11-26 00:34:19,268 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-26 00:34:23,491 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-11-26 00:34:23,491 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1126310715] [2022-11-26 00:34:23,491 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-11-26 00:34:23,492 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [810964699] [2022-11-26 00:34:23,492 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [810964699] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-26 00:34:23,492 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1352687226] [2022-11-26 00:34:23,493 INFO L159 IcfgInterpreter]: Started Sifa with 33 locations of interest [2022-11-26 00:34:23,493 INFO L166 IcfgInterpreter]: Building call graph [2022-11-26 00:34:23,494 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-11-26 00:34:23,494 INFO L176 IcfgInterpreter]: Starting interpretation [2022-11-26 00:34:23,494 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-11-26 00:34:23,520 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:34:23,526 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:34:23,574 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:34:23,644 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:34:23,691 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:34:23,791 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-26 00:34:23,791 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 182 treesize of output 185 [2022-11-26 00:34:23,855 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-11-26 00:34:23,856 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 178 treesize of output 181 [2022-11-26 00:34:23,915 INFO L321 Elim1Store]: treesize reduction 15, result has 42.3 percent of original size [2022-11-26 00:34:23,916 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 176 treesize of output 179 [2022-11-26 00:34:24,065 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:34:24,075 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:34:24,082 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:34:24,111 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:34:24,117 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:34:24,164 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:34:24,169 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-11-26 00:34:25,309 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:34:25,328 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:34:25,357 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 1 [2022-11-26 00:34:25,430 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:34:25,434 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:34:25,448 INFO L321 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2022-11-26 00:34:25,448 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 25 treesize of output 27 [2022-11-26 00:34:25,467 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-11-26 00:34:25,494 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:34:25,495 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:34:25,515 INFO L321 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2022-11-26 00:34:25,515 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 28 [2022-11-26 00:34:25,590 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:34:25,592 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:34:25,593 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:34:25,615 INFO L321 Elim1Store]: treesize reduction 21, result has 34.4 percent of original size [2022-11-26 00:34:25,616 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 32 treesize of output 34 [2022-11-26 00:34:25,643 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:34:25,644 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:34:25,645 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:34:25,669 INFO L321 Elim1Store]: treesize reduction 21, result has 34.4 percent of original size [2022-11-26 00:34:25,670 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 33 treesize of output 35 [2022-11-26 00:34:25,709 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-11-26 00:34:25,806 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:34:25,807 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:34:25,807 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:34:25,847 INFO L321 Elim1Store]: treesize reduction 30, result has 49.2 percent of original size [2022-11-26 00:34:25,848 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 5 case distinctions, treesize of input 35 treesize of output 52 [2022-11-26 00:34:25,892 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:34:25,895 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:34:25,895 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:34:25,936 INFO L321 Elim1Store]: treesize reduction 30, result has 49.2 percent of original size [2022-11-26 00:34:25,936 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 5 case distinctions, treesize of input 34 treesize of output 51 [2022-11-26 00:34:25,961 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 1 [2022-11-26 00:34:26,058 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-11-26 00:34:26,078 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:34:26,081 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:34:26,081 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:34:26,082 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:34:26,125 INFO L321 Elim1Store]: treesize reduction 44, result has 44.3 percent of original size [2022-11-26 00:34:26,125 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 78 treesize of output 81 [2022-11-26 00:34:26,221 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:34:26,222 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:34:26,226 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-11-26 00:34:26,227 INFO L173 IndexEqualityManager]: detected equality via solver [2022-11-26 00:34:26,287 INFO L321 Elim1Store]: treesize reduction 56, result has 29.1 percent of original size [2022-11-26 00:34:26,288 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 59 treesize of output 58 [2022-11-26 00:34:26,472 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 80 for LOIs [2022-11-26 00:34:26,502 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-11-26 00:34:26,562 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-11-26 00:34:26,643 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:34:26,693 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-11-26 00:34:26,734 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-11-26 00:34:26,773 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:34:26,781 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-11-26 00:34:26,792 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-11-26 00:34:26,808 INFO L180 IcfgInterpreter]: Interpretation finished