./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/ldv-memsafety/memleaks_test18_3.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/ldv-memsafety/memleaks_test18_3.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 1df58a12292e53aa25870e709e17978d63a0e61d4dd56fb439981d66ecb6b925 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-14 03:09:16,084 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-14 03:09:16,086 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-14 03:09:16,104 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-14 03:09:16,104 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-14 03:09:16,105 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-14 03:09:16,107 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-14 03:09:16,108 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-14 03:09:16,110 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-14 03:09:16,110 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-14 03:09:16,111 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-14 03:09:16,112 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-14 03:09:16,113 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-14 03:09:16,114 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-14 03:09:16,115 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-14 03:09:16,116 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-14 03:09:16,117 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-14 03:09:16,117 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-14 03:09:16,119 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-14 03:09:16,121 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-14 03:09:16,122 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-14 03:09:16,123 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-14 03:09:16,124 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-14 03:09:16,125 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-14 03:09:16,128 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-14 03:09:16,129 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-14 03:09:16,129 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-14 03:09:16,130 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-14 03:09:16,130 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-14 03:09:16,131 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-14 03:09:16,132 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-14 03:09:16,132 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-14 03:09:16,133 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-14 03:09:16,133 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-14 03:09:16,134 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-14 03:09:16,134 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-14 03:09:16,135 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-14 03:09:16,135 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-14 03:09:16,135 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-14 03:09:16,136 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-14 03:09:16,136 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-14 03:09:16,137 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf [2022-12-14 03:09:16,156 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-14 03:09:16,156 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-14 03:09:16,165 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-14 03:09:16,166 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-14 03:09:16,166 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-12-14 03:09:16,166 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-12-14 03:09:16,166 INFO L138 SettingsManager]: * User list type=DISABLED [2022-12-14 03:09:16,167 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-12-14 03:09:16,167 INFO L138 SettingsManager]: * Explicit value domain=true [2022-12-14 03:09:16,167 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-12-14 03:09:16,167 INFO L138 SettingsManager]: * Octagon Domain=false [2022-12-14 03:09:16,167 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-12-14 03:09:16,167 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-12-14 03:09:16,167 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-12-14 03:09:16,167 INFO L138 SettingsManager]: * Interval Domain=false [2022-12-14 03:09:16,168 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-12-14 03:09:16,168 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-12-14 03:09:16,168 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-12-14 03:09:16,168 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-12-14 03:09:16,168 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-12-14 03:09:16,169 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-14 03:09:16,169 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-14 03:09:16,169 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-12-14 03:09:16,169 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-14 03:09:16,169 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-14 03:09:16,169 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-14 03:09:16,169 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-12-14 03:09:16,169 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-12-14 03:09:16,169 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-12-14 03:09:16,170 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-12-14 03:09:16,170 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-12-14 03:09:16,170 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-14 03:09:16,170 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-14 03:09:16,170 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-14 03:09:16,170 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-12-14 03:09:16,170 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 03:09:16,170 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-14 03:09:16,171 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-12-14 03:09:16,171 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-12-14 03:09:16,171 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-12-14 03:09:16,171 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-12-14 03:09:16,171 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-12-14 03:09:16,171 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1df58a12292e53aa25870e709e17978d63a0e61d4dd56fb439981d66ecb6b925 [2022-12-14 03:09:16,356 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-14 03:09:16,375 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-14 03:09:16,377 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-14 03:09:16,378 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-14 03:09:16,378 INFO L275 PluginConnector]: CDTParser initialized [2022-12-14 03:09:16,379 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/../../sv-benchmarks/c/ldv-memsafety/memleaks_test18_3.i [2022-12-14 03:09:19,024 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-14 03:09:19,255 INFO L351 CDTParser]: Found 1 translation units. [2022-12-14 03:09:19,255 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/sv-benchmarks/c/ldv-memsafety/memleaks_test18_3.i [2022-12-14 03:09:19,265 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/data/d71ed60dd/c636975394b747069df8dfa23de36b74/FLAGcbfc9f242 [2022-12-14 03:09:19,275 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/data/d71ed60dd/c636975394b747069df8dfa23de36b74 [2022-12-14 03:09:19,277 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-14 03:09:19,278 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-14 03:09:19,279 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-14 03:09:19,279 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-14 03:09:19,281 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-14 03:09:19,282 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 03:09:19" (1/1) ... [2022-12-14 03:09:19,283 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6f2f63d4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:09:19, skipping insertion in model container [2022-12-14 03:09:19,283 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 03:09:19" (1/1) ... [2022-12-14 03:09:19,288 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-14 03:09:19,323 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-14 03:09:19,575 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 03:09:19,587 ERROR L326 MainTranslator]: Unsupported Syntax: Found a cast between two array/pointer types of different sizes while using memory model HoenickeLindenmann_Original (while Not using bitvector translation) [2022-12-14 03:09:19,588 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieTranslatorObserver@2c1f9d3b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:09:19, skipping insertion in model container [2022-12-14 03:09:19,588 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-14 03:09:19,588 INFO L184 ToolchainWalker]: Toolchain execution was canceled (user or tool) before executing de.uni_freiburg.informatik.ultimate.boogie.procedureinliner [2022-12-14 03:09:19,589 INFO L158 Benchmark]: Toolchain (without parser) took 310.86ms. Allocated memory is still 144.7MB. Free memory was 108.6MB in the beginning and 94.9MB in the end (delta: 13.7MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2022-12-14 03:09:19,590 INFO L158 Benchmark]: CDTParser took 0.12ms. Allocated memory is still 144.7MB. Free memory is still 114.1MB. There was no memory consumed. Max. memory is 16.1GB. [2022-12-14 03:09:19,590 INFO L158 Benchmark]: CACSL2BoogieTranslator took 309.34ms. Allocated memory is still 144.7MB. Free memory was 108.2MB in the beginning and 94.9MB in the end (delta: 13.3MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2022-12-14 03:09:19,591 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.12ms. Allocated memory is still 144.7MB. Free memory is still 114.1MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 309.34ms. Allocated memory is still 144.7MB. Free memory was 108.2MB in the beginning and 94.9MB in the end (delta: 13.3MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - UnsupportedSyntaxResult [Line: 576]: Unsupported Syntax Found a cast between two array/pointer types of different sizes while using memory model HoenickeLindenmann_Original (while Not using bitvector translation) RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/ldv-memsafety/memleaks_test18_3.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 1df58a12292e53aa25870e709e17978d63a0e61d4dd56fb439981d66ecb6b925 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-14 03:09:21,070 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-14 03:09:21,072 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-14 03:09:21,091 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-14 03:09:21,091 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-14 03:09:21,092 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-14 03:09:21,094 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-14 03:09:21,095 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-14 03:09:21,097 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-14 03:09:21,098 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-14 03:09:21,098 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-14 03:09:21,100 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-14 03:09:21,100 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-14 03:09:21,101 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-14 03:09:21,102 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-14 03:09:21,103 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-14 03:09:21,104 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-14 03:09:21,105 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-14 03:09:21,106 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-14 03:09:21,108 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-14 03:09:21,109 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-14 03:09:21,110 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-14 03:09:21,111 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-14 03:09:21,112 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-14 03:09:21,115 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-14 03:09:21,116 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-14 03:09:21,116 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-14 03:09:21,117 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-14 03:09:21,117 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-14 03:09:21,118 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-14 03:09:21,118 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-14 03:09:21,119 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-14 03:09:21,120 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-14 03:09:21,120 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-14 03:09:21,121 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-14 03:09:21,121 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-14 03:09:21,122 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-14 03:09:21,122 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-14 03:09:21,123 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-14 03:09:21,123 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-14 03:09:21,124 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-14 03:09:21,125 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Bitvector.epf [2022-12-14 03:09:21,148 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-14 03:09:21,149 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-14 03:09:21,149 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-14 03:09:21,149 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-14 03:09:21,150 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-12-14 03:09:21,150 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-12-14 03:09:21,150 INFO L138 SettingsManager]: * User list type=DISABLED [2022-12-14 03:09:21,150 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-12-14 03:09:21,150 INFO L138 SettingsManager]: * Explicit value domain=true [2022-12-14 03:09:21,151 INFO L138 SettingsManager]: * Octagon Domain=false [2022-12-14 03:09:21,151 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-12-14 03:09:21,151 INFO L138 SettingsManager]: * Interval Domain=false [2022-12-14 03:09:21,151 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-12-14 03:09:21,152 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-12-14 03:09:21,152 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-14 03:09:21,152 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-14 03:09:21,152 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-12-14 03:09:21,152 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-14 03:09:21,152 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-14 03:09:21,152 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-14 03:09:21,152 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-12-14 03:09:21,152 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-12-14 03:09:21,152 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-12-14 03:09:21,153 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-12-14 03:09:21,153 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-12-14 03:09:21,153 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-12-14 03:09:21,153 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-12-14 03:09:21,153 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-14 03:09:21,153 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-14 03:09:21,153 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-14 03:09:21,153 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-12-14 03:09:21,154 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-12-14 03:09:21,154 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 03:09:21,154 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-14 03:09:21,154 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-12-14 03:09:21,154 INFO L138 SettingsManager]: * Trace refinement strategy=WALRUS [2022-12-14 03:09:21,154 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2022-12-14 03:09:21,154 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-12-14 03:09:21,154 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-12-14 03:09:21,154 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1df58a12292e53aa25870e709e17978d63a0e61d4dd56fb439981d66ecb6b925 [2022-12-14 03:09:21,374 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-14 03:09:21,391 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-14 03:09:21,393 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-14 03:09:21,394 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-14 03:09:21,394 INFO L275 PluginConnector]: CDTParser initialized [2022-12-14 03:09:21,395 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/../../sv-benchmarks/c/ldv-memsafety/memleaks_test18_3.i [2022-12-14 03:09:23,910 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-14 03:09:24,139 INFO L351 CDTParser]: Found 1 translation units. [2022-12-14 03:09:24,140 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/sv-benchmarks/c/ldv-memsafety/memleaks_test18_3.i [2022-12-14 03:09:24,156 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/data/aec4270aa/d0493b8e35b049c58bb6ed3143674614/FLAG7bf6d8104 [2022-12-14 03:09:24,166 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/data/aec4270aa/d0493b8e35b049c58bb6ed3143674614 [2022-12-14 03:09:24,168 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-14 03:09:24,169 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-14 03:09:24,170 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-14 03:09:24,170 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-14 03:09:24,173 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-14 03:09:24,174 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 03:09:24" (1/1) ... [2022-12-14 03:09:24,175 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6146340c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:09:24, skipping insertion in model container [2022-12-14 03:09:24,175 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 03:09:24" (1/1) ... [2022-12-14 03:09:24,181 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-14 03:09:24,211 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-14 03:09:24,444 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 03:09:24,459 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-12-14 03:09:24,465 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-14 03:09:24,510 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 03:09:24,524 INFO L203 MainTranslator]: Completed pre-run [2022-12-14 03:09:24,554 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 03:09:24,577 INFO L208 MainTranslator]: Completed translation [2022-12-14 03:09:24,577 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:09:24 WrapperNode [2022-12-14 03:09:24,577 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-14 03:09:24,578 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-14 03:09:24,578 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-14 03:09:24,578 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-14 03:09:24,584 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:09:24" (1/1) ... [2022-12-14 03:09:24,597 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:09:24" (1/1) ... [2022-12-14 03:09:24,609 INFO L138 Inliner]: procedures = 165, calls = 70, calls flagged for inlining = 21, calls inlined = 3, statements flattened = 31 [2022-12-14 03:09:24,609 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-14 03:09:24,610 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-14 03:09:24,610 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-14 03:09:24,610 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-14 03:09:24,617 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:09:24" (1/1) ... [2022-12-14 03:09:24,617 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:09:24" (1/1) ... [2022-12-14 03:09:24,619 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:09:24" (1/1) ... [2022-12-14 03:09:24,619 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:09:24" (1/1) ... [2022-12-14 03:09:24,623 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:09:24" (1/1) ... [2022-12-14 03:09:24,625 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:09:24" (1/1) ... [2022-12-14 03:09:24,626 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:09:24" (1/1) ... [2022-12-14 03:09:24,627 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:09:24" (1/1) ... [2022-12-14 03:09:24,628 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-14 03:09:24,629 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-14 03:09:24,629 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-14 03:09:24,629 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-14 03:09:24,630 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:09:24" (1/1) ... [2022-12-14 03:09:24,634 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 03:09:24,643 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 03:09:24,653 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-12-14 03:09:24,655 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-12-14 03:09:24,689 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-12-14 03:09:24,689 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-12-14 03:09:24,689 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-12-14 03:09:24,689 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-12-14 03:09:24,689 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-12-14 03:09:24,689 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-12-14 03:09:24,689 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-14 03:09:24,689 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-14 03:09:24,783 INFO L235 CfgBuilder]: Building ICFG [2022-12-14 03:09:24,784 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-14 03:09:24,898 INFO L276 CfgBuilder]: Performing block encoding [2022-12-14 03:09:24,902 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-14 03:09:24,902 INFO L300 CfgBuilder]: Removed 1 assume(true) statements. [2022-12-14 03:09:24,904 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 03:09:24 BoogieIcfgContainer [2022-12-14 03:09:24,904 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-14 03:09:24,906 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-12-14 03:09:24,906 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-12-14 03:09:24,909 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-12-14 03:09:24,909 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 14.12 03:09:24" (1/3) ... [2022-12-14 03:09:24,910 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@14dcb205 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 03:09:24, skipping insertion in model container [2022-12-14 03:09:24,910 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:09:24" (2/3) ... [2022-12-14 03:09:24,910 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@14dcb205 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 03:09:24, skipping insertion in model container [2022-12-14 03:09:24,910 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 03:09:24" (3/3) ... [2022-12-14 03:09:24,911 INFO L112 eAbstractionObserver]: Analyzing ICFG memleaks_test18_3.i [2022-12-14 03:09:24,925 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-12-14 03:09:24,926 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 3 error locations. [2022-12-14 03:09:24,959 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-12-14 03:09:24,964 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@477cc8eb, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-12-14 03:09:24,964 INFO L358 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2022-12-14 03:09:24,967 INFO L276 IsEmpty]: Start isEmpty. Operand has 21 states, 14 states have (on average 1.5) internal successors, (21), 17 states have internal predecessors, (21), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-12-14 03:09:24,974 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-12-14 03:09:24,975 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 03:09:24,975 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 03:09:24,976 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-12-14 03:09:24,979 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 03:09:24,980 INFO L85 PathProgramCache]: Analyzing trace with hash -74700687, now seen corresponding path program 1 times [2022-12-14 03:09:24,989 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-12-14 03:09:24,990 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1388497629] [2022-12-14 03:09:24,990 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 03:09:24,990 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-12-14 03:09:24,990 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat [2022-12-14 03:09:24,992 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-12-14 03:09:24,993 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2022-12-14 03:09:25,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 03:09:25,088 INFO L263 TraceCheckSpWp]: Trace formula consists of 42 conjuncts, 4 conjunts are in the unsatisfiable core [2022-12-14 03:09:25,092 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:09:25,159 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 03:09:25,159 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 03:09:25,160 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-12-14 03:09:25,160 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1388497629] [2022-12-14 03:09:25,161 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1388497629] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 03:09:25,161 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 03:09:25,161 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-14 03:09:25,163 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [552397301] [2022-12-14 03:09:25,163 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 03:09:25,167 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 03:09:25,167 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-12-14 03:09:25,188 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 03:09:25,188 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-14 03:09:25,190 INFO L87 Difference]: Start difference. First operand has 21 states, 14 states have (on average 1.5) internal successors, (21), 17 states have internal predecessors, (21), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Second operand has 5 states, 5 states have (on average 1.8) internal successors, (9), 4 states have internal predecessors, (9), 1 states have call successors, (1), 1 states have call predecessors, (1), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 03:09:25,261 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 03:09:25,261 INFO L93 Difference]: Finished difference Result 37 states and 43 transitions. [2022-12-14 03:09:25,263 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 03:09:25,264 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 1.8) internal successors, (9), 4 states have internal predecessors, (9), 1 states have call successors, (1), 1 states have call predecessors, (1), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 11 [2022-12-14 03:09:25,265 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 03:09:25,272 INFO L225 Difference]: With dead ends: 37 [2022-12-14 03:09:25,272 INFO L226 Difference]: Without dead ends: 33 [2022-12-14 03:09:25,273 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-14 03:09:25,277 INFO L413 NwaCegarLoop]: 24 mSDtfsCounter, 12 mSDsluCounter, 59 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 14 SdHoareTripleChecker+Valid, 83 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 03:09:25,278 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [14 Valid, 83 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 03:09:25,291 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33 states. [2022-12-14 03:09:25,304 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33 to 23. [2022-12-14 03:09:25,305 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23 states, 16 states have (on average 1.3125) internal successors, (21), 18 states have internal predecessors, (21), 2 states have call successors, (2), 1 states have call predecessors, (2), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2022-12-14 03:09:25,306 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23 states to 23 states and 27 transitions. [2022-12-14 03:09:25,306 INFO L78 Accepts]: Start accepts. Automaton has 23 states and 27 transitions. Word has length 11 [2022-12-14 03:09:25,307 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 03:09:25,307 INFO L495 AbstractCegarLoop]: Abstraction has 23 states and 27 transitions. [2022-12-14 03:09:25,307 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 1.8) internal successors, (9), 4 states have internal predecessors, (9), 1 states have call successors, (1), 1 states have call predecessors, (1), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 03:09:25,307 INFO L276 IsEmpty]: Start isEmpty. Operand 23 states and 27 transitions. [2022-12-14 03:09:25,308 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-12-14 03:09:25,308 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 03:09:25,308 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 03:09:25,316 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2022-12-14 03:09:25,509 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-12-14 03:09:25,510 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-12-14 03:09:25,513 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 03:09:25,514 INFO L85 PathProgramCache]: Analyzing trace with hash 812802994, now seen corresponding path program 1 times [2022-12-14 03:09:25,515 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-12-14 03:09:25,516 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2019047975] [2022-12-14 03:09:25,517 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 03:09:25,518 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-12-14 03:09:25,519 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat [2022-12-14 03:09:25,522 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-12-14 03:09:25,526 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2022-12-14 03:09:25,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 03:09:25,673 INFO L263 TraceCheckSpWp]: Trace formula consists of 36 conjuncts, 4 conjunts are in the unsatisfiable core [2022-12-14 03:09:25,676 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:09:25,718 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 03:09:25,718 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 03:09:25,718 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-12-14 03:09:25,718 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2019047975] [2022-12-14 03:09:25,718 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2019047975] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 03:09:25,719 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 03:09:25,719 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 03:09:25,719 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [284984144] [2022-12-14 03:09:25,719 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 03:09:25,720 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 03:09:25,720 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-12-14 03:09:25,721 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 03:09:25,721 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 03:09:25,721 INFO L87 Difference]: Start difference. First operand 23 states and 27 transitions. Second operand has 4 states, 3 states have (on average 3.0) internal successors, (9), 4 states have internal predecessors, (9), 1 states have call successors, (1), 1 states have call predecessors, (1), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 03:09:25,779 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 03:09:25,779 INFO L93 Difference]: Finished difference Result 32 states and 38 transitions. [2022-12-14 03:09:25,780 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-14 03:09:25,780 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 3.0) internal successors, (9), 4 states have internal predecessors, (9), 1 states have call successors, (1), 1 states have call predecessors, (1), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 11 [2022-12-14 03:09:25,780 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 03:09:25,781 INFO L225 Difference]: With dead ends: 32 [2022-12-14 03:09:25,781 INFO L226 Difference]: Without dead ends: 30 [2022-12-14 03:09:25,781 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 03:09:25,783 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 8 mSDsluCounter, 34 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 66 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 03:09:25,783 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [8 Valid, 66 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 03:09:25,784 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 30 states. [2022-12-14 03:09:25,788 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 30 to 28. [2022-12-14 03:09:25,788 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28 states, 20 states have (on average 1.3) internal successors, (26), 22 states have internal predecessors, (26), 3 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (6), 4 states have call predecessors, (6), 3 states have call successors, (6) [2022-12-14 03:09:25,789 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28 states to 28 states and 35 transitions. [2022-12-14 03:09:25,789 INFO L78 Accepts]: Start accepts. Automaton has 28 states and 35 transitions. Word has length 11 [2022-12-14 03:09:25,789 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 03:09:25,789 INFO L495 AbstractCegarLoop]: Abstraction has 28 states and 35 transitions. [2022-12-14 03:09:25,790 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 3.0) internal successors, (9), 4 states have internal predecessors, (9), 1 states have call successors, (1), 1 states have call predecessors, (1), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 03:09:25,790 INFO L276 IsEmpty]: Start isEmpty. Operand 28 states and 35 transitions. [2022-12-14 03:09:25,790 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2022-12-14 03:09:25,790 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 03:09:25,790 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 03:09:25,801 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (3)] Ended with exit code 0 [2022-12-14 03:09:25,991 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-12-14 03:09:25,993 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-12-14 03:09:25,994 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 03:09:25,995 INFO L85 PathProgramCache]: Analyzing trace with hash 1979292102, now seen corresponding path program 1 times [2022-12-14 03:09:25,996 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-12-14 03:09:25,996 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1597407464] [2022-12-14 03:09:25,997 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 03:09:25,997 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-12-14 03:09:25,998 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat [2022-12-14 03:09:26,000 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-12-14 03:09:26,003 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2022-12-14 03:09:26,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 03:09:26,103 INFO L263 TraceCheckSpWp]: Trace formula consists of 42 conjuncts, 3 conjunts are in the unsatisfiable core [2022-12-14 03:09:26,104 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:09:26,139 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 03:09:26,140 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 03:09:26,140 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-12-14 03:09:26,140 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1597407464] [2022-12-14 03:09:26,140 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1597407464] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 03:09:26,140 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 03:09:26,140 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-14 03:09:26,140 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [193408175] [2022-12-14 03:09:26,140 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 03:09:26,141 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 03:09:26,141 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-12-14 03:09:26,141 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 03:09:26,141 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-12-14 03:09:26,141 INFO L87 Difference]: Start difference. First operand 28 states and 35 transitions. Second operand has 4 states, 4 states have (on average 2.5) internal successors, (10), 4 states have internal predecessors, (10), 1 states have call successors, (1), 1 states have call predecessors, (1), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 03:09:26,178 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 03:09:26,178 INFO L93 Difference]: Finished difference Result 40 states and 53 transitions. [2022-12-14 03:09:26,179 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-14 03:09:26,179 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 2.5) internal successors, (10), 4 states have internal predecessors, (10), 1 states have call successors, (1), 1 states have call predecessors, (1), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 12 [2022-12-14 03:09:26,179 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 03:09:26,180 INFO L225 Difference]: With dead ends: 40 [2022-12-14 03:09:26,180 INFO L226 Difference]: Without dead ends: 40 [2022-12-14 03:09:26,180 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-12-14 03:09:26,181 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 15 mSDsluCounter, 16 mSDsCounter, 0 mSdLazyCounter, 15 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 17 SdHoareTripleChecker+Valid, 33 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 15 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 03:09:26,181 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [17 Valid, 33 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 15 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 03:09:26,182 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 40 states. [2022-12-14 03:09:26,184 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 40 to 29. [2022-12-14 03:09:26,184 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 21 states have (on average 1.2857142857142858) internal successors, (27), 23 states have internal predecessors, (27), 3 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (6), 4 states have call predecessors, (6), 3 states have call successors, (6) [2022-12-14 03:09:26,185 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 36 transitions. [2022-12-14 03:09:26,185 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 36 transitions. Word has length 12 [2022-12-14 03:09:26,185 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 03:09:26,185 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 36 transitions. [2022-12-14 03:09:26,186 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 2.5) internal successors, (10), 4 states have internal predecessors, (10), 1 states have call successors, (1), 1 states have call predecessors, (1), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-14 03:09:26,186 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 36 transitions. [2022-12-14 03:09:26,186 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-12-14 03:09:26,186 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 03:09:26,186 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 03:09:26,197 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (4)] Ended with exit code 0 [2022-12-14 03:09:26,387 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-12-14 03:09:26,388 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-12-14 03:09:26,389 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 03:09:26,389 INFO L85 PathProgramCache]: Analyzing trace with hash -938120081, now seen corresponding path program 1 times [2022-12-14 03:09:26,389 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-12-14 03:09:26,390 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [255470625] [2022-12-14 03:09:26,390 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 03:09:26,390 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-12-14 03:09:26,390 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat [2022-12-14 03:09:26,391 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-12-14 03:09:26,394 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2022-12-14 03:09:26,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 03:09:26,556 INFO L263 TraceCheckSpWp]: Trace formula consists of 61 conjuncts, 9 conjunts are in the unsatisfiable core [2022-12-14 03:09:26,559 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:09:26,587 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-12-14 03:09:26,645 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_10 (_ BitVec 1))) (= |c_#valid| (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_10))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-12-14 03:09:26,689 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-12-14 03:09:26,689 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-12-14 03:09:26,701 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 2 not checked. [2022-12-14 03:09:26,702 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:09:26,870 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 2 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 03:09:26,870 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-12-14 03:09:26,870 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [255470625] [2022-12-14 03:09:26,870 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [255470625] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 03:09:26,870 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1919238237] [2022-12-14 03:09:26,870 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 03:09:26,871 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-12-14 03:09:26,871 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 [2022-12-14 03:09:26,872 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-12-14 03:09:26,873 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (6)] Waiting until timeout for monitored process [2022-12-14 03:09:26,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 03:09:26,989 INFO L263 TraceCheckSpWp]: Trace formula consists of 61 conjuncts, 10 conjunts are in the unsatisfiable core [2022-12-14 03:09:26,992 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:09:26,999 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-12-14 03:09:27,026 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (= (store |c_old(#valid)| |ldv_malloc_#res.base| (_ bv1 1)) |c_#valid|)) is different from true [2022-12-14 03:09:27,045 INFO L321 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2022-12-14 03:09:27,045 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 14 treesize of output 20 [2022-12-14 03:09:27,058 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 2 not checked. [2022-12-14 03:09:27,059 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:09:27,186 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 2 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 03:09:27,187 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [1919238237] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 03:09:27,187 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1346744503] [2022-12-14 03:09:27,187 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 03:09:27,187 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 03:09:27,187 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 03:09:27,189 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 03:09:27,190 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-12-14 03:09:27,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 03:09:27,242 INFO L263 TraceCheckSpWp]: Trace formula consists of 61 conjuncts, 9 conjunts are in the unsatisfiable core [2022-12-14 03:09:27,244 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:09:27,247 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-12-14 03:09:27,276 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_28 (_ BitVec 1))) (= |c_#valid| (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_28))))) is different from true [2022-12-14 03:09:27,304 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-12-14 03:09:27,304 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-12-14 03:09:27,310 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 2 not checked. [2022-12-14 03:09:27,310 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:09:27,445 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 2 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 03:09:27,445 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1346744503] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 03:09:27,445 INFO L184 FreeRefinementEngine]: Found 0 perfect and 6 imperfect interpolant sequences. [2022-12-14 03:09:27,445 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 6, 5, 6, 5] total 9 [2022-12-14 03:09:27,445 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1700074815] [2022-12-14 03:09:27,445 INFO L85 oduleStraightlineAll]: Using 6 imperfect interpolants to construct interpolant automaton [2022-12-14 03:09:27,446 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-12-14 03:09:27,446 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-12-14 03:09:27,447 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-12-14 03:09:27,447 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=33, Unknown=3, NotChecked=36, Total=90 [2022-12-14 03:09:27,447 INFO L87 Difference]: Start difference. First operand 29 states and 36 transitions. Second operand has 10 states, 9 states have (on average 2.2222222222222223) internal successors, (20), 9 states have internal predecessors, (20), 2 states have call successors, (3), 3 states have call predecessors, (3), 5 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-12-14 03:09:29,609 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 03:09:29,610 INFO L93 Difference]: Finished difference Result 36 states and 46 transitions. [2022-12-14 03:09:29,610 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-12-14 03:09:29,610 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 9 states have (on average 2.2222222222222223) internal successors, (20), 9 states have internal predecessors, (20), 2 states have call successors, (3), 3 states have call predecessors, (3), 5 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 17 [2022-12-14 03:09:29,611 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 03:09:29,611 INFO L225 Difference]: With dead ends: 36 [2022-12-14 03:09:29,611 INFO L226 Difference]: Without dead ends: 36 [2022-12-14 03:09:29,612 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 97 GetRequests, 79 SyntacticMatches, 9 SemanticMatches, 9 ConstructedPredicates, 3 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 2.2s TimeCoverageRelationStatistics Valid=22, Invalid=43, Unknown=3, NotChecked=42, Total=110 [2022-12-14 03:09:29,612 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 8 mSDsluCounter, 36 mSDsCounter, 0 mSdLazyCounter, 80 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 54 SdHoareTripleChecker+Invalid, 155 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 80 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 72 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 03:09:29,612 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [8 Valid, 54 Invalid, 155 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 80 Invalid, 0 Unknown, 72 Unchecked, 0.1s Time] [2022-12-14 03:09:29,613 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36 states. [2022-12-14 03:09:29,615 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36 to 35. [2022-12-14 03:09:29,615 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 26 states have (on average 1.3076923076923077) internal successors, (34), 27 states have internal predecessors, (34), 4 states have call successors, (4), 1 states have call predecessors, (4), 2 states have return successors, (8), 6 states have call predecessors, (8), 4 states have call successors, (8) [2022-12-14 03:09:29,616 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 46 transitions. [2022-12-14 03:09:29,616 INFO L78 Accepts]: Start accepts. Automaton has 35 states and 46 transitions. Word has length 17 [2022-12-14 03:09:29,616 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 03:09:29,616 INFO L495 AbstractCegarLoop]: Abstraction has 35 states and 46 transitions. [2022-12-14 03:09:29,617 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 9 states have (on average 2.2222222222222223) internal successors, (20), 9 states have internal predecessors, (20), 2 states have call successors, (3), 3 states have call predecessors, (3), 5 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-12-14 03:09:29,617 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 46 transitions. [2022-12-14 03:09:29,617 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-12-14 03:09:29,617 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 03:09:29,617 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 03:09:29,629 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2022-12-14 03:09:29,830 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Ended with exit code 0 [2022-12-14 03:09:30,023 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (6)] Ended with exit code 0 [2022-12-14 03:09:30,219 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt [2022-12-14 03:09:30,220 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-12-14 03:09:30,221 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 03:09:30,222 INFO L85 PathProgramCache]: Analyzing trace with hash -938120080, now seen corresponding path program 1 times [2022-12-14 03:09:30,222 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-12-14 03:09:30,223 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [476593737] [2022-12-14 03:09:30,223 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 03:09:30,224 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-12-14 03:09:30,224 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat [2022-12-14 03:09:30,225 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-12-14 03:09:30,225 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2022-12-14 03:09:30,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 03:09:30,270 INFO L263 TraceCheckSpWp]: Trace formula consists of 61 conjuncts, 20 conjunts are in the unsatisfiable core [2022-12-14 03:09:30,272 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:09:30,289 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-12-14 03:09:30,294 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 03:09:30,418 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_39 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_39) |c_#length|)))) is different from true [2022-12-14 03:09:30,446 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:09:30,447 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:09:30,458 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:09:30,459 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:09:30,485 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 2 not checked. [2022-12-14 03:09:30,485 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:09:34,823 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-12-14 03:09:34,823 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [476593737] [2022-12-14 03:09:34,823 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [476593737] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 03:09:34,823 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1076832922] [2022-12-14 03:09:34,823 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 03:09:34,824 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-12-14 03:09:34,824 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 [2022-12-14 03:09:34,824 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-12-14 03:09:34,825 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (9)] Waiting until timeout for monitored process [2022-12-14 03:09:34,893 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 03:09:34,895 INFO L263 TraceCheckSpWp]: Trace formula consists of 61 conjuncts, 20 conjunts are in the unsatisfiable core [2022-12-14 03:09:34,897 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:09:34,909 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-12-14 03:09:34,915 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 03:09:35,001 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_49 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_49) |c_#length|)))) is different from true [2022-12-14 03:09:35,025 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:09:35,026 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:09:35,035 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:09:35,035 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:09:35,048 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 2 not checked. [2022-12-14 03:09:35,048 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:09:35,246 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [1076832922] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 03:09:35,247 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1063022354] [2022-12-14 03:09:35,247 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 03:09:35,247 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 03:09:35,247 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 03:09:35,248 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 03:09:35,249 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-12-14 03:09:35,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 03:09:35,297 INFO L263 TraceCheckSpWp]: Trace formula consists of 61 conjuncts, 20 conjunts are in the unsatisfiable core [2022-12-14 03:09:35,298 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:09:35,306 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-12-14 03:09:35,311 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 03:09:35,386 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_59 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_59) |c_#length|)))) is different from true [2022-12-14 03:09:35,406 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:09:35,407 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:09:35,417 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:09:35,417 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:09:35,435 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 2 not checked. [2022-12-14 03:09:35,435 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:09:35,653 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1063022354] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 03:09:35,653 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 03:09:35,654 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 9, 9] total 11 [2022-12-14 03:09:35,654 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1728057925] [2022-12-14 03:09:35,654 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 03:09:35,654 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-12-14 03:09:35,654 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-12-14 03:09:35,655 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-12-14 03:09:35,655 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=89, Unknown=4, NotChecked=60, Total=182 [2022-12-14 03:09:35,655 INFO L87 Difference]: Start difference. First operand 35 states and 46 transitions. Second operand has 12 states, 10 states have (on average 1.7) internal successors, (17), 11 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 4 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-12-14 03:09:35,938 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 03:09:35,938 INFO L93 Difference]: Finished difference Result 41 states and 54 transitions. [2022-12-14 03:09:35,939 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-12-14 03:09:35,939 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 10 states have (on average 1.7) internal successors, (17), 11 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 4 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 17 [2022-12-14 03:09:35,940 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 03:09:35,941 INFO L225 Difference]: With dead ends: 41 [2022-12-14 03:09:35,941 INFO L226 Difference]: Without dead ends: 41 [2022-12-14 03:09:35,941 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 62 GetRequests, 43 SyntacticMatches, 2 SemanticMatches, 17 ConstructedPredicates, 3 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 4.6s TimeCoverageRelationStatistics Valid=54, Invalid=194, Unknown=4, NotChecked=90, Total=342 [2022-12-14 03:09:35,942 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 25 mSDsluCounter, 37 mSDsCounter, 0 mSdLazyCounter, 110 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 29 SdHoareTripleChecker+Valid, 51 SdHoareTripleChecker+Invalid, 204 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 110 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 87 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 03:09:35,942 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [29 Valid, 51 Invalid, 204 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 110 Invalid, 0 Unknown, 87 Unchecked, 0.1s Time] [2022-12-14 03:09:35,943 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41 states. [2022-12-14 03:09:35,947 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41 to 38. [2022-12-14 03:09:35,947 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 28 states have (on average 1.2857142857142858) internal successors, (36), 29 states have internal predecessors, (36), 5 states have call successors, (5), 1 states have call predecessors, (5), 2 states have return successors, (10), 7 states have call predecessors, (10), 5 states have call successors, (10) [2022-12-14 03:09:35,948 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 51 transitions. [2022-12-14 03:09:35,948 INFO L78 Accepts]: Start accepts. Automaton has 38 states and 51 transitions. Word has length 17 [2022-12-14 03:09:35,949 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 03:09:35,949 INFO L495 AbstractCegarLoop]: Abstraction has 38 states and 51 transitions. [2022-12-14 03:09:35,949 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 10 states have (on average 1.7) internal successors, (17), 11 states have internal predecessors, (17), 2 states have call successors, (2), 2 states have call predecessors, (2), 4 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-12-14 03:09:35,949 INFO L276 IsEmpty]: Start isEmpty. Operand 38 states and 51 transitions. [2022-12-14 03:09:35,950 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-12-14 03:09:35,950 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 03:09:35,950 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 03:09:35,954 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Ended with exit code 0 [2022-12-14 03:09:36,163 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (8)] Ended with exit code 0 [2022-12-14 03:09:36,356 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (9)] Ended with exit code 0 [2022-12-14 03:09:36,552 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt [2022-12-14 03:09:36,554 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-12-14 03:09:36,555 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 03:09:36,555 INFO L85 PathProgramCache]: Analyzing trace with hash -1231523088, now seen corresponding path program 1 times [2022-12-14 03:09:36,556 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-12-14 03:09:36,556 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1172035759] [2022-12-14 03:09:36,557 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 03:09:36,557 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-12-14 03:09:36,557 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat [2022-12-14 03:09:36,560 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-12-14 03:09:36,564 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (11)] Waiting until timeout for monitored process [2022-12-14 03:09:36,595 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 03:09:36,596 INFO L263 TraceCheckSpWp]: Trace formula consists of 55 conjuncts, 7 conjunts are in the unsatisfiable core [2022-12-14 03:09:36,597 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:09:36,631 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 03:09:36,631 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 03:09:36,631 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-12-14 03:09:36,631 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1172035759] [2022-12-14 03:09:36,631 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1172035759] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 03:09:36,631 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 03:09:36,631 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-14 03:09:36,631 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [357687667] [2022-12-14 03:09:36,632 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 03:09:36,632 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 03:09:36,632 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-12-14 03:09:36,632 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 03:09:36,632 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-14 03:09:36,632 INFO L87 Difference]: Start difference. First operand 38 states and 51 transitions. Second operand has 5 states, 5 states have (on average 2.6) internal successors, (13), 4 states have internal predecessors, (13), 2 states have call successors, (2), 2 states have call predecessors, (2), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-12-14 03:09:36,659 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 03:09:36,659 INFO L93 Difference]: Finished difference Result 26 states and 30 transitions. [2022-12-14 03:09:36,660 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 03:09:36,660 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 2.6) internal successors, (13), 4 states have internal predecessors, (13), 2 states have call successors, (2), 2 states have call predecessors, (2), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 17 [2022-12-14 03:09:36,660 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 03:09:36,660 INFO L225 Difference]: With dead ends: 26 [2022-12-14 03:09:36,660 INFO L226 Difference]: Without dead ends: 24 [2022-12-14 03:09:36,661 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-14 03:09:36,661 INFO L413 NwaCegarLoop]: 23 mSDtfsCounter, 0 mSDsluCounter, 56 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 79 SdHoareTripleChecker+Invalid, 13 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 03:09:36,662 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 79 Invalid, 13 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 03:09:36,662 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24 states. [2022-12-14 03:09:36,664 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24 to 24. [2022-12-14 03:09:36,665 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 24 states, 17 states have (on average 1.1764705882352942) internal successors, (20), 19 states have internal predecessors, (20), 3 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-12-14 03:09:36,665 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24 states to 24 states and 28 transitions. [2022-12-14 03:09:36,665 INFO L78 Accepts]: Start accepts. Automaton has 24 states and 28 transitions. Word has length 17 [2022-12-14 03:09:36,666 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 03:09:36,666 INFO L495 AbstractCegarLoop]: Abstraction has 24 states and 28 transitions. [2022-12-14 03:09:36,666 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 2.6) internal successors, (13), 4 states have internal predecessors, (13), 2 states have call successors, (2), 2 states have call predecessors, (2), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-12-14 03:09:36,666 INFO L276 IsEmpty]: Start isEmpty. Operand 24 states and 28 transitions. [2022-12-14 03:09:36,666 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-12-14 03:09:36,666 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 03:09:36,667 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 03:09:36,673 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (11)] Ended with exit code 0 [2022-12-14 03:09:36,867 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-12-14 03:09:36,869 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-12-14 03:09:36,870 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 03:09:36,870 INFO L85 PathProgramCache]: Analyzing trace with hash -1382319161, now seen corresponding path program 1 times [2022-12-14 03:09:36,871 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-12-14 03:09:36,872 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1858095684] [2022-12-14 03:09:36,872 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 03:09:36,872 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-12-14 03:09:36,873 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat [2022-12-14 03:09:36,875 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-12-14 03:09:36,878 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (12)] Waiting until timeout for monitored process [2022-12-14 03:09:36,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 03:09:36,969 INFO L263 TraceCheckSpWp]: Trace formula consists of 77 conjuncts, 4 conjunts are in the unsatisfiable core [2022-12-14 03:09:36,970 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:09:37,014 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 03:09:37,014 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:09:37,072 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 03:09:37,073 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-12-14 03:09:37,073 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1858095684] [2022-12-14 03:09:37,073 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1858095684] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 03:09:37,073 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1906909308] [2022-12-14 03:09:37,073 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 03:09:37,073 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-12-14 03:09:37,073 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 [2022-12-14 03:09:37,074 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-12-14 03:09:37,075 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (13)] Waiting until timeout for monitored process [2022-12-14 03:09:37,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 03:09:37,144 INFO L263 TraceCheckSpWp]: Trace formula consists of 77 conjuncts, 4 conjunts are in the unsatisfiable core [2022-12-14 03:09:37,145 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:09:37,174 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 03:09:37,174 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:09:37,200 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 03:09:37,200 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [1906909308] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 03:09:37,200 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1936143437] [2022-12-14 03:09:37,200 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 03:09:37,201 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 03:09:37,201 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 03:09:37,202 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 03:09:37,202 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2022-12-14 03:09:37,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 03:09:37,248 INFO L263 TraceCheckSpWp]: Trace formula consists of 77 conjuncts, 4 conjunts are in the unsatisfiable core [2022-12-14 03:09:37,249 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:09:37,276 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 03:09:37,276 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:09:37,300 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 03:09:37,300 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1936143437] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 03:09:37,300 INFO L184 FreeRefinementEngine]: Found 0 perfect and 6 imperfect interpolant sequences. [2022-12-14 03:09:37,300 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5, 5, 5, 5] total 8 [2022-12-14 03:09:37,301 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [176671984] [2022-12-14 03:09:37,301 INFO L85 oduleStraightlineAll]: Using 6 imperfect interpolants to construct interpolant automaton [2022-12-14 03:09:37,301 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-12-14 03:09:37,301 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-12-14 03:09:37,302 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-12-14 03:09:37,302 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-12-14 03:09:37,302 INFO L87 Difference]: Start difference. First operand 24 states and 28 transitions. Second operand has 8 states, 8 states have (on average 2.75) internal successors, (22), 8 states have internal predecessors, (22), 4 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2022-12-14 03:09:37,412 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 03:09:37,412 INFO L93 Difference]: Finished difference Result 38 states and 46 transitions. [2022-12-14 03:09:37,413 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-14 03:09:37,413 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 2.75) internal successors, (22), 8 states have internal predecessors, (22), 4 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) Word has length 21 [2022-12-14 03:09:37,413 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 03:09:37,414 INFO L225 Difference]: With dead ends: 38 [2022-12-14 03:09:37,414 INFO L226 Difference]: Without dead ends: 38 [2022-12-14 03:09:37,414 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 122 GetRequests, 114 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=38, Invalid=52, Unknown=0, NotChecked=0, Total=90 [2022-12-14 03:09:37,415 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 32 mSDsluCounter, 40 mSDsCounter, 0 mSdLazyCounter, 46 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 60 SdHoareTripleChecker+Invalid, 53 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 46 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 03:09:37,415 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 60 Invalid, 53 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 46 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 03:09:37,415 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38 states. [2022-12-14 03:09:37,419 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38 to 36. [2022-12-14 03:09:37,419 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 27 states have (on average 1.1851851851851851) internal successors, (32), 29 states have internal predecessors, (32), 5 states have call successors, (5), 1 states have call predecessors, (5), 2 states have return successors, (9), 5 states have call predecessors, (9), 5 states have call successors, (9) [2022-12-14 03:09:37,420 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 46 transitions. [2022-12-14 03:09:37,420 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 46 transitions. Word has length 21 [2022-12-14 03:09:37,420 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 03:09:37,420 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 46 transitions. [2022-12-14 03:09:37,420 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 2.75) internal successors, (22), 8 states have internal predecessors, (22), 4 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2022-12-14 03:09:37,420 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 46 transitions. [2022-12-14 03:09:37,421 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-12-14 03:09:37,421 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 03:09:37,421 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 03:09:37,426 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Ended with exit code 0 [2022-12-14 03:09:37,626 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (13)] Ended with exit code 0 [2022-12-14 03:09:37,832 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (12)] Ended with exit code 0 [2022-12-14 03:09:38,022 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt,12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-12-14 03:09:38,023 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-12-14 03:09:38,024 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 03:09:38,025 INFO L85 PathProgramCache]: Analyzing trace with hash -704273649, now seen corresponding path program 1 times [2022-12-14 03:09:38,026 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-12-14 03:09:38,026 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2067913776] [2022-12-14 03:09:38,027 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 03:09:38,027 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-12-14 03:09:38,027 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat [2022-12-14 03:09:38,031 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-12-14 03:09:38,032 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (15)] Waiting until timeout for monitored process [2022-12-14 03:09:38,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 03:09:38,097 INFO L263 TraceCheckSpWp]: Trace formula consists of 96 conjuncts, 28 conjunts are in the unsatisfiable core [2022-12-14 03:09:38,100 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:09:38,114 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 03:09:38,118 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-12-14 03:09:38,235 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_109 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_109))))) is different from true [2022-12-14 03:09:38,254 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:09:38,255 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:09:38,267 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:09:38,267 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:09:38,367 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_110 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_110) |c_#length|)))) is different from true [2022-12-14 03:09:38,386 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:09:38,387 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:09:38,400 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:09:38,400 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:09:38,436 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 2 proven. 6 refuted. 0 times theorem prover too weak. 2 trivial. 6 not checked. [2022-12-14 03:09:38,436 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:09:40,721 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-12-14 03:09:40,721 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2067913776] [2022-12-14 03:09:40,721 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2067913776] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 03:09:40,721 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [687385279] [2022-12-14 03:09:40,721 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 03:09:40,721 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-12-14 03:09:40,721 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 [2022-12-14 03:09:40,722 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-12-14 03:09:40,723 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (16)] Waiting until timeout for monitored process [2022-12-14 03:09:40,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 03:09:40,813 INFO L263 TraceCheckSpWp]: Trace formula consists of 96 conjuncts, 28 conjunts are in the unsatisfiable core [2022-12-14 03:09:40,815 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:09:40,823 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-12-14 03:09:40,827 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 03:09:40,891 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_128 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_128) |c_#length|)))) is different from true [2022-12-14 03:09:40,911 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:09:40,912 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:09:40,921 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:09:40,921 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:09:40,983 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_129 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_129))))) is different from true [2022-12-14 03:09:41,003 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:09:41,004 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:09:41,017 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:09:41,017 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:09:41,028 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 2 proven. 6 refuted. 0 times theorem prover too weak. 2 trivial. 6 not checked. [2022-12-14 03:09:41,028 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:09:41,232 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [687385279] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 03:09:41,232 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1623631907] [2022-12-14 03:09:41,232 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 03:09:41,232 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 03:09:41,232 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 03:09:41,233 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 03:09:41,234 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2022-12-14 03:09:41,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 03:09:41,282 INFO L263 TraceCheckSpWp]: Trace formula consists of 96 conjuncts, 29 conjunts are in the unsatisfiable core [2022-12-14 03:09:41,284 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:09:41,294 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 03:09:41,300 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-12-14 03:09:41,366 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_147 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_147))))) is different from true [2022-12-14 03:09:41,383 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:09:41,383 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:09:41,393 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:09:41,393 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:09:41,454 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_148 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_148))))) is different from true [2022-12-14 03:09:41,471 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:09:41,472 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:09:41,480 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:09:41,480 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:09:41,492 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 2 proven. 6 refuted. 0 times theorem prover too weak. 2 trivial. 6 not checked. [2022-12-14 03:09:41,493 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:09:41,766 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1623631907] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 03:09:41,767 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 03:09:41,767 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 12, 12] total 16 [2022-12-14 03:09:41,767 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1880825551] [2022-12-14 03:09:41,767 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 03:09:41,767 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-12-14 03:09:41,767 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-12-14 03:09:41,768 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-12-14 03:09:41,768 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=130, Unknown=7, NotChecked=162, Total=342 [2022-12-14 03:09:41,768 INFO L87 Difference]: Start difference. First operand 36 states and 46 transitions. Second operand has 17 states, 15 states have (on average 1.8) internal successors, (27), 16 states have internal predecessors, (27), 3 states have call successors, (3), 2 states have call predecessors, (3), 7 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-12-14 03:09:42,254 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 03:09:42,254 INFO L93 Difference]: Finished difference Result 40 states and 49 transitions. [2022-12-14 03:09:42,254 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-12-14 03:09:42,255 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 15 states have (on average 1.8) internal successors, (27), 16 states have internal predecessors, (27), 3 states have call successors, (3), 2 states have call predecessors, (3), 7 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 26 [2022-12-14 03:09:42,255 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 03:09:42,256 INFO L225 Difference]: With dead ends: 40 [2022-12-14 03:09:42,256 INFO L226 Difference]: Without dead ends: 40 [2022-12-14 03:09:42,256 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 91 GetRequests, 65 SyntacticMatches, 2 SemanticMatches, 24 ConstructedPredicates, 6 IntricatePredicates, 0 DeprecatedPredicates, 26 ImplicationChecksByTransitivity, 2.9s TimeCoverageRelationStatistics Valid=81, Invalid=316, Unknown=7, NotChecked=246, Total=650 [2022-12-14 03:09:42,257 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 26 mSDsluCounter, 62 mSDsCounter, 0 mSdLazyCounter, 176 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 29 SdHoareTripleChecker+Valid, 78 SdHoareTripleChecker+Invalid, 372 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 176 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 186 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 03:09:42,257 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [29 Valid, 78 Invalid, 372 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 176 Invalid, 0 Unknown, 186 Unchecked, 0.2s Time] [2022-12-14 03:09:42,258 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 40 states. [2022-12-14 03:09:42,260 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 40 to 36. [2022-12-14 03:09:42,260 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 27 states have (on average 1.1481481481481481) internal successors, (31), 29 states have internal predecessors, (31), 5 states have call successors, (5), 1 states have call predecessors, (5), 2 states have return successors, (9), 5 states have call predecessors, (9), 5 states have call successors, (9) [2022-12-14 03:09:42,261 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 45 transitions. [2022-12-14 03:09:42,261 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 45 transitions. Word has length 26 [2022-12-14 03:09:42,261 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 03:09:42,261 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 45 transitions. [2022-12-14 03:09:42,261 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 15 states have (on average 1.8) internal successors, (27), 16 states have internal predecessors, (27), 3 states have call successors, (3), 2 states have call predecessors, (3), 7 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2022-12-14 03:09:42,261 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 45 transitions. [2022-12-14 03:09:42,262 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2022-12-14 03:09:42,262 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 03:09:42,262 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 03:09:42,264 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (16)] Forceful destruction successful, exit code 0 [2022-12-14 03:09:42,466 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Forceful destruction successful, exit code 0 [2022-12-14 03:09:42,675 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (15)] Ended with exit code 0 [2022-12-14 03:09:42,863 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt,17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-12-14 03:09:42,864 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-12-14 03:09:42,865 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 03:09:42,865 INFO L85 PathProgramCache]: Analyzing trace with hash -1383108784, now seen corresponding path program 2 times [2022-12-14 03:09:42,865 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-12-14 03:09:42,866 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1894941637] [2022-12-14 03:09:42,866 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-12-14 03:09:42,866 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-12-14 03:09:42,866 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat [2022-12-14 03:09:42,867 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-12-14 03:09:42,868 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (18)] Waiting until timeout for monitored process [2022-12-14 03:09:42,972 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-12-14 03:09:42,972 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 03:09:42,976 INFO L263 TraceCheckSpWp]: Trace formula consists of 131 conjuncts, 36 conjunts are in the unsatisfiable core [2022-12-14 03:09:42,979 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:09:42,995 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-12-14 03:09:43,001 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 03:09:43,111 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_174 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_174) |c_#length|)))) is different from true [2022-12-14 03:09:43,122 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:09:43,123 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:09:43,133 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:09:43,133 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:09:43,229 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_175 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_175) |c_#length|)))) is different from true [2022-12-14 03:09:43,245 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:09:43,246 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:09:43,257 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:09:43,257 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:09:43,345 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_176 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_176) |c_#length|)))) is different from true [2022-12-14 03:09:43,362 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:09:43,363 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:09:43,372 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:09:43,373 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:09:43,412 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 3 proven. 16 refuted. 0 times theorem prover too weak. 6 trivial. 12 not checked. [2022-12-14 03:09:43,412 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:09:45,798 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-12-14 03:09:45,798 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1894941637] [2022-12-14 03:09:45,798 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1894941637] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 03:09:45,798 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1800907521] [2022-12-14 03:09:45,798 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-12-14 03:09:45,798 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-12-14 03:09:45,799 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 [2022-12-14 03:09:45,799 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-12-14 03:09:45,800 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (19)] Waiting until timeout for monitored process [2022-12-14 03:09:45,929 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-12-14 03:09:45,929 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 03:09:45,932 INFO L263 TraceCheckSpWp]: Trace formula consists of 131 conjuncts, 36 conjunts are in the unsatisfiable core [2022-12-14 03:09:45,934 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:09:45,942 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-12-14 03:09:45,949 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 03:09:46,010 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_202 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_202) |c_#length|)))) is different from true [2022-12-14 03:09:46,023 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:09:46,024 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:09:46,035 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:09:46,035 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:09:46,095 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_203 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_203))))) is different from true [2022-12-14 03:09:46,111 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:09:46,112 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:09:46,121 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:09:46,121 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:09:46,180 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_204 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_204))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-12-14 03:09:46,196 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:09:46,197 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:09:46,209 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:09:46,210 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:09:46,220 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 3 proven. 16 refuted. 0 times theorem prover too weak. 6 trivial. 12 not checked. [2022-12-14 03:09:46,220 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:09:48,428 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [1800907521] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 03:09:48,428 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [371993455] [2022-12-14 03:09:48,428 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-12-14 03:09:48,428 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 03:09:48,428 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 03:09:48,429 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 03:09:48,430 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2022-12-14 03:09:48,491 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-12-14 03:09:48,491 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 03:09:48,493 INFO L263 TraceCheckSpWp]: Trace formula consists of 131 conjuncts, 36 conjunts are in the unsatisfiable core [2022-12-14 03:09:48,496 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:09:48,502 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-12-14 03:09:48,507 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 03:09:48,565 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_230 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_230) |c_#length|)))) is different from true [2022-12-14 03:09:48,579 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:09:48,580 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:09:48,588 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:09:48,588 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:09:48,642 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_231 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_231) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-12-14 03:09:48,655 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:09:48,656 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:09:48,667 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:09:48,668 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:09:48,720 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_232 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_232) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-12-14 03:09:48,736 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:09:48,737 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:09:48,746 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:09:48,746 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:09:48,758 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 3 proven. 16 refuted. 0 times theorem prover too weak. 6 trivial. 12 not checked. [2022-12-14 03:09:48,758 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:09:49,015 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [371993455] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 03:09:49,015 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 03:09:49,015 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 15, 15] total 21 [2022-12-14 03:09:49,015 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [207672419] [2022-12-14 03:09:49,016 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 03:09:49,016 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-12-14 03:09:49,016 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-12-14 03:09:49,016 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-12-14 03:09:49,017 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=57, Invalid=180, Unknown=9, NotChecked=306, Total=552 [2022-12-14 03:09:49,017 INFO L87 Difference]: Start difference. First operand 36 states and 45 transitions. Second operand has 22 states, 20 states have (on average 1.85) internal successors, (37), 21 states have internal predecessors, (37), 4 states have call successors, (4), 2 states have call predecessors, (4), 10 states have return successors, (10), 4 states have call predecessors, (10), 4 states have call successors, (10) [2022-12-14 03:09:49,730 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 03:09:49,730 INFO L93 Difference]: Finished difference Result 42 states and 50 transitions. [2022-12-14 03:09:49,730 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-12-14 03:09:49,731 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 20 states have (on average 1.85) internal successors, (37), 21 states have internal predecessors, (37), 4 states have call successors, (4), 2 states have call predecessors, (4), 10 states have return successors, (10), 4 states have call predecessors, (10), 4 states have call successors, (10) Word has length 35 [2022-12-14 03:09:49,731 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 03:09:49,731 INFO L225 Difference]: With dead ends: 42 [2022-12-14 03:09:49,731 INFO L226 Difference]: Without dead ends: 42 [2022-12-14 03:09:49,731 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 120 GetRequests, 87 SyntacticMatches, 2 SemanticMatches, 31 ConstructedPredicates, 9 IntricatePredicates, 0 DeprecatedPredicates, 45 ImplicationChecksByTransitivity, 5.1s TimeCoverageRelationStatistics Valid=108, Invalid=471, Unknown=9, NotChecked=468, Total=1056 [2022-12-14 03:09:49,732 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 31 mSDsluCounter, 97 mSDsCounter, 0 mSdLazyCounter, 284 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 34 SdHoareTripleChecker+Valid, 116 SdHoareTripleChecker+Invalid, 684 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 284 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 387 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-12-14 03:09:49,732 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [34 Valid, 116 Invalid, 684 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 284 Invalid, 0 Unknown, 387 Unchecked, 0.4s Time] [2022-12-14 03:09:49,732 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 42 states. [2022-12-14 03:09:49,734 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 42 to 36. [2022-12-14 03:09:49,734 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 27 states have (on average 1.1111111111111112) internal successors, (30), 29 states have internal predecessors, (30), 5 states have call successors, (5), 1 states have call predecessors, (5), 2 states have return successors, (9), 5 states have call predecessors, (9), 5 states have call successors, (9) [2022-12-14 03:09:49,735 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 44 transitions. [2022-12-14 03:09:49,735 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 44 transitions. Word has length 35 [2022-12-14 03:09:49,735 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 03:09:49,735 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 44 transitions. [2022-12-14 03:09:49,735 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 20 states have (on average 1.85) internal successors, (37), 21 states have internal predecessors, (37), 4 states have call successors, (4), 2 states have call predecessors, (4), 10 states have return successors, (10), 4 states have call predecessors, (10), 4 states have call successors, (10) [2022-12-14 03:09:49,735 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 44 transitions. [2022-12-14 03:09:49,736 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-12-14 03:09:49,736 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 03:09:49,736 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 3, 3, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 03:09:49,744 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (18)] Forceful destruction successful, exit code 0 [2022-12-14 03:09:49,939 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (19)] Ended with exit code 0 [2022-12-14 03:09:50,154 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Ended with exit code 0 [2022-12-14 03:09:50,337 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt,20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 03:09:50,338 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-12-14 03:09:50,339 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 03:09:50,339 INFO L85 PathProgramCache]: Analyzing trace with hash -856630225, now seen corresponding path program 3 times [2022-12-14 03:09:50,340 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-12-14 03:09:50,340 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1551853360] [2022-12-14 03:09:50,341 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 03:09:50,341 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-12-14 03:09:50,341 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat [2022-12-14 03:09:50,342 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-12-14 03:09:50,343 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (21)] Waiting until timeout for monitored process [2022-12-14 03:09:50,526 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-12-14 03:09:50,526 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 03:09:50,531 INFO L263 TraceCheckSpWp]: Trace formula consists of 166 conjuncts, 44 conjunts are in the unsatisfiable core [2022-12-14 03:09:50,534 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:09:50,548 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 03:09:50,552 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-12-14 03:09:50,638 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_266 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_266))))) is different from true [2022-12-14 03:09:50,653 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:09:50,654 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:09:50,662 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:09:50,662 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:09:50,758 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_267 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_267) |c_#length|)))) is different from true [2022-12-14 03:09:50,774 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:09:50,774 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:09:50,786 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:09:50,786 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:09:50,874 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_268 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_268) |c_#length|)))) is different from true [2022-12-14 03:09:50,890 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:09:50,891 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:09:50,899 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:09:50,900 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:09:50,993 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_269 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_269))))) is different from true [2022-12-14 03:09:51,006 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:09:51,007 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:09:51,017 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:09:51,017 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:09:51,051 INFO L134 CoverageAnalysis]: Checked inductivity of 67 backedges. 4 proven. 31 refuted. 0 times theorem prover too weak. 12 trivial. 20 not checked. [2022-12-14 03:09:51,051 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:09:55,406 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-12-14 03:09:55,406 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1551853360] [2022-12-14 03:09:55,406 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1551853360] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 03:09:55,406 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [537718344] [2022-12-14 03:09:55,406 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 03:09:55,406 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-12-14 03:09:55,406 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 [2022-12-14 03:09:55,407 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-12-14 03:09:55,408 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (22)] Waiting until timeout for monitored process [2022-12-14 03:09:55,786 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-12-14 03:09:55,787 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 03:09:55,801 INFO L263 TraceCheckSpWp]: Trace formula consists of 166 conjuncts, 53 conjunts are in the unsatisfiable core [2022-12-14 03:09:55,805 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:09:55,812 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-12-14 03:09:55,818 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 03:09:55,934 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 03:09:55,934 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-12-14 03:09:55,949 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:09:55,950 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:09:56,126 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 03:09:56,126 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-12-14 03:09:56,144 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:09:56,144 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:09:56,344 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:09:56,345 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:09:56,353 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:09:56,499 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_309 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_309) |c_#length|)))) is different from true [2022-12-14 03:09:56,514 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:09:56,515 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:09:56,527 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:09:56,527 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:09:56,539 INFO L134 CoverageAnalysis]: Checked inductivity of 67 backedges. 4 proven. 37 refuted. 0 times theorem prover too weak. 18 trivial. 8 not checked. [2022-12-14 03:09:56,539 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:09:56,767 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [537718344] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 03:09:56,768 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [115335135] [2022-12-14 03:09:56,768 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 03:09:56,768 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 03:09:56,768 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 03:09:56,769 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 03:09:56,770 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2022-12-14 03:09:56,944 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-12-14 03:09:56,944 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 03:09:56,947 INFO L263 TraceCheckSpWp]: Trace formula consists of 166 conjuncts, 45 conjunts are in the unsatisfiable core [2022-12-14 03:09:56,950 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:09:56,958 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-12-14 03:09:56,962 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 03:09:57,015 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_343 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_343) |c_#length|)))) is different from true [2022-12-14 03:09:57,026 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:09:57,027 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:09:57,036 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:09:57,037 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:09:57,081 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_344 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_344))))) is different from true [2022-12-14 03:09:57,091 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:09:57,092 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:09:57,101 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:09:57,101 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:09:57,145 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_345 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_345))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-12-14 03:09:57,156 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:09:57,156 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:09:57,165 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:09:57,165 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:09:57,209 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_346 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_346) |c_#length|)))) is different from true [2022-12-14 03:09:57,220 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:09:57,221 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:09:57,228 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:09:57,228 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:09:57,239 INFO L134 CoverageAnalysis]: Checked inductivity of 67 backedges. 4 proven. 31 refuted. 0 times theorem prover too weak. 12 trivial. 20 not checked. [2022-12-14 03:09:57,239 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:09:57,449 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [115335135] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 03:09:57,449 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 03:09:57,450 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 19, 18] total 30 [2022-12-14 03:09:57,450 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1481207542] [2022-12-14 03:09:57,450 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 03:09:57,450 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-12-14 03:09:57,450 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-12-14 03:09:57,451 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-12-14 03:09:57,451 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=91, Invalid=486, Unknown=11, NotChecked=468, Total=1056 [2022-12-14 03:09:57,451 INFO L87 Difference]: Start difference. First operand 36 states and 44 transitions. Second operand has 31 states, 29 states have (on average 1.6896551724137931) internal successors, (49), 27 states have internal predecessors, (49), 5 states have call successors, (5), 2 states have call predecessors, (5), 11 states have return successors, (13), 8 states have call predecessors, (13), 5 states have call successors, (13) [2022-12-14 03:09:58,990 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 03:09:58,991 INFO L93 Difference]: Finished difference Result 59 states and 73 transitions. [2022-12-14 03:09:58,991 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2022-12-14 03:09:58,991 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 29 states have (on average 1.6896551724137931) internal successors, (49), 27 states have internal predecessors, (49), 5 states have call successors, (5), 2 states have call predecessors, (5), 11 states have return successors, (13), 8 states have call predecessors, (13), 5 states have call successors, (13) Word has length 44 [2022-12-14 03:09:58,992 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 03:09:58,992 INFO L225 Difference]: With dead ends: 59 [2022-12-14 03:09:58,992 INFO L226 Difference]: Without dead ends: 59 [2022-12-14 03:09:58,992 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 157 GetRequests, 103 SyntacticMatches, 4 SemanticMatches, 50 ConstructedPredicates, 9 IntricatePredicates, 0 DeprecatedPredicates, 359 ImplicationChecksByTransitivity, 5.8s TimeCoverageRelationStatistics Valid=222, Invalid=1609, Unknown=11, NotChecked=810, Total=2652 [2022-12-14 03:09:58,993 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 56 mSDsluCounter, 135 mSDsCounter, 0 mSdLazyCounter, 686 mSolverCounterSat, 31 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 59 SdHoareTripleChecker+Valid, 155 SdHoareTripleChecker+Invalid, 1272 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 686 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 552 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-12-14 03:09:58,993 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [59 Valid, 155 Invalid, 1272 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 686 Invalid, 3 Unknown, 552 Unchecked, 0.8s Time] [2022-12-14 03:09:58,993 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2022-12-14 03:09:58,996 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 39. [2022-12-14 03:09:58,996 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39 states, 29 states have (on average 1.103448275862069) internal successors, (32), 31 states have internal predecessors, (32), 6 states have call successors, (6), 1 states have call predecessors, (6), 2 states have return successors, (11), 6 states have call predecessors, (11), 6 states have call successors, (11) [2022-12-14 03:09:58,996 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39 states to 39 states and 49 transitions. [2022-12-14 03:09:58,996 INFO L78 Accepts]: Start accepts. Automaton has 39 states and 49 transitions. Word has length 44 [2022-12-14 03:09:58,997 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 03:09:58,997 INFO L495 AbstractCegarLoop]: Abstraction has 39 states and 49 transitions. [2022-12-14 03:09:58,997 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 29 states have (on average 1.6896551724137931) internal successors, (49), 27 states have internal predecessors, (49), 5 states have call successors, (5), 2 states have call predecessors, (5), 11 states have return successors, (13), 8 states have call predecessors, (13), 5 states have call successors, (13) [2022-12-14 03:09:58,997 INFO L276 IsEmpty]: Start isEmpty. Operand 39 states and 49 transitions. [2022-12-14 03:09:58,998 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-12-14 03:09:58,998 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 03:09:58,998 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 03:09:59,003 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Ended with exit code 0 [2022-12-14 03:09:59,212 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (21)] Forceful destruction successful, exit code 0 [2022-12-14 03:09:59,407 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (22)] Ended with exit code 0 [2022-12-14 03:09:59,599 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 23 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,21 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,22 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt [2022-12-14 03:09:59,600 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-12-14 03:09:59,600 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 03:09:59,601 INFO L85 PathProgramCache]: Analyzing trace with hash -206900218, now seen corresponding path program 2 times [2022-12-14 03:09:59,601 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-12-14 03:09:59,601 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1938033112] [2022-12-14 03:09:59,601 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-12-14 03:09:59,601 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-12-14 03:09:59,601 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat [2022-12-14 03:09:59,603 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-12-14 03:09:59,603 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (24)] Waiting until timeout for monitored process [2022-12-14 03:09:59,692 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-12-14 03:09:59,692 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 03:09:59,697 INFO L263 TraceCheckSpWp]: Trace formula consists of 182 conjuncts, 7 conjunts are in the unsatisfiable core [2022-12-14 03:09:59,698 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:09:59,809 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 0 proven. 34 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2022-12-14 03:09:59,809 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:10:00,040 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 0 proven. 34 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2022-12-14 03:10:00,040 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-12-14 03:10:00,040 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1938033112] [2022-12-14 03:10:00,040 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1938033112] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 03:10:00,040 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [2023138126] [2022-12-14 03:10:00,040 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-12-14 03:10:00,040 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-12-14 03:10:00,040 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 [2022-12-14 03:10:00,041 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-12-14 03:10:00,042 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (25)] Waiting until timeout for monitored process [2022-12-14 03:10:00,214 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-12-14 03:10:00,214 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 03:10:00,220 INFO L263 TraceCheckSpWp]: Trace formula consists of 182 conjuncts, 7 conjunts are in the unsatisfiable core [2022-12-14 03:10:00,221 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:10:00,289 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 0 proven. 34 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2022-12-14 03:10:00,289 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:10:00,357 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 0 proven. 34 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2022-12-14 03:10:00,357 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [2023138126] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 03:10:00,357 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1143959286] [2022-12-14 03:10:00,357 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-12-14 03:10:00,357 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 03:10:00,357 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 03:10:00,358 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 03:10:00,359 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Waiting until timeout for monitored process [2022-12-14 03:10:00,449 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-12-14 03:10:00,449 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 03:10:00,451 INFO L263 TraceCheckSpWp]: Trace formula consists of 182 conjuncts, 7 conjunts are in the unsatisfiable core [2022-12-14 03:10:00,452 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:10:00,518 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 0 proven. 34 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2022-12-14 03:10:00,518 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:10:00,585 INFO L134 CoverageAnalysis]: Checked inductivity of 74 backedges. 0 proven. 34 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2022-12-14 03:10:00,585 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1143959286] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 03:10:00,585 INFO L184 FreeRefinementEngine]: Found 0 perfect and 6 imperfect interpolant sequences. [2022-12-14 03:10:00,586 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 8, 8, 8, 8, 8] total 14 [2022-12-14 03:10:00,586 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [490989184] [2022-12-14 03:10:00,586 INFO L85 oduleStraightlineAll]: Using 6 imperfect interpolants to construct interpolant automaton [2022-12-14 03:10:00,586 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-12-14 03:10:00,586 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-12-14 03:10:00,587 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-12-14 03:10:00,587 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=61, Invalid=121, Unknown=0, NotChecked=0, Total=182 [2022-12-14 03:10:00,587 INFO L87 Difference]: Start difference. First operand 39 states and 49 transitions. Second operand has 14 states, 14 states have (on average 3.2857142857142856) internal successors, (46), 14 states have internal predecessors, (46), 10 states have call successors, (10), 1 states have call predecessors, (10), 1 states have return successors, (10), 10 states have call predecessors, (10), 10 states have call successors, (10) [2022-12-14 03:10:00,974 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 03:10:00,974 INFO L93 Difference]: Finished difference Result 71 states and 91 transitions. [2022-12-14 03:10:00,974 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-12-14 03:10:00,974 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 3.2857142857142856) internal successors, (46), 14 states have internal predecessors, (46), 10 states have call successors, (10), 1 states have call predecessors, (10), 1 states have return successors, (10), 10 states have call predecessors, (10), 10 states have call successors, (10) Word has length 48 [2022-12-14 03:10:00,974 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 03:10:00,975 INFO L225 Difference]: With dead ends: 71 [2022-12-14 03:10:00,975 INFO L226 Difference]: Without dead ends: 71 [2022-12-14 03:10:00,975 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 287 GetRequests, 270 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 45 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=131, Invalid=211, Unknown=0, NotChecked=0, Total=342 [2022-12-14 03:10:00,976 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 71 mSDsluCounter, 132 mSDsCounter, 0 mSdLazyCounter, 180 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 72 SdHoareTripleChecker+Valid, 164 SdHoareTripleChecker+Invalid, 193 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 180 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 03:10:00,976 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [72 Valid, 164 Invalid, 193 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 180 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 03:10:00,976 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 71 states. [2022-12-14 03:10:00,979 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 71 to 66. [2022-12-14 03:10:00,979 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66 states, 51 states have (on average 1.1568627450980393) internal successors, (59), 53 states have internal predecessors, (59), 11 states have call successors, (11), 1 states have call predecessors, (11), 2 states have return successors, (21), 11 states have call predecessors, (21), 11 states have call successors, (21) [2022-12-14 03:10:00,980 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 91 transitions. [2022-12-14 03:10:00,980 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 91 transitions. Word has length 48 [2022-12-14 03:10:00,980 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 03:10:00,980 INFO L495 AbstractCegarLoop]: Abstraction has 66 states and 91 transitions. [2022-12-14 03:10:00,980 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 3.2857142857142856) internal successors, (46), 14 states have internal predecessors, (46), 10 states have call successors, (10), 1 states have call predecessors, (10), 1 states have return successors, (10), 10 states have call predecessors, (10), 10 states have call successors, (10) [2022-12-14 03:10:00,980 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 91 transitions. [2022-12-14 03:10:00,981 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-12-14 03:10:00,981 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 03:10:00,981 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 5, 5, 5, 4, 4, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 03:10:00,993 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (24)] Ended with exit code 0 [2022-12-14 03:10:01,190 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Forceful destruction successful, exit code 0 [2022-12-14 03:10:01,388 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (25)] Ended with exit code 0 [2022-12-14 03:10:01,583 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 24 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,26 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,25 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt [2022-12-14 03:10:01,584 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-12-14 03:10:01,584 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 03:10:01,585 INFO L85 PathProgramCache]: Analyzing trace with hash 845314608, now seen corresponding path program 4 times [2022-12-14 03:10:01,586 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-12-14 03:10:01,586 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [990388998] [2022-12-14 03:10:01,586 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 03:10:01,587 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-12-14 03:10:01,587 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat [2022-12-14 03:10:01,590 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-12-14 03:10:01,592 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (27)] Waiting until timeout for monitored process [2022-12-14 03:10:01,714 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 03:10:01,714 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 03:10:01,721 INFO L263 TraceCheckSpWp]: Trace formula consists of 201 conjuncts, 52 conjunts are in the unsatisfiable core [2022-12-14 03:10:01,724 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:10:01,735 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 03:10:01,740 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-12-14 03:10:01,837 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_490 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_490) |c_#length|)))) is different from true [2022-12-14 03:10:01,851 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:01,851 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:01,859 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:01,859 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:01,932 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_491 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_491))))) is different from true [2022-12-14 03:10:01,946 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:01,947 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:01,955 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:01,955 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:02,047 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_492 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_492) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-12-14 03:10:02,060 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:02,060 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:02,067 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:02,067 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:02,171 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_493 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_493))))) is different from true [2022-12-14 03:10:02,182 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:02,183 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:02,190 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:02,190 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:02,286 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_494 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_494) |c_#length|)))) is different from true [2022-12-14 03:10:02,297 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:02,297 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:02,307 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:02,307 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:02,342 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 5 proven. 51 refuted. 0 times theorem prover too weak. 20 trivial. 30 not checked. [2022-12-14 03:10:02,343 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:10:04,715 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-12-14 03:10:04,715 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [990388998] [2022-12-14 03:10:04,715 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [990388998] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 03:10:04,715 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [2105794022] [2022-12-14 03:10:04,715 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 03:10:04,715 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-12-14 03:10:04,715 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 [2022-12-14 03:10:04,716 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-12-14 03:10:04,717 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (28)] Waiting until timeout for monitored process [2022-12-14 03:10:04,926 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 03:10:04,926 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 03:10:04,930 INFO L263 TraceCheckSpWp]: Trace formula consists of 201 conjuncts, 52 conjunts are in the unsatisfiable core [2022-12-14 03:10:04,934 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:10:04,941 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 03:10:04,945 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-12-14 03:10:04,996 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_536 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_536) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-12-14 03:10:05,007 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:05,007 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:05,014 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:05,014 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:05,054 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_537 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_537))))) is different from true [2022-12-14 03:10:05,064 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:05,065 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:05,071 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:05,072 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:05,114 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_538 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_538))))) is different from true [2022-12-14 03:10:05,125 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:05,125 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:05,133 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:05,134 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:05,170 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_539 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_539) |c_#length|)))) is different from true [2022-12-14 03:10:05,181 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:05,181 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:05,188 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:05,188 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:05,229 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_540 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_540) |c_#length|)))) is different from true [2022-12-14 03:10:05,242 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:05,243 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:05,251 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:05,251 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:05,256 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 5 proven. 51 refuted. 0 times theorem prover too weak. 20 trivial. 30 not checked. [2022-12-14 03:10:05,257 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:10:05,801 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [2105794022] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 03:10:05,801 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1232109744] [2022-12-14 03:10:05,801 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 03:10:05,801 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 03:10:05,801 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 03:10:05,802 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 03:10:05,803 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Waiting until timeout for monitored process [2022-12-14 03:10:05,913 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 03:10:05,913 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 03:10:05,917 INFO L263 TraceCheckSpWp]: Trace formula consists of 201 conjuncts, 54 conjunts are in the unsatisfiable core [2022-12-14 03:10:05,921 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:10:05,929 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 03:10:05,934 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-12-14 03:10:05,980 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_582 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_582))))) is different from true [2022-12-14 03:10:05,994 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:05,994 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:06,001 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:06,002 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:06,045 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_583 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_583) |c_#length|)))) is different from true [2022-12-14 03:10:06,057 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:06,058 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:06,067 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:06,068 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:06,109 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_584 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_584))))) is different from true [2022-12-14 03:10:06,124 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:06,125 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:06,132 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:06,133 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:06,217 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:06,217 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:06,230 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-12-14 03:10:06,231 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-12-14 03:10:06,393 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_587 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_587) |c_#length|)))) is different from true [2022-12-14 03:10:06,409 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:06,410 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:06,424 INFO L321 Elim1Store]: treesize reduction 12, result has 42.9 percent of original size [2022-12-14 03:10:06,425 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 20 treesize of output 22 [2022-12-14 03:10:06,434 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 5 proven. 53 refuted. 0 times theorem prover too weak. 20 trivial. 28 not checked. [2022-12-14 03:10:06,434 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:10:06,704 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1232109744] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 03:10:06,704 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 03:10:06,704 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 21, 21] total 33 [2022-12-14 03:10:06,704 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [579227904] [2022-12-14 03:10:06,704 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 03:10:06,705 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 34 states [2022-12-14 03:10:06,705 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-12-14 03:10:06,706 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 34 interpolants. [2022-12-14 03:10:06,706 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=97, Invalid=407, Unknown=14, NotChecked=742, Total=1260 [2022-12-14 03:10:06,706 INFO L87 Difference]: Start difference. First operand 66 states and 91 transitions. Second operand has 34 states, 32 states have (on average 1.90625) internal successors, (61), 33 states have internal predecessors, (61), 7 states have call successors, (7), 2 states have call predecessors, (7), 16 states have return successors, (16), 7 states have call predecessors, (16), 7 states have call successors, (16) [2022-12-14 03:10:07,913 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 03:10:07,913 INFO L93 Difference]: Finished difference Result 74 states and 100 transitions. [2022-12-14 03:10:07,914 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-12-14 03:10:07,914 INFO L78 Accepts]: Start accepts. Automaton has has 34 states, 32 states have (on average 1.90625) internal successors, (61), 33 states have internal predecessors, (61), 7 states have call successors, (7), 2 states have call predecessors, (7), 16 states have return successors, (16), 7 states have call predecessors, (16), 7 states have call successors, (16) Word has length 53 [2022-12-14 03:10:07,914 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 03:10:07,915 INFO L225 Difference]: With dead ends: 74 [2022-12-14 03:10:07,915 INFO L226 Difference]: Without dead ends: 74 [2022-12-14 03:10:07,915 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 175 GetRequests, 129 SyntacticMatches, 2 SemanticMatches, 44 ConstructedPredicates, 14 IntricatePredicates, 0 DeprecatedPredicates, 115 ImplicationChecksByTransitivity, 4.0s TimeCoverageRelationStatistics Valid=163, Invalid=871, Unknown=14, NotChecked=1022, Total=2070 [2022-12-14 03:10:07,915 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 53 mSDsluCounter, 123 mSDsCounter, 0 mSdLazyCounter, 513 mSolverCounterSat, 30 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 56 SdHoareTripleChecker+Valid, 143 SdHoareTripleChecker+Invalid, 1275 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 30 IncrementalHoareTripleChecker+Valid, 513 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 728 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-12-14 03:10:07,916 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [56 Valid, 143 Invalid, 1275 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [30 Valid, 513 Invalid, 4 Unknown, 728 Unchecked, 0.6s Time] [2022-12-14 03:10:07,916 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 74 states. [2022-12-14 03:10:07,919 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 74 to 66. [2022-12-14 03:10:07,919 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66 states, 51 states have (on average 1.1372549019607843) internal successors, (58), 53 states have internal predecessors, (58), 11 states have call successors, (11), 1 states have call predecessors, (11), 2 states have return successors, (21), 11 states have call predecessors, (21), 11 states have call successors, (21) [2022-12-14 03:10:07,919 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 90 transitions. [2022-12-14 03:10:07,920 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 90 transitions. Word has length 53 [2022-12-14 03:10:07,920 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 03:10:07,920 INFO L495 AbstractCegarLoop]: Abstraction has 66 states and 90 transitions. [2022-12-14 03:10:07,920 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 34 states, 32 states have (on average 1.90625) internal successors, (61), 33 states have internal predecessors, (61), 7 states have call successors, (7), 2 states have call predecessors, (7), 16 states have return successors, (16), 7 states have call predecessors, (16), 7 states have call successors, (16) [2022-12-14 03:10:07,920 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 90 transitions. [2022-12-14 03:10:07,921 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2022-12-14 03:10:07,921 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 03:10:07,921 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 6, 6, 6, 6, 5, 5, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 03:10:07,930 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (27)] Ended with exit code 0 [2022-12-14 03:10:08,136 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Forceful destruction successful, exit code 0 [2022-12-14 03:10:08,328 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (28)] Ended with exit code 0 [2022-12-14 03:10:08,522 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 27 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,29 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,28 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt [2022-12-14 03:10:08,523 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-12-14 03:10:08,524 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 03:10:08,524 INFO L85 PathProgramCache]: Analyzing trace with hash -1540616881, now seen corresponding path program 5 times [2022-12-14 03:10:08,525 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-12-14 03:10:08,525 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1669560093] [2022-12-14 03:10:08,526 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2022-12-14 03:10:08,526 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-12-14 03:10:08,526 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat [2022-12-14 03:10:08,528 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-12-14 03:10:08,529 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (30)] Waiting until timeout for monitored process [2022-12-14 03:10:08,751 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 7 check-sat command(s) [2022-12-14 03:10:08,751 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 03:10:08,758 INFO L263 TraceCheckSpWp]: Trace formula consists of 236 conjuncts, 64 conjunts are in the unsatisfiable core [2022-12-14 03:10:08,762 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:10:08,772 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 03:10:08,903 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 03:10:08,904 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-12-14 03:10:09,175 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_638 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_638) |c_#length|)))) is different from true [2022-12-14 03:10:09,196 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:09,220 INFO L321 Elim1Store]: treesize reduction 19, result has 32.1 percent of original size [2022-12-14 03:10:09,220 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 24 treesize of output 31 [2022-12-14 03:10:09,236 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:09,237 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:09,437 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_639 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_639))))) is different from true [2022-12-14 03:10:09,450 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:09,450 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:09,459 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:09,460 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:09,553 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_640 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_640) |c_#length|)))) is different from true [2022-12-14 03:10:09,563 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:09,564 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:09,571 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:09,572 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:09,673 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_641 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_641) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-12-14 03:10:09,686 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:09,687 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:09,696 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:09,696 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:09,811 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_642 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_642) |c_#length|)))) is different from true [2022-12-14 03:10:09,826 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:09,826 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:09,834 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:09,835 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:09,887 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 12 proven. 82 refuted. 0 times theorem prover too weak. 20 trivial. 40 not checked. [2022-12-14 03:10:09,888 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:10:12,533 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-12-14 03:10:12,533 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1669560093] [2022-12-14 03:10:12,533 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1669560093] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 03:10:12,533 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [249943557] [2022-12-14 03:10:12,533 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2022-12-14 03:10:12,533 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-12-14 03:10:12,533 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 [2022-12-14 03:10:12,534 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-12-14 03:10:12,535 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (31)] Waiting until timeout for monitored process [2022-12-14 03:10:12,874 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 7 check-sat command(s) [2022-12-14 03:10:12,874 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 03:10:12,893 INFO L263 TraceCheckSpWp]: Trace formula consists of 236 conjuncts, 65 conjunts are in the unsatisfiable core [2022-12-14 03:10:12,896 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:10:12,903 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 03:10:12,956 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 03:10:12,957 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-12-14 03:10:13,042 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_693 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_693) |c_#length|)))) is different from true [2022-12-14 03:10:13,056 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:13,070 INFO L321 Elim1Store]: treesize reduction 19, result has 32.1 percent of original size [2022-12-14 03:10:13,071 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 24 treesize of output 31 [2022-12-14 03:10:13,082 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:13,083 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:13,150 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_695 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_695) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_694 (_ BitVec 1))) (= |c_#valid| (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_694))))) is different from true [2022-12-14 03:10:13,173 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:13,174 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:13,191 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-12-14 03:10:13,191 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-12-14 03:10:13,236 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_697 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_697) |c_#length|)) (exists ((v_ArrVal_696 (_ BitVec 1))) (= |c_#valid| (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_696))))) is different from true [2022-12-14 03:10:13,249 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:13,249 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:13,270 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-12-14 03:10:13,270 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-12-14 03:10:13,326 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_698 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_698) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-12-14 03:10:13,339 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:13,340 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:13,348 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:13,349 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:13,403 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_699 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_699))))) is different from true [2022-12-14 03:10:13,415 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:13,416 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:13,427 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:13,427 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:13,437 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 12 proven. 82 refuted. 0 times theorem prover too weak. 20 trivial. 40 not checked. [2022-12-14 03:10:13,437 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:10:17,739 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [249943557] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 03:10:17,739 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [963804629] [2022-12-14 03:10:17,740 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2022-12-14 03:10:17,740 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 03:10:17,740 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 03:10:17,741 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 03:10:17,741 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Waiting until timeout for monitored process [2022-12-14 03:10:18,110 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 7 check-sat command(s) [2022-12-14 03:10:18,111 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 03:10:18,116 INFO L263 TraceCheckSpWp]: Trace formula consists of 236 conjuncts, 62 conjunts are in the unsatisfiable core [2022-12-14 03:10:18,120 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:10:18,128 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 03:10:18,133 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-12-14 03:10:18,334 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_749 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_749) |c_#length|)))) is different from true [2022-12-14 03:10:18,348 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:18,348 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:18,355 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:18,355 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:18,393 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_750 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_750))))) is different from true [2022-12-14 03:10:18,406 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:18,407 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:18,415 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:18,416 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:18,489 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_752 (_ BitVec 1))) (= (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_752) |c_#valid|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_751 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_751))))) is different from true [2022-12-14 03:10:18,521 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-12-14 03:10:18,521 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-12-14 03:10:18,525 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:18,579 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_753 (_ BitVec 1))) (= |c_#valid| (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_753))) (exists ((v_ArrVal_754 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_754) |c_#length|)))) is different from true [2022-12-14 03:10:18,596 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:18,596 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:18,612 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-12-14 03:10:18,613 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-12-14 03:10:18,661 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_755 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_755))))) is different from true [2022-12-14 03:10:18,674 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:18,675 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:18,684 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:18,684 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:18,738 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_756 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_756) |c_#length|)))) is different from true [2022-12-14 03:10:18,749 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:18,749 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:18,756 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:18,756 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:18,767 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 6 proven. 76 refuted. 0 times theorem prover too weak. 30 trivial. 42 not checked. [2022-12-14 03:10:18,767 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:10:21,098 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [963804629] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 03:10:21,098 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 03:10:21,098 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [29, 27, 22] total 44 [2022-12-14 03:10:21,098 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1773348284] [2022-12-14 03:10:21,098 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 03:10:21,099 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 45 states [2022-12-14 03:10:21,099 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-12-14 03:10:21,099 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 45 interpolants. [2022-12-14 03:10:21,100 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=127, Invalid=850, Unknown=17, NotChecked=1168, Total=2162 [2022-12-14 03:10:21,100 INFO L87 Difference]: Start difference. First operand 66 states and 90 transitions. Second operand has 45 states, 43 states have (on average 1.8837209302325582) internal successors, (81), 41 states have internal predecessors, (81), 9 states have call successors, (9), 3 states have call predecessors, (9), 19 states have return successors, (19), 12 states have call predecessors, (19), 9 states have call successors, (19) [2022-12-14 03:10:23,538 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 03:10:23,538 INFO L93 Difference]: Finished difference Result 74 states and 99 transitions. [2022-12-14 03:10:23,539 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-12-14 03:10:23,539 INFO L78 Accepts]: Start accepts. Automaton has has 45 states, 43 states have (on average 1.8837209302325582) internal successors, (81), 41 states have internal predecessors, (81), 9 states have call successors, (9), 3 states have call predecessors, (9), 19 states have return successors, (19), 12 states have call predecessors, (19), 9 states have call successors, (19) Word has length 62 [2022-12-14 03:10:23,539 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 03:10:23,540 INFO L225 Difference]: With dead ends: 74 [2022-12-14 03:10:23,540 INFO L226 Difference]: Without dead ends: 74 [2022-12-14 03:10:23,540 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 204 GetRequests, 145 SyntacticMatches, 2 SemanticMatches, 57 ConstructedPredicates, 16 IntricatePredicates, 0 DeprecatedPredicates, 261 ImplicationChecksByTransitivity, 11.1s TimeCoverageRelationStatistics Valid=217, Invalid=1636, Unknown=17, NotChecked=1552, Total=3422 [2022-12-14 03:10:23,541 INFO L413 NwaCegarLoop]: 21 mSDtfsCounter, 63 mSDsluCounter, 188 mSDsCounter, 0 mSdLazyCounter, 939 mSolverCounterSat, 40 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 209 SdHoareTripleChecker+Invalid, 1925 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 939 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 944 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-12-14 03:10:23,541 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [66 Valid, 209 Invalid, 1925 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 939 Invalid, 2 Unknown, 944 Unchecked, 1.1s Time] [2022-12-14 03:10:23,541 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 74 states. [2022-12-14 03:10:23,544 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 74 to 66. [2022-12-14 03:10:23,544 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66 states, 51 states have (on average 1.1176470588235294) internal successors, (57), 53 states have internal predecessors, (57), 11 states have call successors, (11), 1 states have call predecessors, (11), 2 states have return successors, (21), 11 states have call predecessors, (21), 11 states have call successors, (21) [2022-12-14 03:10:23,544 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 89 transitions. [2022-12-14 03:10:23,544 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 89 transitions. Word has length 62 [2022-12-14 03:10:23,545 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 03:10:23,545 INFO L495 AbstractCegarLoop]: Abstraction has 66 states and 89 transitions. [2022-12-14 03:10:23,545 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 45 states, 43 states have (on average 1.8837209302325582) internal successors, (81), 41 states have internal predecessors, (81), 9 states have call successors, (9), 3 states have call predecessors, (9), 19 states have return successors, (19), 12 states have call predecessors, (19), 9 states have call successors, (19) [2022-12-14 03:10:23,545 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 89 transitions. [2022-12-14 03:10:23,545 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2022-12-14 03:10:23,545 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 03:10:23,546 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 7, 7, 7, 7, 6, 6, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 03:10:23,549 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (31)] Ended with exit code 0 [2022-12-14 03:10:23,776 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (30)] Ended with exit code 0 [2022-12-14 03:10:23,957 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Ended with exit code 0 [2022-12-14 03:10:24,147 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 31 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt,30 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,32 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 03:10:24,148 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-12-14 03:10:24,149 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 03:10:24,149 INFO L85 PathProgramCache]: Analyzing trace with hash -446919408, now seen corresponding path program 6 times [2022-12-14 03:10:24,150 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-12-14 03:10:24,151 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [918994872] [2022-12-14 03:10:24,151 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2022-12-14 03:10:24,151 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-12-14 03:10:24,152 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat [2022-12-14 03:10:24,154 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-12-14 03:10:24,156 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (33)] Waiting until timeout for monitored process [2022-12-14 03:10:24,432 INFO L228 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 8 check-sat command(s) [2022-12-14 03:10:24,433 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 03:10:24,441 INFO L263 TraceCheckSpWp]: Trace formula consists of 271 conjuncts, 68 conjunts are in the unsatisfiable core [2022-12-14 03:10:24,445 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:10:24,459 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-12-14 03:10:24,463 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 03:10:24,563 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_814 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_814) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-12-14 03:10:24,574 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:24,575 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:24,585 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:24,585 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:24,668 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_815 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_815) |c_#length|)))) is different from true [2022-12-14 03:10:24,681 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:24,681 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:24,689 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:24,689 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:24,779 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_816 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_816) |c_#length|)))) is different from true [2022-12-14 03:10:24,793 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:24,793 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:24,802 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:24,802 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:24,923 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| |c_ldv_malloc_#in~size|) |c_#length|)) is different from true [2022-12-14 03:10:24,944 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 03:10:24,944 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-12-14 03:10:25,147 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_818 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_818) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-12-14 03:10:25,161 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:25,176 INFO L321 Elim1Store]: treesize reduction 19, result has 32.1 percent of original size [2022-12-14 03:10:25,177 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 17 treesize of output 26 [2022-12-14 03:10:25,186 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:25,187 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:25,340 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_819 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_819) |c_#length|)))) is different from true [2022-12-14 03:10:25,355 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:25,356 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:25,364 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:25,364 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:25,506 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_820 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_820) |c_#length|)))) is different from true [2022-12-14 03:10:25,517 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:25,518 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:25,526 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:25,526 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:25,569 INFO L134 CoverageAnalysis]: Checked inductivity of 211 backedges. 11 proven. 114 refuted. 0 times theorem prover too weak. 30 trivial. 56 not checked. [2022-12-14 03:10:25,569 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:10:28,145 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-12-14 03:10:28,145 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [918994872] [2022-12-14 03:10:28,145 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [918994872] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 03:10:28,145 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [634565513] [2022-12-14 03:10:28,145 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2022-12-14 03:10:28,146 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-12-14 03:10:28,146 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 [2022-12-14 03:10:28,146 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-12-14 03:10:28,147 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (34)] Waiting until timeout for monitored process [2022-12-14 03:10:29,177 INFO L228 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 8 check-sat command(s) [2022-12-14 03:10:29,177 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 03:10:29,185 INFO L263 TraceCheckSpWp]: Trace formula consists of 271 conjuncts, 81 conjunts are in the unsatisfiable core [2022-12-14 03:10:29,190 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:10:29,197 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-12-14 03:10:29,202 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 03:10:29,330 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 03:10:29,330 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-12-14 03:10:29,357 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-12-14 03:10:29,358 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-12-14 03:10:29,702 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_882 (_ BitVec 1))) (= (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_882) |c_#valid|)) (exists ((v_ArrVal_881 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_881) |c_#length|)))) is different from true [2022-12-14 03:10:29,728 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:29,729 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:29,764 INFO L321 Elim1Store]: treesize reduction 44, result has 34.3 percent of original size [2022-12-14 03:10:29,765 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 26 treesize of output 43 [2022-12-14 03:10:30,012 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 03:10:30,013 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-12-14 03:10:30,063 INFO L321 Elim1Store]: treesize reduction 44, result has 34.3 percent of original size [2022-12-14 03:10:30,063 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 26 treesize of output 43 [2022-12-14 03:10:30,538 INFO L321 Elim1Store]: treesize reduction 12, result has 42.9 percent of original size [2022-12-14 03:10:30,539 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 20 treesize of output 22 [2022-12-14 03:10:30,545 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:30,877 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 03:10:30,877 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-12-14 03:10:30,892 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:30,892 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:31,046 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_890 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_890) |c_#length|)))) is different from true [2022-12-14 03:10:31,057 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:31,058 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:31,068 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:31,068 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:31,120 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_891 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_891) |c_#length|)))) is different from true [2022-12-14 03:10:31,136 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:31,137 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:31,146 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:31,146 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:31,158 INFO L134 CoverageAnalysis]: Checked inductivity of 211 backedges. 7 proven. 120 refuted. 4 times theorem prover too weak. 44 trivial. 36 not checked. [2022-12-14 03:10:31,158 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:10:35,495 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [634565513] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 03:10:35,496 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1666970035] [2022-12-14 03:10:35,496 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2022-12-14 03:10:35,496 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 03:10:35,496 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 03:10:35,497 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 03:10:35,497 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Waiting until timeout for monitored process [2022-12-14 03:10:37,554 INFO L228 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 8 check-sat command(s) [2022-12-14 03:10:37,554 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 03:10:37,562 INFO L263 TraceCheckSpWp]: Trace formula consists of 271 conjuncts, 69 conjunts are in the unsatisfiable core [2022-12-14 03:10:37,566 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:10:37,574 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-12-14 03:10:37,579 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 03:10:37,630 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_949 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_949) |c_#length|)))) is different from true [2022-12-14 03:10:37,649 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:37,650 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:37,660 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:37,660 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:37,711 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_950 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_950) |c_#length|)))) is different from true [2022-12-14 03:10:37,725 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:37,726 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:37,737 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:37,737 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:37,785 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_951 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_951) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-12-14 03:10:37,801 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:37,802 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:37,811 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:37,811 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:37,867 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_952 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_952))))) is different from true [2022-12-14 03:10:37,886 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:37,886 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:37,897 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:37,897 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:37,948 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_953 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_953) |c_#length|)))) is different from true [2022-12-14 03:10:37,960 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:37,961 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:37,972 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:37,972 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:38,021 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_954 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_954) |c_#length|)))) is different from true [2022-12-14 03:10:38,034 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:38,034 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:38,043 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:38,044 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:38,092 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_955 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_955) |c_#length|)))) is different from true [2022-12-14 03:10:38,109 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:38,110 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:38,119 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:38,120 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:38,131 INFO L134 CoverageAnalysis]: Checked inductivity of 211 backedges. 7 proven. 106 refuted. 0 times theorem prover too weak. 42 trivial. 56 not checked. [2022-12-14 03:10:38,131 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:10:38,414 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1666970035] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 03:10:38,414 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 03:10:38,414 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [31, 31, 27] total 57 [2022-12-14 03:10:38,414 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [468638350] [2022-12-14 03:10:38,414 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 03:10:38,414 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 58 states [2022-12-14 03:10:38,414 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-12-14 03:10:38,415 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 58 interpolants. [2022-12-14 03:10:38,415 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=204, Invalid=1651, Unknown=19, NotChecked=1666, Total=3540 [2022-12-14 03:10:38,416 INFO L87 Difference]: Start difference. First operand 66 states and 89 transitions. Second operand has 58 states, 56 states have (on average 1.7678571428571428) internal successors, (99), 52 states have internal predecessors, (99), 13 states have call successors, (13), 3 states have call predecessors, (13), 21 states have return successors, (22), 14 states have call predecessors, (22), 13 states have call successors, (22) [2022-12-14 03:10:43,051 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 03:10:43,051 INFO L93 Difference]: Finished difference Result 103 states and 135 transitions. [2022-12-14 03:10:43,052 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-12-14 03:10:43,052 INFO L78 Accepts]: Start accepts. Automaton has has 58 states, 56 states have (on average 1.7678571428571428) internal successors, (99), 52 states have internal predecessors, (99), 13 states have call successors, (13), 3 states have call predecessors, (13), 21 states have return successors, (22), 14 states have call predecessors, (22), 13 states have call successors, (22) Word has length 71 [2022-12-14 03:10:43,052 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 03:10:43,052 INFO L225 Difference]: With dead ends: 103 [2022-12-14 03:10:43,052 INFO L226 Difference]: Without dead ends: 103 [2022-12-14 03:10:43,053 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 244 GetRequests, 157 SyntacticMatches, 4 SemanticMatches, 83 ConstructedPredicates, 17 IntricatePredicates, 0 DeprecatedPredicates, 1159 ImplicationChecksByTransitivity, 10.9s TimeCoverageRelationStatistics Valid=439, Invalid=4166, Unknown=19, NotChecked=2516, Total=7140 [2022-12-14 03:10:43,054 INFO L413 NwaCegarLoop]: 22 mSDtfsCounter, 94 mSDsluCounter, 232 mSDsCounter, 0 mSdLazyCounter, 1827 mSolverCounterSat, 71 mSolverCounterUnsat, 16 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 97 SdHoareTripleChecker+Valid, 254 SdHoareTripleChecker+Invalid, 3614 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 71 IncrementalHoareTripleChecker+Valid, 1827 IncrementalHoareTripleChecker+Invalid, 16 IncrementalHoareTripleChecker+Unknown, 1700 IncrementalHoareTripleChecker+Unchecked, 2.3s IncrementalHoareTripleChecker+Time [2022-12-14 03:10:43,054 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [97 Valid, 254 Invalid, 3614 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [71 Valid, 1827 Invalid, 16 Unknown, 1700 Unchecked, 2.3s Time] [2022-12-14 03:10:43,054 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 103 states. [2022-12-14 03:10:43,057 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 103 to 66. [2022-12-14 03:10:43,057 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66 states, 51 states have (on average 1.0980392156862746) internal successors, (56), 53 states have internal predecessors, (56), 11 states have call successors, (11), 1 states have call predecessors, (11), 2 states have return successors, (21), 11 states have call predecessors, (21), 11 states have call successors, (21) [2022-12-14 03:10:43,057 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 88 transitions. [2022-12-14 03:10:43,057 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 88 transitions. Word has length 71 [2022-12-14 03:10:43,058 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 03:10:43,058 INFO L495 AbstractCegarLoop]: Abstraction has 66 states and 88 transitions. [2022-12-14 03:10:43,058 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 58 states, 56 states have (on average 1.7678571428571428) internal successors, (99), 52 states have internal predecessors, (99), 13 states have call successors, (13), 3 states have call predecessors, (13), 21 states have return successors, (22), 14 states have call predecessors, (22), 13 states have call successors, (22) [2022-12-14 03:10:43,058 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 88 transitions. [2022-12-14 03:10:43,058 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 81 [2022-12-14 03:10:43,059 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 03:10:43,059 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 9, 8, 8, 8, 8, 7, 7, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 03:10:43,068 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Forceful destruction successful, exit code 0 [2022-12-14 03:10:43,290 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (33)] Ended with exit code 0 [2022-12-14 03:10:43,473 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (34)] Ended with exit code 0 [2022-12-14 03:10:43,660 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 35 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,33 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,34 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt [2022-12-14 03:10:43,661 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-12-14 03:10:43,662 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 03:10:43,663 INFO L85 PathProgramCache]: Analyzing trace with hash -1800849809, now seen corresponding path program 7 times [2022-12-14 03:10:43,664 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-12-14 03:10:43,664 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2115482317] [2022-12-14 03:10:43,664 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 03:10:43,665 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-12-14 03:10:43,665 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat [2022-12-14 03:10:43,666 INFO L229 MonitoredProcess]: Starting monitored process 36 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-12-14 03:10:43,667 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (36)] Waiting until timeout for monitored process [2022-12-14 03:10:43,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 03:10:43,954 INFO L263 TraceCheckSpWp]: Trace formula consists of 306 conjuncts, 76 conjunts are in the unsatisfiable core [2022-12-14 03:10:43,959 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:10:43,972 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 03:10:43,976 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-12-14 03:10:44,082 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1021 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1021) |c_#length|)))) is different from true [2022-12-14 03:10:44,096 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:44,096 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:44,106 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:44,106 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:44,193 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1022 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1022) |c_#length|)))) is different from true [2022-12-14 03:10:44,210 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:44,210 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:44,222 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:44,222 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:44,301 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1023 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1023) |c_#length|)))) is different from true [2022-12-14 03:10:44,313 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:44,314 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:44,326 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:44,326 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:44,416 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1024 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1024))))) is different from true [2022-12-14 03:10:44,434 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:44,434 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:44,442 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:44,442 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:44,575 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1025 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1025) |c_#length|)))) is different from true [2022-12-14 03:10:44,590 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:44,591 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:44,605 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:44,605 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:44,704 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_1026 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1026))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-12-14 03:10:44,716 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:44,716 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:44,729 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:44,729 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:44,837 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1027 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1027) |c_#length|)))) is different from true [2022-12-14 03:10:44,850 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:44,851 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:44,864 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:44,864 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:44,992 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1028 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1028))))) is different from true [2022-12-14 03:10:45,006 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:45,007 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:45,020 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:45,020 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:45,062 INFO L134 CoverageAnalysis]: Checked inductivity of 277 backedges. 8 proven. 141 refuted. 0 times theorem prover too weak. 56 trivial. 72 not checked. [2022-12-14 03:10:45,062 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:10:45,690 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-12-14 03:10:45,690 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2115482317] [2022-12-14 03:10:45,691 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2115482317] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 03:10:45,691 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [2037623259] [2022-12-14 03:10:45,691 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 03:10:45,691 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-12-14 03:10:45,691 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 [2022-12-14 03:10:45,692 INFO L229 MonitoredProcess]: Starting monitored process 37 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-12-14 03:10:45,693 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (37)] Waiting until timeout for monitored process [2022-12-14 03:10:46,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 03:10:46,038 INFO L263 TraceCheckSpWp]: Trace formula consists of 306 conjuncts, 76 conjunts are in the unsatisfiable core [2022-12-14 03:10:46,043 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:10:46,052 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-12-14 03:10:46,057 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 03:10:46,113 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1094 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1094) |c_#length|)))) is different from true [2022-12-14 03:10:46,126 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:46,126 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:46,134 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:46,134 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:46,187 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1095 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1095))))) is different from true [2022-12-14 03:10:46,199 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:46,200 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:46,211 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:46,212 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:46,256 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1096 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1096) |c_#length|)))) is different from true [2022-12-14 03:10:46,270 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:46,271 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:46,281 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:46,281 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:46,332 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1097 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1097) |c_#length|)))) is different from true [2022-12-14 03:10:46,345 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:46,347 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:46,358 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:46,359 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:46,410 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1098 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1098) |c_#length|)))) is different from true [2022-12-14 03:10:46,424 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:46,425 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:46,436 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:46,436 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:46,483 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1099 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1099))))) is different from true [2022-12-14 03:10:46,498 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:46,498 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:46,509 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:46,510 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:46,561 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1100 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1100) |c_#length|)))) is different from true [2022-12-14 03:10:46,577 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:46,577 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:46,588 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:46,589 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:46,637 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1101 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1101) |c_#length|)))) is different from true [2022-12-14 03:10:46,649 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:46,649 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:46,658 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:46,658 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:46,671 INFO L134 CoverageAnalysis]: Checked inductivity of 277 backedges. 8 proven. 141 refuted. 0 times theorem prover too weak. 56 trivial. 72 not checked. [2022-12-14 03:10:46,671 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:10:46,959 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [2037623259] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 03:10:46,959 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1198507518] [2022-12-14 03:10:46,959 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 03:10:46,959 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 03:10:46,959 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 03:10:46,960 INFO L229 MonitoredProcess]: Starting monitored process 38 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 03:10:46,961 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Waiting until timeout for monitored process [2022-12-14 03:10:47,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 03:10:47,106 INFO L263 TraceCheckSpWp]: Trace formula consists of 306 conjuncts, 79 conjunts are in the unsatisfiable core [2022-12-14 03:10:47,109 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:10:47,122 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-12-14 03:10:47,127 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 03:10:47,189 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_1167 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1167) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-12-14 03:10:47,206 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:47,207 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:47,218 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:47,218 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:47,267 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1168 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1168) |c_#length|)))) is different from true [2022-12-14 03:10:47,281 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:47,281 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:47,289 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:47,290 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:47,351 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1169 (_ BitVec 1))) (= |c_#valid| (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_1169))) (exists ((v_ArrVal_1170 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1170) |c_#length|)))) is different from true [2022-12-14 03:10:47,387 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-12-14 03:10:47,388 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-12-14 03:10:47,392 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:47,448 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_1171 (_ BitVec 1))) (= |c_#valid| (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_1171))) (exists ((v_ArrVal_1172 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1172))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-12-14 03:10:47,483 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-12-14 03:10:47,483 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-12-14 03:10:47,490 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:47,558 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1174 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1174))) (exists ((v_ArrVal_1173 (_ BitVec 1))) (= |c_#valid| (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_1173))))) is different from true [2022-12-14 03:10:47,600 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-12-14 03:10:47,601 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-12-14 03:10:47,605 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:47,659 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1175 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1175))))) is different from true [2022-12-14 03:10:47,672 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:47,673 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:47,684 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:47,684 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:47,731 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1176 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1176) |c_#length|)))) is different from true [2022-12-14 03:10:47,743 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:47,743 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:47,751 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:47,752 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:47,810 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1177 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1177))))) is different from true [2022-12-14 03:10:47,824 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:47,825 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:47,836 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:47,836 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:47,846 INFO L134 CoverageAnalysis]: Checked inductivity of 277 backedges. 8 proven. 141 refuted. 0 times theorem prover too weak. 56 trivial. 72 not checked. [2022-12-14 03:10:47,846 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:10:50,186 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1198507518] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 03:10:50,186 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 03:10:50,187 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [30, 30, 27] total 46 [2022-12-14 03:10:50,187 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [553382161] [2022-12-14 03:10:50,187 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 03:10:50,187 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 47 states [2022-12-14 03:10:50,187 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-12-14 03:10:50,188 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 47 interpolants. [2022-12-14 03:10:50,188 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=127, Invalid=545, Unknown=24, NotChecked=1656, Total=2352 [2022-12-14 03:10:50,188 INFO L87 Difference]: Start difference. First operand 66 states and 88 transitions. Second operand has 47 states, 45 states have (on average 2.066666666666667) internal successors, (93), 46 states have internal predecessors, (93), 9 states have call successors, (9), 2 states have call predecessors, (9), 25 states have return successors, (25), 12 states have call predecessors, (25), 9 states have call successors, (25) [2022-12-14 03:10:54,572 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 03:10:54,572 INFO L93 Difference]: Finished difference Result 66 states and 87 transitions. [2022-12-14 03:10:54,572 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-12-14 03:10:54,573 INFO L78 Accepts]: Start accepts. Automaton has has 47 states, 45 states have (on average 2.066666666666667) internal successors, (93), 46 states have internal predecessors, (93), 9 states have call successors, (9), 2 states have call predecessors, (9), 25 states have return successors, (25), 12 states have call predecessors, (25), 9 states have call successors, (25) Word has length 80 [2022-12-14 03:10:54,573 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 03:10:54,573 INFO L225 Difference]: With dead ends: 66 [2022-12-14 03:10:54,574 INFO L226 Difference]: Without dead ends: 66 [2022-12-14 03:10:54,575 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 257 GetRequests, 197 SyntacticMatches, 2 SemanticMatches, 58 ConstructedPredicates, 24 IntricatePredicates, 0 DeprecatedPredicates, 114 ImplicationChecksByTransitivity, 6.5s TimeCoverageRelationStatistics Valid=195, Invalid=1137, Unknown=24, NotChecked=2184, Total=3540 [2022-12-14 03:10:54,575 INFO L413 NwaCegarLoop]: 26 mSDtfsCounter, 54 mSDsluCounter, 211 mSDsCounter, 0 mSdLazyCounter, 926 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 237 SdHoareTripleChecker+Invalid, 2665 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 926 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 1704 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2022-12-14 03:10:54,576 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [57 Valid, 237 Invalid, 2665 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 926 Invalid, 0 Unknown, 1704 Unchecked, 1.4s Time] [2022-12-14 03:10:54,576 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66 states. [2022-12-14 03:10:54,579 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66 to 66. [2022-12-14 03:10:54,580 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66 states, 51 states have (on average 1.0784313725490196) internal successors, (55), 53 states have internal predecessors, (55), 11 states have call successors, (11), 1 states have call predecessors, (11), 2 states have return successors, (21), 11 states have call predecessors, (21), 11 states have call successors, (21) [2022-12-14 03:10:54,580 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 87 transitions. [2022-12-14 03:10:54,580 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 87 transitions. Word has length 80 [2022-12-14 03:10:54,581 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 03:10:54,581 INFO L495 AbstractCegarLoop]: Abstraction has 66 states and 87 transitions. [2022-12-14 03:10:54,581 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 47 states, 45 states have (on average 2.066666666666667) internal successors, (93), 46 states have internal predecessors, (93), 9 states have call successors, (9), 2 states have call predecessors, (9), 25 states have return successors, (25), 12 states have call predecessors, (25), 9 states have call successors, (25) [2022-12-14 03:10:54,581 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 87 transitions. [2022-12-14 03:10:54,582 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-12-14 03:10:54,582 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 03:10:54,583 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 10, 9, 9, 9, 9, 8, 8, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 03:10:54,587 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (37)] Forceful destruction successful, exit code 0 [2022-12-14 03:10:54,800 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Forceful destruction successful, exit code 0 [2022-12-14 03:10:54,997 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (36)] Ended with exit code 0 [2022-12-14 03:10:55,184 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 37 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt,38 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,36 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-12-14 03:10:55,185 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-12-14 03:10:55,186 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 03:10:55,186 INFO L85 PathProgramCache]: Analyzing trace with hash 2110498800, now seen corresponding path program 8 times [2022-12-14 03:10:55,187 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-12-14 03:10:55,188 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2020621150] [2022-12-14 03:10:55,188 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-12-14 03:10:55,188 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-12-14 03:10:55,189 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat [2022-12-14 03:10:55,191 INFO L229 MonitoredProcess]: Starting monitored process 39 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-12-14 03:10:55,194 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (39)] Waiting until timeout for monitored process [2022-12-14 03:10:55,429 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-12-14 03:10:55,429 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 03:10:55,440 INFO L263 TraceCheckSpWp]: Trace formula consists of 341 conjuncts, 84 conjunts are in the unsatisfiable core [2022-12-14 03:10:55,444 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:10:55,461 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 03:10:55,467 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-12-14 03:10:55,651 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1251 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1251) |c_#length|)))) is different from true [2022-12-14 03:10:55,667 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:55,668 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:55,683 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:55,683 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:55,818 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1252 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1252))))) is different from true [2022-12-14 03:10:55,841 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:55,841 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:55,858 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:55,858 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:56,002 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1253 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1253) |c_#length|)))) is different from true [2022-12-14 03:10:56,018 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:56,019 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:56,032 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:56,032 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:56,182 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1254 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1254))))) is different from true [2022-12-14 03:10:56,201 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:56,201 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:56,214 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:56,215 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:56,382 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1255 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1255) |c_#length|)))) is different from true [2022-12-14 03:10:56,401 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:56,402 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:56,416 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:56,416 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:56,592 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_1256 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1256))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-12-14 03:10:56,608 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:56,609 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:56,624 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:56,624 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:56,789 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1257 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1257) |c_#length|)))) is different from true [2022-12-14 03:10:56,810 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:56,811 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:56,830 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:56,831 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:57,023 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1258 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1258) |c_#length|)))) is different from true [2022-12-14 03:10:57,044 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:57,045 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:57,063 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:57,064 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:57,261 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1259 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1259) |c_#length|)))) is different from true [2022-12-14 03:10:57,285 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:57,286 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:57,299 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:57,300 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:57,378 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 9 proven. 181 refuted. 0 times theorem prover too weak. 72 trivial. 90 not checked. [2022-12-14 03:10:57,378 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:10:58,072 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-12-14 03:10:58,072 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2020621150] [2022-12-14 03:10:58,072 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2020621150] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 03:10:58,073 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [584210744] [2022-12-14 03:10:58,073 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-12-14 03:10:58,073 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-12-14 03:10:58,073 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 [2022-12-14 03:10:58,074 INFO L229 MonitoredProcess]: Starting monitored process 40 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-12-14 03:10:58,075 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (40)] Waiting until timeout for monitored process [2022-12-14 03:10:58,432 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-12-14 03:10:58,433 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 03:10:58,453 INFO L263 TraceCheckSpWp]: Trace formula consists of 341 conjuncts, 85 conjunts are in the unsatisfiable core [2022-12-14 03:10:58,458 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:10:58,468 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 03:10:58,478 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-12-14 03:10:58,562 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1333 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1333) |c_#length|)))) is different from true [2022-12-14 03:10:58,578 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:58,578 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:58,590 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:58,591 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:58,671 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1334 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1334))))) is different from true [2022-12-14 03:10:58,688 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:58,688 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:58,701 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:58,701 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:58,784 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_1335 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1335) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-12-14 03:10:58,804 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:58,804 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:58,821 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:58,821 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:58,895 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1336 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1336))))) is different from true [2022-12-14 03:10:58,911 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:58,912 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:58,925 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:58,925 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:59,005 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1337 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1337) |c_#length|)))) is different from true [2022-12-14 03:10:59,023 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:59,024 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:59,041 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:59,041 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:59,119 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1338 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1338))))) is different from true [2022-12-14 03:10:59,138 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:59,139 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:59,155 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:59,155 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:59,229 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_1339 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1339) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-12-14 03:10:59,246 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:59,246 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:59,263 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:59,264 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:59,335 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1340 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1340) |c_#length|)))) is different from true [2022-12-14 03:10:59,352 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:59,353 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:59,370 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:59,370 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:59,451 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1341 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1341))))) is different from true [2022-12-14 03:10:59,470 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:10:59,470 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:10:59,483 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:10:59,483 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:10:59,499 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 9 proven. 181 refuted. 0 times theorem prover too weak. 72 trivial. 90 not checked. [2022-12-14 03:10:59,499 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:11:01,989 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [584210744] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 03:11:01,989 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [892292253] [2022-12-14 03:11:01,989 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-12-14 03:11:01,989 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 03:11:01,989 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 03:11:01,990 INFO L229 MonitoredProcess]: Starting monitored process 41 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 03:11:01,991 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (41)] Waiting until timeout for monitored process [2022-12-14 03:11:02,156 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-12-14 03:11:02,156 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 03:11:02,162 INFO L263 TraceCheckSpWp]: Trace formula consists of 341 conjuncts, 86 conjunts are in the unsatisfiable core [2022-12-14 03:11:02,166 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:11:02,175 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 03:11:02,181 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-12-14 03:11:02,262 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1415 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1415) |c_#length|)))) is different from true [2022-12-14 03:11:02,278 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:11:02,278 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:02,289 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:02,289 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:02,463 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:11:02,464 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:02,492 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-12-14 03:11:02,493 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-12-14 03:11:02,788 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1418 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1418) |c_#length|)))) is different from true [2022-12-14 03:11:02,811 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:11:02,812 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:02,842 INFO L321 Elim1Store]: treesize reduction 12, result has 42.9 percent of original size [2022-12-14 03:11:02,843 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 20 treesize of output 22 [2022-12-14 03:11:02,915 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1419 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1419) |c_#length|)))) is different from true [2022-12-14 03:11:02,930 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:11:02,931 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:02,950 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:02,951 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:03,022 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1420 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1420) |c_#length|)))) is different from true [2022-12-14 03:11:03,042 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:11:03,043 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:03,059 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:03,059 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:03,128 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1421 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1421) |c_#length|)))) is different from true [2022-12-14 03:11:03,145 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:11:03,146 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:03,166 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:03,166 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:03,245 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1422 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1422) |c_#length|)))) is different from true [2022-12-14 03:11:03,261 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:11:03,262 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:03,276 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:03,277 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:03,348 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_1423 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1423))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-12-14 03:11:03,365 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:11:03,366 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:03,381 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:03,381 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:03,456 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1424 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1424) |c_#length|)))) is different from true [2022-12-14 03:11:03,477 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:11:03,477 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:03,490 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:03,491 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:03,505 INFO L134 CoverageAnalysis]: Checked inductivity of 352 backedges. 9 proven. 183 refuted. 0 times theorem prover too weak. 72 trivial. 88 not checked. [2022-12-14 03:11:03,505 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:11:05,886 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [892292253] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 03:11:05,886 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 03:11:05,886 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [33, 33, 34] total 53 [2022-12-14 03:11:05,886 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2128995593] [2022-12-14 03:11:05,886 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 03:11:05,886 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 54 states [2022-12-14 03:11:05,886 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-12-14 03:11:05,887 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 54 interpolants. [2022-12-14 03:11:05,887 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=153, Invalid=795, Unknown=26, NotChecked=2106, Total=3080 [2022-12-14 03:11:05,887 INFO L87 Difference]: Start difference. First operand 66 states and 87 transitions. Second operand has 54 states, 52 states have (on average 1.9423076923076923) internal successors, (101), 53 states have internal predecessors, (101), 11 states have call successors, (11), 2 states have call predecessors, (11), 28 states have return successors, (28), 11 states have call predecessors, (28), 11 states have call successors, (28) [2022-12-14 03:11:10,527 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 03:11:10,527 INFO L93 Difference]: Finished difference Result 74 states and 96 transitions. [2022-12-14 03:11:10,528 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-12-14 03:11:10,528 INFO L78 Accepts]: Start accepts. Automaton has has 54 states, 52 states have (on average 1.9423076923076923) internal successors, (101), 53 states have internal predecessors, (101), 11 states have call successors, (11), 2 states have call predecessors, (11), 28 states have return successors, (28), 11 states have call predecessors, (28), 11 states have call successors, (28) Word has length 89 [2022-12-14 03:11:10,528 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 03:11:10,529 INFO L225 Difference]: With dead ends: 74 [2022-12-14 03:11:10,529 INFO L226 Difference]: Without dead ends: 74 [2022-12-14 03:11:10,530 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 287 GetRequests, 217 SyntacticMatches, 2 SemanticMatches, 68 ConstructedPredicates, 26 IntricatePredicates, 0 DeprecatedPredicates, 233 ImplicationChecksByTransitivity, 8.9s TimeCoverageRelationStatistics Valid=247, Invalid=1723, Unknown=26, NotChecked=2834, Total=4830 [2022-12-14 03:11:10,530 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 73 mSDsluCounter, 244 mSDsCounter, 0 mSdLazyCounter, 1126 mSolverCounterSat, 51 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 76 SdHoareTripleChecker+Valid, 272 SdHoareTripleChecker+Invalid, 3261 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 51 IncrementalHoareTripleChecker+Valid, 1126 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 2080 IncrementalHoareTripleChecker+Unchecked, 2.1s IncrementalHoareTripleChecker+Time [2022-12-14 03:11:10,530 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [76 Valid, 272 Invalid, 3261 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [51 Valid, 1126 Invalid, 4 Unknown, 2080 Unchecked, 2.1s Time] [2022-12-14 03:11:10,531 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 74 states. [2022-12-14 03:11:10,533 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 74 to 66. [2022-12-14 03:11:10,533 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66 states, 51 states have (on average 1.0588235294117647) internal successors, (54), 53 states have internal predecessors, (54), 11 states have call successors, (11), 1 states have call predecessors, (11), 2 states have return successors, (21), 11 states have call predecessors, (21), 11 states have call successors, (21) [2022-12-14 03:11:10,533 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 86 transitions. [2022-12-14 03:11:10,533 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 86 transitions. Word has length 89 [2022-12-14 03:11:10,533 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 03:11:10,534 INFO L495 AbstractCegarLoop]: Abstraction has 66 states and 86 transitions. [2022-12-14 03:11:10,534 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 54 states, 52 states have (on average 1.9423076923076923) internal successors, (101), 53 states have internal predecessors, (101), 11 states have call successors, (11), 2 states have call predecessors, (11), 28 states have return successors, (28), 11 states have call predecessors, (28), 11 states have call successors, (28) [2022-12-14 03:11:10,534 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 86 transitions. [2022-12-14 03:11:10,535 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2022-12-14 03:11:10,535 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 03:11:10,535 INFO L195 NwaCegarLoop]: trace histogram [11, 11, 11, 10, 10, 10, 10, 9, 9, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 03:11:10,545 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (39)] Ended with exit code 0 [2022-12-14 03:11:10,742 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (40)] Forceful destruction successful, exit code 0 [2022-12-14 03:11:10,946 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (41)] Ended with exit code 0 [2022-12-14 03:11:11,136 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 39 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,40 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt,41 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 03:11:11,137 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-12-14 03:11:11,138 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 03:11:11,138 INFO L85 PathProgramCache]: Analyzing trace with hash 1054496655, now seen corresponding path program 9 times [2022-12-14 03:11:11,139 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-12-14 03:11:11,140 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [497390843] [2022-12-14 03:11:11,140 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 03:11:11,140 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-12-14 03:11:11,141 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat [2022-12-14 03:11:11,142 INFO L229 MonitoredProcess]: Starting monitored process 42 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-12-14 03:11:11,143 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (42)] Waiting until timeout for monitored process [2022-12-14 03:11:11,688 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 11 check-sat command(s) [2022-12-14 03:11:11,688 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 03:11:11,701 INFO L263 TraceCheckSpWp]: Trace formula consists of 376 conjuncts, 93 conjunts are in the unsatisfiable core [2022-12-14 03:11:11,705 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:11:11,731 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 03:11:11,738 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-12-14 03:11:11,932 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1506 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1506))))) is different from true [2022-12-14 03:11:11,951 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:11:11,951 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:11,968 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:11,968 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:12,132 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1507 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1507) |c_#length|)))) is different from true [2022-12-14 03:11:12,154 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:11:12,155 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:12,174 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:12,174 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:12,351 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1508 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1508))))) is different from true [2022-12-14 03:11:12,374 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:11:12,375 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:12,387 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:12,387 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:12,547 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1509 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1509))))) is different from true [2022-12-14 03:11:12,575 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:11:12,576 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:12,588 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:12,589 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:12,758 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1510 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1510) |c_#length|)))) is different from true [2022-12-14 03:11:12,779 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:11:12,780 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:12,792 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:12,793 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:12,988 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1511 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1511))))) is different from true [2022-12-14 03:11:13,016 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:11:13,016 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:13,032 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:13,032 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:13,232 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1512 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1512) |c_#length|)))) is different from true [2022-12-14 03:11:13,250 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:11:13,251 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:13,272 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:13,273 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:13,503 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1513 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1513))))) is different from true [2022-12-14 03:11:13,521 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:11:13,522 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:13,539 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:13,539 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:13,739 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1514 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1514) |c_#length|)))) is different from true [2022-12-14 03:11:13,758 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:11:13,759 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:13,777 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:13,778 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:14,006 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_1515 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1515) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-12-14 03:11:14,025 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:11:14,026 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:14,040 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:14,041 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:14,132 INFO L134 CoverageAnalysis]: Checked inductivity of 436 backedges. 10 proven. 226 refuted. 0 times theorem prover too weak. 90 trivial. 110 not checked. [2022-12-14 03:11:14,132 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:11:20,825 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2022-12-14 03:11:20,825 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [497390843] [2022-12-14 03:11:20,825 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [497390843] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 03:11:20,825 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1912110184] [2022-12-14 03:11:20,825 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 03:11:20,826 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2022-12-14 03:11:20,826 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 [2022-12-14 03:11:20,827 INFO L229 MonitoredProcess]: Starting monitored process 43 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2022-12-14 03:11:20,827 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (43)] Waiting until timeout for monitored process [2022-12-14 03:11:21,803 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 11 check-sat command(s) [2022-12-14 03:11:21,803 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 03:11:21,832 INFO L263 TraceCheckSpWp]: Trace formula consists of 376 conjuncts, 110 conjunts are in the unsatisfiable core [2022-12-14 03:11:21,840 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:11:21,852 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-12-14 03:11:21,859 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 03:11:21,954 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_1597 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1597) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1598 (_ BitVec 1))) (= (store |c_old(#valid)| |ldv_malloc_#res.base| v_ArrVal_1598) |c_#valid|)))) is different from true [2022-12-14 03:11:22,021 INFO L321 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2022-12-14 03:11:22,021 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2022-12-14 03:11:22,032 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:22,270 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:22,271 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:22,279 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:22,476 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2022-12-14 03:11:22,733 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 03:11:22,739 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-12-14 03:11:31,063 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:31,063 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:31,073 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:31,382 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 4 [2022-12-14 03:11:31,442 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1605 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1605) |c_#length|)))) is different from true [2022-12-14 03:11:31,459 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:11:31,460 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:31,479 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:31,479 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:31,567 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1606 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1606))))) is different from true [2022-12-14 03:11:31,588 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:11:31,588 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:31,607 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:31,607 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:31,868 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| |c_ldv_malloc_#in~size|) |c_#length|)) is different from true [2022-12-14 03:11:31,902 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 03:11:31,902 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-12-14 03:11:32,464 INFO L321 Elim1Store]: treesize reduction 20, result has 57.4 percent of original size [2022-12-14 03:11:32,465 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 24 treesize of output 43 [2022-12-14 03:11:33,377 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:33,378 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:33,422 INFO L321 Elim1Store]: treesize reduction 19, result has 32.1 percent of original size [2022-12-14 03:11:33,422 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 17 treesize of output 26 [2022-12-14 03:11:33,748 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1612 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1612) |c_#length|)))) is different from true [2022-12-14 03:11:33,769 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:11:33,770 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:33,787 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:33,787 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:33,889 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1613 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1613) |c_#length|)))) is different from true [2022-12-14 03:11:33,913 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:11:33,914 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:33,935 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:33,936 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:33,958 INFO L134 CoverageAnalysis]: Checked inductivity of 436 backedges. 24 proven. 264 refuted. 12 times theorem prover too weak. 46 trivial. 90 not checked. [2022-12-14 03:11:33,959 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:11:36,498 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [1912110184] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 03:11:36,498 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [830698352] [2022-12-14 03:11:36,498 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 03:11:36,498 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 03:11:36,498 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 03:11:36,499 INFO L229 MonitoredProcess]: Starting monitored process 44 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 03:11:36,500 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (44)] Waiting until timeout for monitored process [2022-12-14 03:11:38,017 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 11 check-sat command(s) [2022-12-14 03:11:38,017 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 03:11:38,026 INFO L263 TraceCheckSpWp]: Trace formula consists of 376 conjuncts, 93 conjunts are in the unsatisfiable core [2022-12-14 03:11:38,032 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 03:11:38,042 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 03:11:38,053 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2022-12-14 03:11:38,153 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1695 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1695))))) is different from true [2022-12-14 03:11:38,172 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:11:38,173 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:38,185 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:38,186 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:38,282 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1696 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1696) |c_#length|)))) is different from true [2022-12-14 03:11:38,307 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:11:38,308 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:38,323 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:38,323 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:38,418 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_1697 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1697) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-12-14 03:11:38,442 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:11:38,442 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:38,455 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:38,455 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:38,528 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1698 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1698) |c_#length|)))) is different from true [2022-12-14 03:11:38,545 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:11:38,546 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:38,558 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:38,558 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:38,647 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1699 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1699) |c_#length|)))) is different from true [2022-12-14 03:11:38,669 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:11:38,670 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:38,681 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:38,681 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:38,757 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1700 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1700) |c_#length|)))) is different from true [2022-12-14 03:11:38,775 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:11:38,775 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:38,789 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:38,790 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:38,868 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_1701 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1701))) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-12-14 03:11:38,883 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:11:38,884 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:38,900 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:38,901 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:38,983 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1702 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1702) |c_#length|)))) is different from true [2022-12-14 03:11:39,002 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:11:39,002 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:39,015 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:39,015 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:39,096 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)) (exists ((v_ArrVal_1703 (_ BitVec 32))) (= |c_#length| (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1703))))) is different from true [2022-12-14 03:11:39,116 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:11:39,117 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:39,134 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:39,134 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:39,214 WARN L859 $PredicateComparison]: unable to prove that (exists ((|ldv_malloc_#res.base| (_ BitVec 32))) (and (exists ((v_ArrVal_1704 (_ BitVec 32))) (= (store |c_old(#length)| |ldv_malloc_#res.base| v_ArrVal_1704) |c_#length|)) (= (_ bv0 1) (select |c_old(#valid)| |ldv_malloc_#res.base|)))) is different from true [2022-12-14 03:11:39,230 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 03:11:39,231 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 03:11:39,247 INFO L321 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2022-12-14 03:11:39,247 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2022-12-14 03:11:39,266 INFO L134 CoverageAnalysis]: Checked inductivity of 436 backedges. 10 proven. 226 refuted. 0 times theorem prover too weak. 90 trivial. 110 not checked. [2022-12-14 03:11:39,267 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 03:11:39,837 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [830698352] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 03:11:39,837 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 03:11:39,837 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [36, 45, 36] total 72 [2022-12-14 03:11:39,837 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1321273839] [2022-12-14 03:11:39,837 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 03:11:39,837 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 73 states [2022-12-14 03:11:39,837 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2022-12-14 03:11:39,838 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 73 interpolants. [2022-12-14 03:11:39,839 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=224, Invalid=2202, Unknown=30, NotChecked=3094, Total=5550 [2022-12-14 03:11:39,839 INFO L87 Difference]: Start difference. First operand 66 states and 86 transitions. Second operand has 73 states, 71 states have (on average 1.8028169014084507) internal successors, (128), 67 states have internal predecessors, (128), 15 states have call successors, (15), 4 states have call predecessors, (15), 30 states have return successors, (31), 17 states have call predecessors, (31), 15 states have call successors, (31) [2022-12-14 03:11:41,946 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-12-14 03:11:43,978 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-12-14 03:11:48,082 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-12-14 03:11:55,598 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-12-14 03:11:57,612 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-12-14 03:11:59,620 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-12-14 03:12:01,992 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-12-14 03:12:04,356 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-12-14 03:12:21,127 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-12-14 03:12:23,310 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-12-14 03:12:25,719 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-12-14 03:12:28,174 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-12-14 03:12:30,721 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-12-14 03:12:32,907 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-12-14 03:12:35,623 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-12-14 03:12:37,949 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-12-14 03:12:39,953 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-12-14 03:12:42,802 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-12-14 03:12:45,369 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-12-14 03:12:47,710 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-12-14 03:12:47,973 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 03:12:47,974 INFO L93 Difference]: Finished difference Result 110 states and 139 transitions. [2022-12-14 03:12:47,974 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2022-12-14 03:12:47,974 INFO L78 Accepts]: Start accepts. Automaton has has 73 states, 71 states have (on average 1.8028169014084507) internal successors, (128), 67 states have internal predecessors, (128), 15 states have call successors, (15), 4 states have call predecessors, (15), 30 states have return successors, (31), 17 states have call predecessors, (31), 15 states have call successors, (31) Word has length 98 [2022-12-14 03:12:47,975 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 03:12:47,975 INFO L225 Difference]: With dead ends: 110 [2022-12-14 03:12:47,978 INFO L226 Difference]: Without dead ends: 110 [2022-12-14 03:12:47,980 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 329 GetRequests, 224 SyntacticMatches, 3 SemanticMatches, 102 ConstructedPredicates, 26 IntricatePredicates, 0 DeprecatedPredicates, 1327 ImplicationChecksByTransitivity, 44.1s TimeCoverageRelationStatistics Valid=476, Invalid=5600, Unknown=34, NotChecked=4602, Total=10712 [2022-12-14 03:12:47,980 INFO L413 NwaCegarLoop]: 30 mSDtfsCounter, 111 mSDsluCounter, 413 mSDsCounter, 0 mSdLazyCounter, 2465 mSolverCounterSat, 86 mSolverCounterUnsat, 55 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 44.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 114 SdHoareTripleChecker+Valid, 443 SdHoareTripleChecker+Invalid, 5618 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 86 IncrementalHoareTripleChecker+Valid, 2465 IncrementalHoareTripleChecker+Invalid, 55 IncrementalHoareTripleChecker+Unknown, 3012 IncrementalHoareTripleChecker+Unchecked, 45.1s IncrementalHoareTripleChecker+Time [2022-12-14 03:12:47,981 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [114 Valid, 443 Invalid, 5618 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [86 Valid, 2465 Invalid, 55 Unknown, 3012 Unchecked, 45.1s Time] [2022-12-14 03:12:47,981 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 110 states. [2022-12-14 03:12:47,983 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 110 to 78. [2022-12-14 03:12:47,984 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 60 states have (on average 1.0666666666666667) internal successors, (64), 62 states have internal predecessors, (64), 13 states have call successors, (13), 2 states have call predecessors, (13), 3 states have return successors, (24), 13 states have call predecessors, (24), 13 states have call successors, (24) [2022-12-14 03:12:47,984 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 101 transitions. [2022-12-14 03:12:47,984 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 101 transitions. Word has length 98 [2022-12-14 03:12:47,984 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 03:12:47,984 INFO L495 AbstractCegarLoop]: Abstraction has 78 states and 101 transitions. [2022-12-14 03:12:47,985 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 73 states, 71 states have (on average 1.8028169014084507) internal successors, (128), 67 states have internal predecessors, (128), 15 states have call successors, (15), 4 states have call predecessors, (15), 30 states have return successors, (31), 17 states have call predecessors, (31), 15 states have call successors, (31) [2022-12-14 03:12:47,985 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 101 transitions. [2022-12-14 03:12:47,985 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 103 [2022-12-14 03:12:47,985 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 03:12:47,986 INFO L195 NwaCegarLoop]: trace histogram [11, 11, 11, 10, 10, 10, 10, 10, 10, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 03:12:47,997 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (42)] Ended with exit code 0 [2022-12-14 03:12:48,203 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt (43)] Forceful destruction successful, exit code 0 [2022-12-14 03:12:48,414 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (44)] Ended with exit code 0 [2022-12-14 03:12:48,587 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 42 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,43 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/cvc4 --incremental --print-success --lang smt,44 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 03:12:48,588 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK] === [2022-12-14 03:12:48,589 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 03:12:48,590 INFO L85 PathProgramCache]: Analyzing trace with hash 329760614, now seen corresponding path program 3 times [2022-12-14 03:12:48,590 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2022-12-14 03:12:48,590 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [353747713] [2022-12-14 03:12:48,590 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 03:12:48,590 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-12-14 03:12:48,590 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat [2022-12-14 03:12:48,591 INFO L229 MonitoredProcess]: Starting monitored process 45 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-12-14 03:12:48,592 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (45)] Waiting until timeout for monitored process [2022-12-14 03:12:49,267 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 11 check-sat command(s) [2022-12-14 03:12:49,268 INFO L229 tOrderPrioritization]: Conjunction of SSA is sat [2022-12-14 03:12:49,268 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-14 03:12:49,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-14 03:12:49,639 INFO L130 FreeRefinementEngine]: Strategy WALRUS found a feasible trace [2022-12-14 03:12:49,640 INFO L360 BasicCegarLoop]: Counterexample is feasible [2022-12-14 03:12:49,641 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location ULTIMATE.startErr2ASSERT_VIOLATIONMEMORY_LEAK (2 of 3 remaining) [2022-12-14 03:12:49,642 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE (1 of 3 remaining) [2022-12-14 03:12:49,642 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE (0 of 3 remaining) [2022-12-14 03:12:49,654 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (45)] Ended with exit code 0 [2022-12-14 03:12:49,843 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 45 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f56f9b2f-992f-46af-a94d-d404c04e0df8/bin/utaipan-gh47qXpMRh/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2022-12-14 03:12:49,851 INFO L445 BasicCegarLoop]: Path program histogram: [9, 3, 1, 1, 1, 1, 1, 1] [2022-12-14 03:12:49,861 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-12-14 03:12:49,928 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 14.12 03:12:49 BoogieIcfgContainer [2022-12-14 03:12:49,928 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-12-14 03:12:49,928 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-12-14 03:12:49,928 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-12-14 03:12:49,929 INFO L275 PluginConnector]: Witness Printer initialized [2022-12-14 03:12:49,929 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 03:09:24" (3/4) ... [2022-12-14 03:12:49,932 INFO L140 WitnessPrinter]: No result that supports witness generation found [2022-12-14 03:12:49,932 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-12-14 03:12:49,932 INFO L158 Benchmark]: Toolchain (without parser) took 205763.18ms. Allocated memory was 81.8MB in the beginning and 98.6MB in the end (delta: 16.8MB). Free memory was 58.6MB in the beginning and 25.8MB in the end (delta: 32.8MB). Peak memory consumption was 52.0MB. Max. memory is 16.1GB. [2022-12-14 03:12:49,932 INFO L158 Benchmark]: CDTParser took 0.13ms. Allocated memory is still 54.5MB. Free memory is still 33.4MB. There was no memory consumed. Max. memory is 16.1GB. [2022-12-14 03:12:49,933 INFO L158 Benchmark]: CACSL2BoogieTranslator took 407.48ms. Allocated memory is still 81.8MB. Free memory was 58.4MB in the beginning and 51.7MB in the end (delta: 6.7MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2022-12-14 03:12:49,933 INFO L158 Benchmark]: Boogie Procedure Inliner took 31.52ms. Allocated memory is still 81.8MB. Free memory was 51.7MB in the beginning and 49.5MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-12-14 03:12:49,933 INFO L158 Benchmark]: Boogie Preprocessor took 18.28ms. Allocated memory is still 81.8MB. Free memory was 49.5MB in the beginning and 47.9MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-12-14 03:12:49,933 INFO L158 Benchmark]: RCFGBuilder took 275.31ms. Allocated memory was 81.8MB in the beginning and 98.6MB in the end (delta: 16.8MB). Free memory was 47.9MB in the beginning and 76.4MB in the end (delta: -28.5MB). Peak memory consumption was 16.1MB. Max. memory is 16.1GB. [2022-12-14 03:12:49,933 INFO L158 Benchmark]: TraceAbstraction took 205022.09ms. Allocated memory is still 98.6MB. Free memory was 75.5MB in the beginning and 25.8MB in the end (delta: 49.7MB). Peak memory consumption was 50.8MB. Max. memory is 16.1GB. [2022-12-14 03:12:49,933 INFO L158 Benchmark]: Witness Printer took 3.60ms. Allocated memory is still 98.6MB. Free memory is still 25.8MB. There was no memory consumed. Max. memory is 16.1GB. [2022-12-14 03:12:49,934 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.13ms. Allocated memory is still 54.5MB. Free memory is still 33.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 407.48ms. Allocated memory is still 81.8MB. Free memory was 58.4MB in the beginning and 51.7MB in the end (delta: 6.7MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 31.52ms. Allocated memory is still 81.8MB. Free memory was 51.7MB in the beginning and 49.5MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 18.28ms. Allocated memory is still 81.8MB. Free memory was 49.5MB in the beginning and 47.9MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 275.31ms. Allocated memory was 81.8MB in the beginning and 98.6MB in the end (delta: 16.8MB). Free memory was 47.9MB in the beginning and 76.4MB in the end (delta: -28.5MB). Peak memory consumption was 16.1MB. Max. memory is 16.1GB. * TraceAbstraction took 205022.09ms. Allocated memory is still 98.6MB. Free memory was 75.5MB in the beginning and 25.8MB in the end (delta: 49.7MB). Peak memory consumption was 50.8MB. Max. memory is 16.1GB. * Witness Printer took 3.60ms. Allocated memory is still 98.6MB. Free memory is still 25.8MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 772]: Unable to prove that all allocated memory was freed Unable to prove that all allocated memory was freed Reason: overapproximation of memtrack at line 772. Possible FailurePath: [L569] struct ldv_list_head ldv_global_msg_list = { &(ldv_global_msg_list), &(ldv_global_msg_list) }; VAL [ldv_global_msg_list={1:0}] [L773] CALL entry_point() [L761] int len = 10; VAL [ldv_global_msg_list={1:0}, len=10] [L762] CALL, EXPR ldv_malloc(sizeof(struct A18*)*len) VAL [\old(size)=40, ldv_global_msg_list={1:0}] [L526] COND TRUE __VERIFIER_nondet_int() [L527] return malloc(size); [L762] RET, EXPR ldv_malloc(sizeof(struct A18*)*len) VAL [ldv_global_msg_list={1:0}, ldv_malloc(sizeof(struct A18*)*len)={27:0}, len=10] [L762] struct A18 **array = (struct A18 **)ldv_malloc(sizeof(struct A18*)*len); [L763] struct A18 *p; [L764] int i=0; VAL [array={27:0}, i=0, ldv_global_msg_list={1:0}, len=10] [L765] COND FALSE !(!array) VAL [array={27:0}, i=0, ldv_global_msg_list={1:0}, len=10] [L766] COND TRUE i