./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/memsafety/test-0235-1.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/memsafety/test-0235-1.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 6e8dd9d71aae7a8c83467a9093ad4bffb4ddd59cddc2d90362f34ff651f24f9a --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-14 14:01:05,776 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-14 14:01:05,778 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-14 14:01:05,791 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-14 14:01:05,791 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-14 14:01:05,792 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-14 14:01:05,793 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-14 14:01:05,794 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-14 14:01:05,794 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-14 14:01:05,795 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-14 14:01:05,796 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-14 14:01:05,796 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-14 14:01:05,796 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-14 14:01:05,797 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-14 14:01:05,798 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-14 14:01:05,798 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-14 14:01:05,799 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-14 14:01:05,799 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-14 14:01:05,800 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-14 14:01:05,801 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-14 14:01:05,802 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-14 14:01:05,803 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-14 14:01:05,804 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-14 14:01:05,805 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-14 14:01:05,807 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-14 14:01:05,807 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-14 14:01:05,807 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-14 14:01:05,808 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-14 14:01:05,808 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-14 14:01:05,808 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-14 14:01:05,809 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-14 14:01:05,809 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-14 14:01:05,810 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-14 14:01:05,810 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-14 14:01:05,811 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-14 14:01:05,811 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-14 14:01:05,811 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-14 14:01:05,811 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-14 14:01:05,812 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-14 14:01:05,812 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-14 14:01:05,813 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-14 14:01:05,813 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf [2022-12-14 14:01:05,827 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-14 14:01:05,828 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-14 14:01:05,828 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-14 14:01:05,828 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-14 14:01:05,828 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-12-14 14:01:05,828 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-12-14 14:01:05,829 INFO L138 SettingsManager]: * User list type=DISABLED [2022-12-14 14:01:05,829 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-12-14 14:01:05,829 INFO L138 SettingsManager]: * Explicit value domain=true [2022-12-14 14:01:05,829 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-12-14 14:01:05,829 INFO L138 SettingsManager]: * Octagon Domain=false [2022-12-14 14:01:05,829 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-12-14 14:01:05,829 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-12-14 14:01:05,829 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-12-14 14:01:05,829 INFO L138 SettingsManager]: * Interval Domain=false [2022-12-14 14:01:05,829 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-12-14 14:01:05,829 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-12-14 14:01:05,830 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-12-14 14:01:05,830 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-12-14 14:01:05,830 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-12-14 14:01:05,830 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-14 14:01:05,830 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-14 14:01:05,830 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-12-14 14:01:05,831 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-14 14:01:05,831 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-14 14:01:05,831 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-14 14:01:05,831 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-12-14 14:01:05,831 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-12-14 14:01:05,831 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-12-14 14:01:05,831 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-12-14 14:01:05,831 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-12-14 14:01:05,831 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-14 14:01:05,831 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-14 14:01:05,832 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-14 14:01:05,832 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-12-14 14:01:05,832 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 14:01:05,832 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-14 14:01:05,832 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-12-14 14:01:05,832 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-12-14 14:01:05,832 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-12-14 14:01:05,832 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-12-14 14:01:05,832 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-12-14 14:01:05,832 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 6e8dd9d71aae7a8c83467a9093ad4bffb4ddd59cddc2d90362f34ff651f24f9a [2022-12-14 14:01:06,037 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-14 14:01:06,053 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-14 14:01:06,055 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-14 14:01:06,056 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-14 14:01:06,056 INFO L275 PluginConnector]: CDTParser initialized [2022-12-14 14:01:06,057 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/../../sv-benchmarks/c/memsafety/test-0235-1.i [2022-12-14 14:01:08,736 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-14 14:01:08,904 INFO L351 CDTParser]: Found 1 translation units. [2022-12-14 14:01:08,904 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/sv-benchmarks/c/memsafety/test-0235-1.i [2022-12-14 14:01:08,915 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/data/f89c0518a/0ff2b14a06ca471bbfa82733725cbdf8/FLAG2870516d4 [2022-12-14 14:01:08,926 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/data/f89c0518a/0ff2b14a06ca471bbfa82733725cbdf8 [2022-12-14 14:01:08,928 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-14 14:01:08,929 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-14 14:01:08,930 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-14 14:01:08,930 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-14 14:01:08,933 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-14 14:01:08,933 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 02:01:08" (1/1) ... [2022-12-14 14:01:08,934 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1a21367c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 02:01:08, skipping insertion in model container [2022-12-14 14:01:08,934 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 02:01:08" (1/1) ... [2022-12-14 14:01:08,941 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-14 14:01:08,966 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-14 14:01:09,185 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 14:01:09,194 INFO L203 MainTranslator]: Completed pre-run [2022-12-14 14:01:09,222 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 14:01:09,243 INFO L208 MainTranslator]: Completed translation [2022-12-14 14:01:09,243 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 02:01:09 WrapperNode [2022-12-14 14:01:09,244 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-14 14:01:09,244 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-14 14:01:09,244 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-14 14:01:09,244 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-14 14:01:09,249 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 02:01:09" (1/1) ... [2022-12-14 14:01:09,260 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 02:01:09" (1/1) ... [2022-12-14 14:01:09,277 INFO L138 Inliner]: procedures = 188, calls = 69, calls flagged for inlining = 13, calls inlined = 13, statements flattened = 234 [2022-12-14 14:01:09,278 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-14 14:01:09,278 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-14 14:01:09,278 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-14 14:01:09,278 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-14 14:01:09,285 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 02:01:09" (1/1) ... [2022-12-14 14:01:09,285 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 02:01:09" (1/1) ... [2022-12-14 14:01:09,288 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 02:01:09" (1/1) ... [2022-12-14 14:01:09,288 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 02:01:09" (1/1) ... [2022-12-14 14:01:09,294 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 02:01:09" (1/1) ... [2022-12-14 14:01:09,298 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 02:01:09" (1/1) ... [2022-12-14 14:01:09,299 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 02:01:09" (1/1) ... [2022-12-14 14:01:09,301 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 02:01:09" (1/1) ... [2022-12-14 14:01:09,303 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-14 14:01:09,304 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-14 14:01:09,304 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-14 14:01:09,304 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-14 14:01:09,304 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 02:01:09" (1/1) ... [2022-12-14 14:01:09,309 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 14:01:09,316 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:01:09,326 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-12-14 14:01:09,328 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-12-14 14:01:09,353 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-12-14 14:01:09,353 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-12-14 14:01:09,353 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-12-14 14:01:09,353 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-12-14 14:01:09,353 INFO L130 BoogieDeclarations]: Found specification of procedure zalloc_or_die [2022-12-14 14:01:09,353 INFO L138 BoogieDeclarations]: Found implementation of procedure zalloc_or_die [2022-12-14 14:01:09,353 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-12-14 14:01:09,354 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-12-14 14:01:09,354 INFO L130 BoogieDeclarations]: Found specification of procedure l0_destroy [2022-12-14 14:01:09,354 INFO L138 BoogieDeclarations]: Found implementation of procedure l0_destroy [2022-12-14 14:01:09,354 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-12-14 14:01:09,354 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-14 14:01:09,354 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-14 14:01:09,447 INFO L235 CfgBuilder]: Building ICFG [2022-12-14 14:01:09,449 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-14 14:01:09,889 INFO L276 CfgBuilder]: Performing block encoding [2022-12-14 14:01:09,948 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-14 14:01:09,949 INFO L300 CfgBuilder]: Removed 10 assume(true) statements. [2022-12-14 14:01:09,951 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 02:01:09 BoogieIcfgContainer [2022-12-14 14:01:09,952 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-14 14:01:09,955 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-12-14 14:01:09,955 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-12-14 14:01:09,958 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-12-14 14:01:09,958 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 14.12 02:01:08" (1/3) ... [2022-12-14 14:01:09,959 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@27a172a6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 02:01:09, skipping insertion in model container [2022-12-14 14:01:09,959 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 02:01:09" (2/3) ... [2022-12-14 14:01:09,959 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@27a172a6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 02:01:09, skipping insertion in model container [2022-12-14 14:01:09,960 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 02:01:09" (3/3) ... [2022-12-14 14:01:09,961 INFO L112 eAbstractionObserver]: Analyzing ICFG test-0235-1.i [2022-12-14 14:01:09,981 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-12-14 14:01:09,981 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 85 error locations. [2022-12-14 14:01:10,028 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-12-14 14:01:10,032 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@39f547c3, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-12-14 14:01:10,033 INFO L358 AbstractCegarLoop]: Starting to check reachability of 85 error locations. [2022-12-14 14:01:10,036 INFO L276 IsEmpty]: Start isEmpty. Operand has 201 states, 102 states have (on average 2.1372549019607843) internal successors, (218), 187 states have internal predecessors, (218), 11 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (11), 11 states have call predecessors, (11), 11 states have call successors, (11) [2022-12-14 14:01:10,040 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-12-14 14:01:10,040 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:01:10,041 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-12-14 14:01:10,041 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr32REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 82 more)] === [2022-12-14 14:01:10,045 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:01:10,045 INFO L85 PathProgramCache]: Analyzing trace with hash 450579, now seen corresponding path program 1 times [2022-12-14 14:01:10,052 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:01:10,052 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [272533529] [2022-12-14 14:01:10,052 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:01:10,052 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:01:10,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:01:10,144 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 14:01:10,144 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:01:10,145 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [272533529] [2022-12-14 14:01:10,145 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [272533529] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 14:01:10,145 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 14:01:10,146 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-14 14:01:10,147 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1086630009] [2022-12-14 14:01:10,147 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 14:01:10,150 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-12-14 14:01:10,151 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:01:10,172 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-12-14 14:01:10,172 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-14 14:01:10,174 INFO L87 Difference]: Start difference. First operand has 201 states, 102 states have (on average 2.1372549019607843) internal successors, (218), 187 states have internal predecessors, (218), 11 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (11), 11 states have call predecessors, (11), 11 states have call successors, (11) Second operand has 2 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:01:10,246 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:01:10,247 INFO L93 Difference]: Finished difference Result 201 states and 230 transitions. [2022-12-14 14:01:10,248 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-12-14 14:01:10,249 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-12-14 14:01:10,249 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:01:10,255 INFO L225 Difference]: With dead ends: 201 [2022-12-14 14:01:10,255 INFO L226 Difference]: Without dead ends: 200 [2022-12-14 14:01:10,256 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-14 14:01:10,258 INFO L413 NwaCegarLoop]: 206 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 24 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 206 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 24 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 14:01:10,259 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 206 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 24 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 14:01:10,271 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 200 states. [2022-12-14 14:01:10,288 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 200 to 200. [2022-12-14 14:01:10,289 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 200 states, 102 states have (on average 2.0294117647058822) internal successors, (207), 186 states have internal predecessors, (207), 11 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (11), 11 states have call predecessors, (11), 11 states have call successors, (11) [2022-12-14 14:01:10,291 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 200 states to 200 states and 229 transitions. [2022-12-14 14:01:10,292 INFO L78 Accepts]: Start accepts. Automaton has 200 states and 229 transitions. Word has length 3 [2022-12-14 14:01:10,292 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:01:10,293 INFO L495 AbstractCegarLoop]: Abstraction has 200 states and 229 transitions. [2022-12-14 14:01:10,293 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:01:10,293 INFO L276 IsEmpty]: Start isEmpty. Operand 200 states and 229 transitions. [2022-12-14 14:01:10,293 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-12-14 14:01:10,293 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:01:10,293 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-12-14 14:01:10,293 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-12-14 14:01:10,294 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting zalloc_or_dieErr0ASSERT_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 82 more)] === [2022-12-14 14:01:10,294 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:01:10,294 INFO L85 PathProgramCache]: Analyzing trace with hash 429096002, now seen corresponding path program 1 times [2022-12-14 14:01:10,294 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:01:10,294 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2009239900] [2022-12-14 14:01:10,295 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:01:10,295 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:01:10,305 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-12-14 14:01:10,305 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [173462252] [2022-12-14 14:01:10,306 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:01:10,306 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:01:10,306 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:01:10,307 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:01:10,308 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-12-14 14:01:10,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:01:10,376 INFO L263 TraceCheckSpWp]: Trace formula consists of 85 conjuncts, 6 conjunts are in the unsatisfiable core [2022-12-14 14:01:10,381 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:01:10,432 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 14:01:10,442 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 14:01:10,442 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 14:01:10,442 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:01:10,442 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2009239900] [2022-12-14 14:01:10,443 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-12-14 14:01:10,443 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [173462252] [2022-12-14 14:01:10,443 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [173462252] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 14:01:10,443 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 14:01:10,443 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-14 14:01:10,444 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2128108744] [2022-12-14 14:01:10,444 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 14:01:10,445 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 14:01:10,445 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:01:10,446 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 14:01:10,446 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 14:01:10,446 INFO L87 Difference]: Start difference. First operand 200 states and 229 transitions. Second operand has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:01:10,588 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:01:10,588 INFO L93 Difference]: Finished difference Result 199 states and 228 transitions. [2022-12-14 14:01:10,588 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 14:01:10,588 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-12-14 14:01:10,589 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:01:10,590 INFO L225 Difference]: With dead ends: 199 [2022-12-14 14:01:10,590 INFO L226 Difference]: Without dead ends: 199 [2022-12-14 14:01:10,590 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 14:01:10,592 INFO L413 NwaCegarLoop]: 201 mSDtfsCounter, 5 mSDsluCounter, 138 mSDsCounter, 0 mSdLazyCounter, 111 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5 SdHoareTripleChecker+Valid, 339 SdHoareTripleChecker+Invalid, 111 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 111 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 14:01:10,592 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [5 Valid, 339 Invalid, 111 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 111 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 14:01:10,593 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 199 states. [2022-12-14 14:01:10,604 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 199 to 199. [2022-12-14 14:01:10,604 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 199 states, 102 states have (on average 2.019607843137255) internal successors, (206), 185 states have internal predecessors, (206), 11 states have call successors, (11), 2 states have call predecessors, (11), 2 states have return successors, (11), 11 states have call predecessors, (11), 11 states have call successors, (11) [2022-12-14 14:01:10,607 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 199 states to 199 states and 228 transitions. [2022-12-14 14:01:10,608 INFO L78 Accepts]: Start accepts. Automaton has 199 states and 228 transitions. Word has length 5 [2022-12-14 14:01:10,608 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:01:10,608 INFO L495 AbstractCegarLoop]: Abstraction has 199 states and 228 transitions. [2022-12-14 14:01:10,608 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:01:10,609 INFO L276 IsEmpty]: Start isEmpty. Operand 199 states and 228 transitions. [2022-12-14 14:01:10,609 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-12-14 14:01:10,609 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:01:10,609 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1] [2022-12-14 14:01:10,615 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-12-14 14:01:10,810 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:01:10,811 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting zalloc_or_dieErr1ASSERT_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 82 more)] === [2022-12-14 14:01:10,813 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:01:10,814 INFO L85 PathProgramCache]: Analyzing trace with hash 417074595, now seen corresponding path program 1 times [2022-12-14 14:01:10,815 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:01:10,816 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [914648923] [2022-12-14 14:01:10,816 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:01:10,817 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:01:10,865 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-12-14 14:01:10,866 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1181577899] [2022-12-14 14:01:10,867 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:01:10,868 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:01:10,869 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:01:10,872 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:01:10,875 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-12-14 14:01:11,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:01:11,012 INFO L263 TraceCheckSpWp]: Trace formula consists of 87 conjuncts, 20 conjunts are in the unsatisfiable core [2022-12-14 14:01:11,015 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:01:11,052 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-12-14 14:01:11,072 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 14:01:11,072 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 14:01:11,072 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:01:11,072 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [914648923] [2022-12-14 14:01:11,073 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-12-14 14:01:11,073 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1181577899] [2022-12-14 14:01:11,073 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1181577899] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 14:01:11,073 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 14:01:11,073 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 14:01:11,073 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [676038478] [2022-12-14 14:01:11,074 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 14:01:11,074 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 14:01:11,074 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:01:11,075 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 14:01:11,075 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 14:01:11,075 INFO L87 Difference]: Start difference. First operand 199 states and 228 transitions. Second operand has 4 states, 3 states have (on average 1.6666666666666667) internal successors, (5), 3 states have internal predecessors, (5), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:01:11,239 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:01:11,239 INFO L93 Difference]: Finished difference Result 204 states and 233 transitions. [2022-12-14 14:01:11,239 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-14 14:01:11,239 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 1.6666666666666667) internal successors, (5), 3 states have internal predecessors, (5), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-12-14 14:01:11,240 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:01:11,241 INFO L225 Difference]: With dead ends: 204 [2022-12-14 14:01:11,241 INFO L226 Difference]: Without dead ends: 204 [2022-12-14 14:01:11,241 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-12-14 14:01:11,242 INFO L413 NwaCegarLoop]: 196 mSDtfsCounter, 8 mSDsluCounter, 345 mSDsCounter, 0 mSdLazyCounter, 138 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 541 SdHoareTripleChecker+Invalid, 142 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 138 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 14:01:11,243 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [8 Valid, 541 Invalid, 142 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 138 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 14:01:11,244 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 204 states. [2022-12-14 14:01:11,255 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 204 to 204. [2022-12-14 14:01:11,255 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 204 states, 106 states have (on average 1.990566037735849) internal successors, (211), 189 states have internal predecessors, (211), 11 states have call successors, (11), 3 states have call predecessors, (11), 3 states have return successors, (11), 11 states have call predecessors, (11), 11 states have call successors, (11) [2022-12-14 14:01:11,258 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 204 states to 204 states and 233 transitions. [2022-12-14 14:01:11,258 INFO L78 Accepts]: Start accepts. Automaton has 204 states and 233 transitions. Word has length 6 [2022-12-14 14:01:11,258 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:01:11,258 INFO L495 AbstractCegarLoop]: Abstraction has 204 states and 233 transitions. [2022-12-14 14:01:11,259 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 1.6666666666666667) internal successors, (5), 3 states have internal predecessors, (5), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:01:11,259 INFO L276 IsEmpty]: Start isEmpty. Operand 204 states and 233 transitions. [2022-12-14 14:01:11,260 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-12-14 14:01:11,260 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:01:11,260 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:01:11,265 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-12-14 14:01:11,461 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:01:11,461 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting zalloc_or_dieErr1ASSERT_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 82 more)] === [2022-12-14 14:01:11,462 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:01:11,462 INFO L85 PathProgramCache]: Analyzing trace with hash -1974734944, now seen corresponding path program 1 times [2022-12-14 14:01:11,462 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:01:11,462 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [700745888] [2022-12-14 14:01:11,462 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:01:11,463 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:01:11,486 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-12-14 14:01:11,487 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [102056668] [2022-12-14 14:01:11,487 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:01:11,487 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:01:11,487 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:01:11,488 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:01:11,489 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-12-14 14:01:11,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:01:11,623 INFO L263 TraceCheckSpWp]: Trace formula consists of 499 conjuncts, 17 conjunts are in the unsatisfiable core [2022-12-14 14:01:11,627 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:01:11,684 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 14:01:11,766 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2022-12-14 14:01:11,875 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 23 proven. 0 refuted. 0 times theorem prover too weak. 42 trivial. 0 not checked. [2022-12-14 14:01:11,875 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 14:01:11,876 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:01:11,876 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [700745888] [2022-12-14 14:01:11,876 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-12-14 14:01:11,876 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [102056668] [2022-12-14 14:01:11,876 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [102056668] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 14:01:11,876 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 14:01:11,877 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-14 14:01:11,877 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1754468813] [2022-12-14 14:01:11,877 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 14:01:11,877 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 14:01:11,878 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:01:11,878 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 14:01:11,879 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-14 14:01:11,879 INFO L87 Difference]: Start difference. First operand 204 states and 233 transitions. Second operand has 5 states, 4 states have (on average 5.0) internal successors, (20), 5 states have internal predecessors, (20), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 1 states have call predecessors, (5), 2 states have call successors, (5) [2022-12-14 14:01:13,960 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:01:18,102 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:01:20,348 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:01:22,994 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:01:23,082 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:01:23,083 INFO L93 Difference]: Finished difference Result 208 states and 237 transitions. [2022-12-14 14:01:23,083 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 14:01:23,083 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 5.0) internal successors, (20), 5 states have internal predecessors, (20), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 1 states have call predecessors, (5), 2 states have call successors, (5) Word has length 45 [2022-12-14 14:01:23,083 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:01:23,084 INFO L225 Difference]: With dead ends: 208 [2022-12-14 14:01:23,084 INFO L226 Difference]: Without dead ends: 206 [2022-12-14 14:01:23,084 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 46 GetRequests, 41 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 2.1s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-12-14 14:01:23,085 INFO L413 NwaCegarLoop]: 195 mSDtfsCounter, 7 mSDsluCounter, 521 mSDsCounter, 0 mSdLazyCounter, 186 mSolverCounterSat, 5 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7 SdHoareTripleChecker+Valid, 716 SdHoareTripleChecker+Invalid, 195 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 186 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.1s IncrementalHoareTripleChecker+Time [2022-12-14 14:01:23,085 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [7 Valid, 716 Invalid, 195 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 186 Invalid, 4 Unknown, 0 Unchecked, 9.1s Time] [2022-12-14 14:01:23,086 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 206 states. [2022-12-14 14:01:23,090 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 206 to 206. [2022-12-14 14:01:23,090 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 206 states, 108 states have (on average 1.9722222222222223) internal successors, (213), 191 states have internal predecessors, (213), 11 states have call successors, (11), 3 states have call predecessors, (11), 3 states have return successors, (11), 11 states have call predecessors, (11), 11 states have call successors, (11) [2022-12-14 14:01:23,091 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 206 states to 206 states and 235 transitions. [2022-12-14 14:01:23,091 INFO L78 Accepts]: Start accepts. Automaton has 206 states and 235 transitions. Word has length 45 [2022-12-14 14:01:23,091 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:01:23,091 INFO L495 AbstractCegarLoop]: Abstraction has 206 states and 235 transitions. [2022-12-14 14:01:23,091 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 5.0) internal successors, (20), 5 states have internal predecessors, (20), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 1 states have call predecessors, (5), 2 states have call successors, (5) [2022-12-14 14:01:23,092 INFO L276 IsEmpty]: Start isEmpty. Operand 206 states and 235 transitions. [2022-12-14 14:01:23,092 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-12-14 14:01:23,092 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:01:23,092 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:01:23,098 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-12-14 14:01:23,293 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:01:23,294 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting zalloc_or_dieErr1ASSERT_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 82 more)] === [2022-12-14 14:01:23,294 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:01:23,295 INFO L85 PathProgramCache]: Analyzing trace with hash -1061303319, now seen corresponding path program 1 times [2022-12-14 14:01:23,295 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:01:23,295 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1738020764] [2022-12-14 14:01:23,295 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:01:23,295 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:01:23,323 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-12-14 14:01:23,323 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1246739093] [2022-12-14 14:01:23,323 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:01:23,323 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:01:23,324 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:01:23,325 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:01:23,326 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-12-14 14:01:23,536 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:01:23,540 INFO L263 TraceCheckSpWp]: Trace formula consists of 574 conjuncts, 25 conjunts are in the unsatisfiable core [2022-12-14 14:01:23,542 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:01:23,562 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 14:01:23,588 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:01:23,644 INFO L134 CoverageAnalysis]: Checked inductivity of 100 backedges. 42 proven. 9 refuted. 0 times theorem prover too weak. 49 trivial. 0 not checked. [2022-12-14 14:01:23,644 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:01:23,867 INFO L134 CoverageAnalysis]: Checked inductivity of 100 backedges. 43 proven. 1 refuted. 0 times theorem prover too weak. 56 trivial. 0 not checked. [2022-12-14 14:01:23,868 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:01:23,868 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1738020764] [2022-12-14 14:01:23,868 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-12-14 14:01:23,868 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1246739093] [2022-12-14 14:01:23,868 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1246739093] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:01:23,869 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2030121122] [2022-12-14 14:01:23,887 INFO L159 IcfgInterpreter]: Started Sifa with 23 locations of interest [2022-12-14 14:01:23,887 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:01:23,891 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:01:23,896 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:01:23,896 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:01:23,961 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-12-14 14:01:23,968 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-12-14 14:01:23,988 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:01:23,997 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:01:24,007 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:01:24,083 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-12-14 14:01:24,083 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 182 treesize of output 185 [2022-12-14 14:01:24,115 INFO L321 Elim1Store]: treesize reduction 15, result has 42.3 percent of original size [2022-12-14 14:01:24,115 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 180 treesize of output 183 [2022-12-14 14:01:24,144 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-12-14 14:01:24,145 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 174 treesize of output 177 [2022-12-14 14:01:24,275 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:01:24,282 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:01:24,292 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:01:24,346 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:01:24,353 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:01:24,389 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:01:24,416 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:01:25,400 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 80 for LOIs [2022-12-14 14:01:25,444 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-12-14 14:01:25,456 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-12-14 14:01:25,541 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:01:25,564 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:01:25,585 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:01:25,628 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:01:25,636 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:01:25,646 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:01:25,669 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:01:29,113 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [2030121122] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 14:01:29,114 INFO L184 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2022-12-14 14:01:29,114 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [20] imperfect sequences [7, 6] total 31 [2022-12-14 14:01:29,114 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1103668467] [2022-12-14 14:01:29,114 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 14:01:29,115 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-12-14 14:01:29,115 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:01:29,115 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-12-14 14:01:29,115 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=139, Invalid=791, Unknown=0, NotChecked=0, Total=930 [2022-12-14 14:01:29,116 INFO L87 Difference]: Start difference. First operand 206 states and 235 transitions. Second operand has 22 states, 14 states have (on average 1.2142857142857142) internal successors, (17), 15 states have internal predecessors, (17), 6 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) [2022-12-14 14:01:30,875 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:01:30,875 INFO L93 Difference]: Finished difference Result 322 states and 366 transitions. [2022-12-14 14:01:30,875 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2022-12-14 14:01:30,876 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 14 states have (on average 1.2142857142857142) internal successors, (17), 15 states have internal predecessors, (17), 6 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) Word has length 50 [2022-12-14 14:01:30,876 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:01:30,877 INFO L225 Difference]: With dead ends: 322 [2022-12-14 14:01:30,877 INFO L226 Difference]: Without dead ends: 322 [2022-12-14 14:01:30,877 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 150 GetRequests, 112 SyntacticMatches, 7 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 239 ImplicationChecksByTransitivity, 3.8s TimeCoverageRelationStatistics Valid=155, Invalid=901, Unknown=0, NotChecked=0, Total=1056 [2022-12-14 14:01:30,878 INFO L413 NwaCegarLoop]: 141 mSDtfsCounter, 85 mSDsluCounter, 1051 mSDsCounter, 0 mSdLazyCounter, 1454 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 91 SdHoareTripleChecker+Valid, 1192 SdHoareTripleChecker+Invalid, 1454 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1454 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2022-12-14 14:01:30,878 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [91 Valid, 1192 Invalid, 1454 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1454 Invalid, 0 Unknown, 0 Unchecked, 1.4s Time] [2022-12-14 14:01:30,878 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 322 states. [2022-12-14 14:01:30,884 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 322 to 251. [2022-12-14 14:01:30,884 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 251 states, 145 states have (on average 1.9448275862068964) internal successors, (282), 228 states have internal predecessors, (282), 17 states have call successors, (17), 5 states have call predecessors, (17), 5 states have return successors, (17), 17 states have call predecessors, (17), 17 states have call successors, (17) [2022-12-14 14:01:30,886 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 251 states to 251 states and 316 transitions. [2022-12-14 14:01:30,886 INFO L78 Accepts]: Start accepts. Automaton has 251 states and 316 transitions. Word has length 50 [2022-12-14 14:01:30,886 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:01:30,886 INFO L495 AbstractCegarLoop]: Abstraction has 251 states and 316 transitions. [2022-12-14 14:01:30,886 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 14 states have (on average 1.2142857142857142) internal successors, (17), 15 states have internal predecessors, (17), 6 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) [2022-12-14 14:01:30,886 INFO L276 IsEmpty]: Start isEmpty. Operand 251 states and 316 transitions. [2022-12-14 14:01:30,887 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-12-14 14:01:30,887 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:01:30,887 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:01:30,894 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2022-12-14 14:01:31,088 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:01:31,088 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 82 more)] === [2022-12-14 14:01:31,088 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:01:31,088 INFO L85 PathProgramCache]: Analyzing trace with hash 1417431757, now seen corresponding path program 1 times [2022-12-14 14:01:31,089 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:01:31,089 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2056280486] [2022-12-14 14:01:31,089 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:01:31,089 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:01:31,107 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-12-14 14:01:31,107 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1506433311] [2022-12-14 14:01:31,107 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:01:31,107 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:01:31,107 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:01:31,108 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:01:31,109 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-12-14 14:01:31,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:01:31,241 INFO L263 TraceCheckSpWp]: Trace formula consists of 617 conjuncts, 22 conjunts are in the unsatisfiable core [2022-12-14 14:01:31,244 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:01:31,306 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_219 Int)) (= |c_#valid| (store |c_old(#valid)| |c_zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_219))) is different from true [2022-12-14 14:01:31,354 INFO L321 Elim1Store]: treesize reduction 15, result has 25.0 percent of original size [2022-12-14 14:01:31,354 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 14:01:31,365 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 61 proven. 6 refuted. 0 times theorem prover too weak. 58 trivial. 1 not checked. [2022-12-14 14:01:31,365 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:01:31,517 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-12-14 14:01:31,518 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 11 [2022-12-14 14:01:31,532 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 61 proven. 7 refuted. 0 times theorem prover too weak. 58 trivial. 0 not checked. [2022-12-14 14:01:31,533 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:01:31,533 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2056280486] [2022-12-14 14:01:31,533 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-12-14 14:01:31,533 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1506433311] [2022-12-14 14:01:31,533 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1506433311] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:01:31,533 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1383402797] [2022-12-14 14:01:31,536 INFO L159 IcfgInterpreter]: Started Sifa with 24 locations of interest [2022-12-14 14:01:31,536 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:01:31,537 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:01:31,537 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:01:31,537 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:01:31,570 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-12-14 14:01:31,576 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-12-14 14:01:31,594 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:01:31,603 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:01:31,612 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:01:31,677 INFO L321 Elim1Store]: treesize reduction 15, result has 42.3 percent of original size [2022-12-14 14:01:31,677 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 184 treesize of output 187 [2022-12-14 14:01:31,705 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-12-14 14:01:31,705 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 178 treesize of output 181 [2022-12-14 14:01:31,736 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-12-14 14:01:31,736 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 174 treesize of output 177 [2022-12-14 14:01:31,839 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:01:31,845 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:01:31,852 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:01:31,894 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:01:31,898 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:01:31,923 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:01:31,942 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:01:33,282 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 80 for LOIs [2022-12-14 14:01:33,310 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-12-14 14:01:33,338 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-12-14 14:01:33,402 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:01:33,439 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:01:33,469 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:01:33,509 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:01:33,516 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:01:33,525 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:01:33,535 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:01:37,767 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3236#(and (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (<= 4 |ULTIMATE.start_l3_insert_~list#1.offset|) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (= |ULTIMATE.start_l4_insert_~item~0#1.offset| 0) (= |ULTIMATE.start_l4_insert_~list#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (= |~#list~0.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l2_insert_~list#1.offset|) (= |ULTIMATE.start_l3_insert_~item~1#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (= |ULTIMATE.start_l2_insert_~item~2#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (<= |ULTIMATE.start_l2_insert_~list#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (= |ULTIMATE.start_l0_insert_~item~4#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= |ULTIMATE.start_l1_insert_~list#1.offset| 4) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (<= 0 |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l4_insert_#t~ret7#1.base| 0)) (<= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (<= |ULTIMATE.start_l4_insert_~list#1.offset| 0) (= |ULTIMATE.start_l0_insert_#in~list#1.base| |~#list~0.base|) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= |ULTIMATE.start_l0_insert_~list#1.base| |ULTIMATE.start_l0_insert_#in~list#1.base|) (not (= (select |#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1)) (= |ULTIMATE.start_l4_insert_#t~ret7#1.offset| 0) (<= 0 |ULTIMATE.start_l4_insert_~list#1.offset|) (= |ULTIMATE.start_l0_insert_~item~4#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (<= 4 |ULTIMATE.start_l1_insert_~list#1.offset|) (<= 3 |ULTIMATE.start_l0_insert_~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= (+ |ULTIMATE.start_l0_insert_~item~4#1.offset| 4) |ULTIMATE.start_l1_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| |ULTIMATE.start_l2_insert_#in~list#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_l4_insert_#in~list#1.offset| 0) (<= |ULTIMATE.start_l3_insert_~list#1.offset| 4) (= |ULTIMATE.start_l2_insert_~item~2#1.offset| 0) (= (+ |ULTIMATE.start_l2_insert_~item~2#1.offset| 4) |ULTIMATE.start_l3_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l4_insert_#in~list#1.offset|) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| 0) (< 0 |#StackHeapBarrier|) (= |#NULL.base| 0))' at error location [2022-12-14 14:01:37,767 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:01:37,767 INFO L184 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2022-12-14 14:01:37,767 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 8] total 11 [2022-12-14 14:01:37,767 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1182935297] [2022-12-14 14:01:37,768 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2022-12-14 14:01:37,768 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-12-14 14:01:37,768 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:01:37,768 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-12-14 14:01:37,769 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=152, Invalid=907, Unknown=1, NotChecked=62, Total=1122 [2022-12-14 14:01:37,769 INFO L87 Difference]: Start difference. First operand 251 states and 316 transitions. Second operand has 12 states, 10 states have (on average 3.2) internal successors, (32), 10 states have internal predecessors, (32), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-12-14 14:01:38,635 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:01:38,636 INFO L93 Difference]: Finished difference Result 387 states and 480 transitions. [2022-12-14 14:01:38,636 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-12-14 14:01:38,636 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 10 states have (on average 3.2) internal successors, (32), 10 states have internal predecessors, (32), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 54 [2022-12-14 14:01:38,636 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:01:38,639 INFO L225 Difference]: With dead ends: 387 [2022-12-14 14:01:38,639 INFO L226 Difference]: Without dead ends: 387 [2022-12-14 14:01:38,640 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 166 GetRequests, 121 SyntacticMatches, 9 SemanticMatches, 36 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 266 ImplicationChecksByTransitivity, 4.4s TimeCoverageRelationStatistics Valid=182, Invalid=1153, Unknown=1, NotChecked=70, Total=1406 [2022-12-14 14:01:38,641 INFO L413 NwaCegarLoop]: 171 mSDtfsCounter, 307 mSDsluCounter, 1247 mSDsCounter, 0 mSdLazyCounter, 1033 mSolverCounterSat, 35 mSolverCounterUnsat, 42 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 307 SdHoareTripleChecker+Valid, 1418 SdHoareTripleChecker+Invalid, 1496 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 1033 IncrementalHoareTripleChecker+Invalid, 42 IncrementalHoareTripleChecker+Unknown, 386 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-12-14 14:01:38,641 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [307 Valid, 1418 Invalid, 1496 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 1033 Invalid, 42 Unknown, 386 Unchecked, 0.8s Time] [2022-12-14 14:01:38,642 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 387 states. [2022-12-14 14:01:38,648 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 387 to 249. [2022-12-14 14:01:38,649 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 249 states, 145 states have (on average 1.9172413793103449) internal successors, (278), 226 states have internal predecessors, (278), 17 states have call successors, (17), 5 states have call predecessors, (17), 5 states have return successors, (17), 17 states have call predecessors, (17), 17 states have call successors, (17) [2022-12-14 14:01:38,650 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 249 states to 249 states and 312 transitions. [2022-12-14 14:01:38,650 INFO L78 Accepts]: Start accepts. Automaton has 249 states and 312 transitions. Word has length 54 [2022-12-14 14:01:38,650 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:01:38,650 INFO L495 AbstractCegarLoop]: Abstraction has 249 states and 312 transitions. [2022-12-14 14:01:38,651 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 10 states have (on average 3.2) internal successors, (32), 10 states have internal predecessors, (32), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-12-14 14:01:38,651 INFO L276 IsEmpty]: Start isEmpty. Operand 249 states and 312 transitions. [2022-12-14 14:01:38,651 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-12-14 14:01:38,651 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:01:38,652 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:01:38,656 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-12-14 14:01:38,852 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable5 [2022-12-14 14:01:38,852 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 82 more)] === [2022-12-14 14:01:38,853 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:01:38,853 INFO L85 PathProgramCache]: Analyzing trace with hash 1417431758, now seen corresponding path program 1 times [2022-12-14 14:01:38,853 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:01:38,853 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2071477992] [2022-12-14 14:01:38,853 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:01:38,854 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:01:38,872 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-12-14 14:01:38,872 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1041034310] [2022-12-14 14:01:38,872 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:01:38,872 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:01:38,873 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:01:38,877 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:01:38,878 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-12-14 14:01:39,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:01:39,138 INFO L263 TraceCheckSpWp]: Trace formula consists of 617 conjuncts, 25 conjunts are in the unsatisfiable core [2022-12-14 14:01:39,140 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:01:39,156 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 14:01:39,172 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:01:39,208 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 67 proven. 9 refuted. 0 times theorem prover too weak. 50 trivial. 0 not checked. [2022-12-14 14:01:39,208 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:01:39,375 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 28 proven. 8 refuted. 0 times theorem prover too weak. 90 trivial. 0 not checked. [2022-12-14 14:01:39,376 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:01:39,376 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2071477992] [2022-12-14 14:01:39,376 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-12-14 14:01:39,376 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1041034310] [2022-12-14 14:01:39,376 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1041034310] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:01:39,376 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1980105620] [2022-12-14 14:01:39,378 INFO L159 IcfgInterpreter]: Started Sifa with 24 locations of interest [2022-12-14 14:01:39,378 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:01:39,379 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:01:39,379 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:01:39,379 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:01:39,403 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-12-14 14:01:39,409 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-12-14 14:01:39,426 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:01:39,434 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:01:39,443 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:01:39,489 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 197 treesize of output 196 [2022-12-14 14:01:39,501 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-12-14 14:01:39,514 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-12-14 14:01:39,558 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:01:39,564 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:01:39,574 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:01:39,629 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:01:39,635 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:01:39,667 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:01:39,687 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:01:40,693 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 80 for LOIs [2022-12-14 14:01:40,723 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-12-14 14:01:40,741 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-12-14 14:01:40,816 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:01:40,830 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:01:40,870 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:01:40,910 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:01:40,919 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:01:40,927 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:01:40,937 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:01:45,415 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4233#(and (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (<= 4 |ULTIMATE.start_l3_insert_~list#1.offset|) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (= |ULTIMATE.start_l4_insert_~item~0#1.offset| 0) (= |ULTIMATE.start_l4_insert_~list#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (= |~#list~0.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l2_insert_~list#1.offset|) (= |ULTIMATE.start_l3_insert_~item~1#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (= |ULTIMATE.start_l2_insert_~item~2#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (<= |ULTIMATE.start_l2_insert_~list#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (= |ULTIMATE.start_l0_insert_~item~4#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= |ULTIMATE.start_l1_insert_~list#1.offset| 4) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (<= 0 |ULTIMATE.start_l0_insert_#in~list#1.offset|) (< (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l4_insert_#t~ret7#1.base| 0)) (<= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (<= |ULTIMATE.start_l4_insert_~list#1.offset| 0) (= |ULTIMATE.start_l0_insert_#in~list#1.base| |~#list~0.base|) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= |ULTIMATE.start_l0_insert_~list#1.base| |ULTIMATE.start_l0_insert_#in~list#1.base|) (= |ULTIMATE.start_l4_insert_#t~ret7#1.offset| 0) (<= 0 |ULTIMATE.start_l4_insert_~list#1.offset|) (= |ULTIMATE.start_l0_insert_~item~4#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (<= 4 |ULTIMATE.start_l1_insert_~list#1.offset|) (<= 3 |ULTIMATE.start_l0_insert_~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= (+ |ULTIMATE.start_l0_insert_~item~4#1.offset| 4) |ULTIMATE.start_l1_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| |ULTIMATE.start_l2_insert_#in~list#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_l4_insert_#in~list#1.offset| 0) (<= |ULTIMATE.start_l3_insert_~list#1.offset| 4) (= |ULTIMATE.start_l2_insert_~item~2#1.offset| 0) (= (+ |ULTIMATE.start_l2_insert_~item~2#1.offset| 4) |ULTIMATE.start_l3_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l4_insert_#in~list#1.offset|) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| 0) (< 0 |#StackHeapBarrier|) (= |#NULL.base| 0))' at error location [2022-12-14 14:01:45,415 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:01:45,415 INFO L184 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2022-12-14 14:01:45,416 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 6] total 11 [2022-12-14 14:01:45,416 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1595202362] [2022-12-14 14:01:45,416 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2022-12-14 14:01:45,416 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-12-14 14:01:45,417 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:01:45,417 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-12-14 14:01:45,418 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=162, Invalid=894, Unknown=0, NotChecked=0, Total=1056 [2022-12-14 14:01:45,418 INFO L87 Difference]: Start difference. First operand 249 states and 312 transitions. Second operand has 11 states, 9 states have (on average 3.7777777777777777) internal successors, (34), 11 states have internal predecessors, (34), 2 states have call successors, (7), 2 states have call predecessors, (7), 4 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-12-14 14:01:45,808 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:01:45,808 INFO L93 Difference]: Finished difference Result 269 states and 336 transitions. [2022-12-14 14:01:45,808 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-12-14 14:01:45,809 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 9 states have (on average 3.7777777777777777) internal successors, (34), 11 states have internal predecessors, (34), 2 states have call successors, (7), 2 states have call predecessors, (7), 4 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 54 [2022-12-14 14:01:45,809 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:01:45,811 INFO L225 Difference]: With dead ends: 269 [2022-12-14 14:01:45,811 INFO L226 Difference]: Without dead ends: 261 [2022-12-14 14:01:45,811 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 166 GetRequests, 123 SyntacticMatches, 6 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 395 ImplicationChecksByTransitivity, 4.7s TimeCoverageRelationStatistics Valid=215, Invalid=1267, Unknown=0, NotChecked=0, Total=1482 [2022-12-14 14:01:45,812 INFO L413 NwaCegarLoop]: 193 mSDtfsCounter, 12 mSDsluCounter, 1037 mSDsCounter, 0 mSdLazyCounter, 344 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 12 SdHoareTripleChecker+Valid, 1230 SdHoareTripleChecker+Invalid, 355 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 344 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 14:01:45,812 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [12 Valid, 1230 Invalid, 355 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 344 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 14:01:45,813 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 261 states. [2022-12-14 14:01:45,817 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 261 to 261. [2022-12-14 14:01:45,817 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 261 states, 157 states have (on average 1.8471337579617835) internal successors, (290), 238 states have internal predecessors, (290), 17 states have call successors, (17), 5 states have call predecessors, (17), 5 states have return successors, (17), 17 states have call predecessors, (17), 17 states have call successors, (17) [2022-12-14 14:01:45,819 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 261 states to 261 states and 324 transitions. [2022-12-14 14:01:45,819 INFO L78 Accepts]: Start accepts. Automaton has 261 states and 324 transitions. Word has length 54 [2022-12-14 14:01:45,819 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:01:45,820 INFO L495 AbstractCegarLoop]: Abstraction has 261 states and 324 transitions. [2022-12-14 14:01:45,820 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 9 states have (on average 3.7777777777777777) internal successors, (34), 11 states have internal predecessors, (34), 2 states have call successors, (7), 2 states have call predecessors, (7), 4 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-12-14 14:01:45,820 INFO L276 IsEmpty]: Start isEmpty. Operand 261 states and 324 transitions. [2022-12-14 14:01:45,821 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2022-12-14 14:01:45,821 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:01:45,821 INFO L195 NwaCegarLoop]: trace histogram [24, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:01:45,828 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Ended with exit code 0 [2022-12-14 14:01:46,022 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:01:46,023 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 82 more)] === [2022-12-14 14:01:46,023 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:01:46,024 INFO L85 PathProgramCache]: Analyzing trace with hash 466014350, now seen corresponding path program 2 times [2022-12-14 14:01:46,024 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:01:46,024 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1612948584] [2022-12-14 14:01:46,024 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:01:46,025 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:01:46,074 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-12-14 14:01:46,075 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1322243102] [2022-12-14 14:01:46,075 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 14:01:46,075 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:01:46,075 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:01:46,076 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:01:46,076 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-12-14 14:01:46,395 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-12-14 14:01:46,395 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 14:01:46,397 INFO L263 TraceCheckSpWp]: Trace formula consists of 365 conjuncts, 27 conjunts are in the unsatisfiable core [2022-12-14 14:01:46,399 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:01:46,408 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 14:01:46,426 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:01:46,515 INFO L134 CoverageAnalysis]: Checked inductivity of 495 backedges. 140 proven. 10 refuted. 0 times theorem prover too weak. 345 trivial. 0 not checked. [2022-12-14 14:01:46,515 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:01:46,759 INFO L134 CoverageAnalysis]: Checked inductivity of 495 backedges. 140 proven. 10 refuted. 0 times theorem prover too weak. 345 trivial. 0 not checked. [2022-12-14 14:01:46,759 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:01:46,759 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1612948584] [2022-12-14 14:01:46,759 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-12-14 14:01:46,759 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1322243102] [2022-12-14 14:01:46,760 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1322243102] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:01:46,760 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2093724327] [2022-12-14 14:01:46,761 INFO L159 IcfgInterpreter]: Started Sifa with 24 locations of interest [2022-12-14 14:01:46,762 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:01:46,762 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:01:46,762 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:01:46,762 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:01:46,786 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-12-14 14:01:46,792 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-12-14 14:01:46,808 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:01:46,815 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:01:46,823 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:01:46,858 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-12-14 14:01:46,869 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-12-14 14:01:46,876 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 197 treesize of output 196 [2022-12-14 14:01:46,913 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:01:46,918 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:01:46,925 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:01:46,955 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:01:46,962 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:01:46,989 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:01:46,994 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:01:47,877 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 80 for LOIs [2022-12-14 14:01:47,904 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-12-14 14:01:47,915 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-12-14 14:01:48,003 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:01:48,016 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:01:48,047 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:01:48,074 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:01:48,081 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:01:48,089 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:01:48,096 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:01:52,482 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5239#(and (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (<= 4 |ULTIMATE.start_l3_insert_~list#1.offset|) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (= |ULTIMATE.start_l4_insert_~item~0#1.offset| 0) (= |ULTIMATE.start_l4_insert_~list#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (= |~#list~0.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l2_insert_~list#1.offset|) (= |ULTIMATE.start_l3_insert_~item~1#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (= |ULTIMATE.start_l2_insert_~item~2#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (<= |ULTIMATE.start_l2_insert_~list#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (= |ULTIMATE.start_l0_insert_~item~4#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= |ULTIMATE.start_l1_insert_~list#1.offset| 4) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (<= 0 |ULTIMATE.start_l0_insert_#in~list#1.offset|) (< (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l4_insert_#t~ret7#1.base| 0)) (<= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (<= |ULTIMATE.start_l4_insert_~list#1.offset| 0) (= |ULTIMATE.start_l0_insert_#in~list#1.base| |~#list~0.base|) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= |ULTIMATE.start_l0_insert_~list#1.base| |ULTIMATE.start_l0_insert_#in~list#1.base|) (= |ULTIMATE.start_l4_insert_#t~ret7#1.offset| 0) (<= 0 |ULTIMATE.start_l4_insert_~list#1.offset|) (= |ULTIMATE.start_l0_insert_~item~4#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (<= 4 |ULTIMATE.start_l1_insert_~list#1.offset|) (<= 3 |ULTIMATE.start_l0_insert_~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= (+ |ULTIMATE.start_l0_insert_~item~4#1.offset| 4) |ULTIMATE.start_l1_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| |ULTIMATE.start_l2_insert_#in~list#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_l4_insert_#in~list#1.offset| 0) (<= |ULTIMATE.start_l3_insert_~list#1.offset| 4) (= |ULTIMATE.start_l2_insert_~item~2#1.offset| 0) (= (+ |ULTIMATE.start_l2_insert_~item~2#1.offset| 4) |ULTIMATE.start_l3_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l4_insert_#in~list#1.offset|) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| 0) (< 0 |#StackHeapBarrier|) (= |#NULL.base| 0))' at error location [2022-12-14 14:01:52,482 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:01:52,482 INFO L184 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2022-12-14 14:01:52,482 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 9] total 16 [2022-12-14 14:01:52,482 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [67918173] [2022-12-14 14:01:52,482 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2022-12-14 14:01:52,483 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2022-12-14 14:01:52,483 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:01:52,483 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2022-12-14 14:01:52,483 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=201, Invalid=1205, Unknown=0, NotChecked=0, Total=1406 [2022-12-14 14:01:52,483 INFO L87 Difference]: Start difference. First operand 261 states and 324 transitions. Second operand has 16 states, 14 states have (on average 2.357142857142857) internal successors, (33), 16 states have internal predecessors, (33), 1 states have call successors, (6), 1 states have call predecessors, (6), 3 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-12-14 14:01:53,645 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:01:53,645 INFO L93 Difference]: Finished difference Result 281 states and 352 transitions. [2022-12-14 14:01:53,645 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-12-14 14:01:53,646 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 14 states have (on average 2.357142857142857) internal successors, (33), 16 states have internal predecessors, (33), 1 states have call successors, (6), 1 states have call predecessors, (6), 3 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) Word has length 72 [2022-12-14 14:01:53,646 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:01:53,647 INFO L225 Difference]: With dead ends: 281 [2022-12-14 14:01:53,647 INFO L226 Difference]: Without dead ends: 275 [2022-12-14 14:01:53,647 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 231 GetRequests, 172 SyntacticMatches, 6 SemanticMatches, 53 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 773 ImplicationChecksByTransitivity, 5.3s TimeCoverageRelationStatistics Valid=446, Invalid=2524, Unknown=0, NotChecked=0, Total=2970 [2022-12-14 14:01:53,648 INFO L413 NwaCegarLoop]: 192 mSDtfsCounter, 51 mSDsluCounter, 1402 mSDsCounter, 0 mSdLazyCounter, 472 mSolverCounterSat, 42 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 1594 SdHoareTripleChecker+Invalid, 514 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 42 IncrementalHoareTripleChecker+Valid, 472 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-12-14 14:01:53,648 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [51 Valid, 1594 Invalid, 514 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [42 Valid, 472 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-12-14 14:01:53,648 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 275 states. [2022-12-14 14:01:53,652 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 275 to 275. [2022-12-14 14:01:53,652 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 275 states, 171 states have (on average 1.7777777777777777) internal successors, (304), 252 states have internal predecessors, (304), 17 states have call successors, (17), 5 states have call predecessors, (17), 5 states have return successors, (17), 17 states have call predecessors, (17), 17 states have call successors, (17) [2022-12-14 14:01:53,653 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 275 states to 275 states and 338 transitions. [2022-12-14 14:01:53,653 INFO L78 Accepts]: Start accepts. Automaton has 275 states and 338 transitions. Word has length 72 [2022-12-14 14:01:53,653 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:01:53,653 INFO L495 AbstractCegarLoop]: Abstraction has 275 states and 338 transitions. [2022-12-14 14:01:53,653 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 14 states have (on average 2.357142857142857) internal successors, (33), 16 states have internal predecessors, (33), 1 states have call successors, (6), 1 states have call predecessors, (6), 3 states have return successors, (7), 2 states have call predecessors, (7), 1 states have call successors, (7) [2022-12-14 14:01:53,653 INFO L276 IsEmpty]: Start isEmpty. Operand 275 states and 338 transitions. [2022-12-14 14:01:53,655 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2022-12-14 14:01:53,655 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:01:53,655 INFO L195 NwaCegarLoop]: trace histogram [35, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:01:53,661 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Ended with exit code 0 [2022-12-14 14:01:53,855 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:01:53,857 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 82 more)] === [2022-12-14 14:01:53,857 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:01:53,858 INFO L85 PathProgramCache]: Analyzing trace with hash 358118405, now seen corresponding path program 3 times [2022-12-14 14:01:53,858 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:01:53,859 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1423443013] [2022-12-14 14:01:53,859 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:01:53,859 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:01:53,892 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-12-14 14:01:53,892 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [520433216] [2022-12-14 14:01:53,892 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 14:01:53,892 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:01:53,892 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:01:53,893 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:01:53,894 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-12-14 14:01:55,819 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 14:01:55,819 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 14:01:55,826 INFO L263 TraceCheckSpWp]: Trace formula consists of 1052 conjuncts, 42 conjunts are in the unsatisfiable core [2022-12-14 14:01:55,828 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:01:55,858 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 14:01:55,883 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:01:55,987 INFO L134 CoverageAnalysis]: Checked inductivity of 880 backedges. 481 proven. 145 refuted. 0 times theorem prover too weak. 254 trivial. 0 not checked. [2022-12-14 14:01:55,987 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:01:56,262 INFO L134 CoverageAnalysis]: Checked inductivity of 880 backedges. 156 proven. 84 refuted. 0 times theorem prover too weak. 640 trivial. 0 not checked. [2022-12-14 14:01:56,262 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:01:56,262 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1423443013] [2022-12-14 14:01:56,262 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-12-14 14:01:56,262 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [520433216] [2022-12-14 14:01:56,262 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [520433216] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:01:56,262 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [675929542] [2022-12-14 14:01:56,264 INFO L159 IcfgInterpreter]: Started Sifa with 24 locations of interest [2022-12-14 14:01:56,264 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:01:56,264 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:01:56,265 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:01:56,265 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:01:56,285 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-12-14 14:01:56,290 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-12-14 14:01:56,302 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:01:56,310 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:01:56,317 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:01:56,368 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-12-14 14:01:56,368 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 182 treesize of output 185 [2022-12-14 14:01:56,392 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-12-14 14:01:56,393 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 178 treesize of output 181 [2022-12-14 14:01:56,414 INFO L321 Elim1Store]: treesize reduction 15, result has 42.3 percent of original size [2022-12-14 14:01:56,415 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 176 treesize of output 179 [2022-12-14 14:01:56,484 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:01:56,489 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:01:56,496 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:01:56,520 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:01:56,524 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:01:56,570 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:01:56,576 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:01:57,510 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 80 for LOIs [2022-12-14 14:01:57,530 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-12-14 14:01:57,548 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-12-14 14:01:57,649 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:01:57,667 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:01:57,692 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:01:57,719 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:01:57,726 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:01:57,734 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:01:57,741 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:02:02,348 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6366#(and (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (<= 4 |ULTIMATE.start_l3_insert_~list#1.offset|) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (= |ULTIMATE.start_l4_insert_~item~0#1.offset| 0) (= |ULTIMATE.start_l4_insert_~list#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (= |~#list~0.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l2_insert_~list#1.offset|) (= |ULTIMATE.start_l3_insert_~item~1#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (= |ULTIMATE.start_l2_insert_~item~2#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (<= |ULTIMATE.start_l2_insert_~list#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (= |ULTIMATE.start_l0_insert_~item~4#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= |ULTIMATE.start_l1_insert_~list#1.offset| 4) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (<= 0 |ULTIMATE.start_l0_insert_#in~list#1.offset|) (< (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l4_insert_#t~ret7#1.base| 0)) (<= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (<= |ULTIMATE.start_l4_insert_~list#1.offset| 0) (= |ULTIMATE.start_l0_insert_#in~list#1.base| |~#list~0.base|) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= |ULTIMATE.start_l0_insert_~list#1.base| |ULTIMATE.start_l0_insert_#in~list#1.base|) (= |ULTIMATE.start_l4_insert_#t~ret7#1.offset| 0) (<= 0 |ULTIMATE.start_l4_insert_~list#1.offset|) (= |ULTIMATE.start_l0_insert_~item~4#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (<= 4 |ULTIMATE.start_l1_insert_~list#1.offset|) (<= 3 |ULTIMATE.start_l0_insert_~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= (+ |ULTIMATE.start_l0_insert_~item~4#1.offset| 4) |ULTIMATE.start_l1_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| |ULTIMATE.start_l2_insert_#in~list#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_l4_insert_#in~list#1.offset| 0) (<= |ULTIMATE.start_l3_insert_~list#1.offset| 4) (= |ULTIMATE.start_l2_insert_~item~2#1.offset| 0) (= (+ |ULTIMATE.start_l2_insert_~item~2#1.offset| 4) |ULTIMATE.start_l3_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l4_insert_#in~list#1.offset|) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| 0) (< 0 |#StackHeapBarrier|) (= |#NULL.base| 0))' at error location [2022-12-14 14:02:02,348 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:02:02,348 INFO L184 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2022-12-14 14:02:02,348 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 10] total 23 [2022-12-14 14:02:02,348 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1682038234] [2022-12-14 14:02:02,348 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2022-12-14 14:02:02,349 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-12-14 14:02:02,349 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:02:02,349 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-12-14 14:02:02,349 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=228, Invalid=1752, Unknown=0, NotChecked=0, Total=1980 [2022-12-14 14:02:02,350 INFO L87 Difference]: Start difference. First operand 275 states and 338 transitions. Second operand has 23 states, 21 states have (on average 2.1904761904761907) internal successors, (46), 23 states have internal predecessors, (46), 2 states have call successors, (7), 2 states have call predecessors, (7), 4 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-12-14 14:02:03,020 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:02:03,020 INFO L93 Difference]: Finished difference Result 285 states and 350 transitions. [2022-12-14 14:02:03,020 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-12-14 14:02:03,020 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 21 states have (on average 2.1904761904761907) internal successors, (46), 23 states have internal predecessors, (46), 2 states have call successors, (7), 2 states have call predecessors, (7), 4 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 83 [2022-12-14 14:02:03,020 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:02:03,021 INFO L225 Difference]: With dead ends: 285 [2022-12-14 14:02:03,021 INFO L226 Difference]: Without dead ends: 281 [2022-12-14 14:02:03,022 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 257 GetRequests, 198 SyntacticMatches, 6 SemanticMatches, 53 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 823 ImplicationChecksByTransitivity, 5.0s TimeCoverageRelationStatistics Valid=347, Invalid=2623, Unknown=0, NotChecked=0, Total=2970 [2022-12-14 14:02:03,022 INFO L413 NwaCegarLoop]: 193 mSDtfsCounter, 22 mSDsluCounter, 2410 mSDsCounter, 0 mSdLazyCounter, 604 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 22 SdHoareTripleChecker+Valid, 2603 SdHoareTripleChecker+Invalid, 612 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 604 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-12-14 14:02:03,022 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [22 Valid, 2603 Invalid, 612 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 604 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-12-14 14:02:03,023 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 281 states. [2022-12-14 14:02:03,026 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 281 to 281. [2022-12-14 14:02:03,026 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 281 states, 177 states have (on average 1.7514124293785311) internal successors, (310), 258 states have internal predecessors, (310), 17 states have call successors, (17), 5 states have call predecessors, (17), 5 states have return successors, (17), 17 states have call predecessors, (17), 17 states have call successors, (17) [2022-12-14 14:02:03,027 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 281 states to 281 states and 344 transitions. [2022-12-14 14:02:03,027 INFO L78 Accepts]: Start accepts. Automaton has 281 states and 344 transitions. Word has length 83 [2022-12-14 14:02:03,028 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:02:03,028 INFO L495 AbstractCegarLoop]: Abstraction has 281 states and 344 transitions. [2022-12-14 14:02:03,028 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 21 states have (on average 2.1904761904761907) internal successors, (46), 23 states have internal predecessors, (46), 2 states have call successors, (7), 2 states have call predecessors, (7), 4 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-12-14 14:02:03,028 INFO L276 IsEmpty]: Start isEmpty. Operand 281 states and 344 transitions. [2022-12-14 14:02:03,029 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2022-12-14 14:02:03,029 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:02:03,029 INFO L195 NwaCegarLoop]: trace histogram [50, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:02:03,046 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Ended with exit code 0 [2022-12-14 14:02:03,229 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:02:03,231 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 82 more)] === [2022-12-14 14:02:03,231 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:02:03,232 INFO L85 PathProgramCache]: Analyzing trace with hash 221030894, now seen corresponding path program 4 times [2022-12-14 14:02:03,232 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:02:03,233 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1025025047] [2022-12-14 14:02:03,233 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:02:03,233 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:02:03,284 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-12-14 14:02:03,284 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1997789753] [2022-12-14 14:02:03,284 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 14:02:03,284 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:02:03,285 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:02:03,285 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:02:03,286 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-12-14 14:02:09,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:02:09,445 INFO L263 TraceCheckSpWp]: Trace formula consists of 1277 conjuncts, 73 conjunts are in the unsatisfiable core [2022-12-14 14:02:09,448 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:02:09,491 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 14:02:19,725 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_1709 Int) (|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (and (= |c_#length| (store |c_old(#length)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_1709)) (= (select |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 0))) is different from true [2022-12-14 14:02:19,822 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:02:19,823 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 14:02:19,910 INFO L321 Elim1Store]: treesize reduction 4, result has 50.0 percent of original size [2022-12-14 14:02:19,910 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 11 [2022-12-14 14:02:20,899 INFO L134 CoverageAnalysis]: Checked inductivity of 1600 backedges. 616 proven. 316 refuted. 0 times theorem prover too weak. 489 trivial. 179 not checked. [2022-12-14 14:02:20,900 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:02:21,237 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:02:21,237 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1025025047] [2022-12-14 14:02:21,237 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-12-14 14:02:21,237 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1997789753] [2022-12-14 14:02:21,237 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1997789753] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:02:21,237 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1437871075] [2022-12-14 14:02:21,239 INFO L159 IcfgInterpreter]: Started Sifa with 24 locations of interest [2022-12-14 14:02:21,239 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:02:21,240 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:02:21,240 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:02:21,240 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:02:21,268 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-12-14 14:02:21,273 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-12-14 14:02:21,291 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:02:21,377 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:02:21,436 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:02:21,482 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-12-14 14:02:21,483 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 182 treesize of output 185 [2022-12-14 14:02:21,537 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-12-14 14:02:21,537 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 178 treesize of output 181 [2022-12-14 14:02:21,558 INFO L321 Elim1Store]: treesize reduction 15, result has 42.3 percent of original size [2022-12-14 14:02:21,558 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 176 treesize of output 179 [2022-12-14 14:02:21,633 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:02:21,638 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:02:21,644 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:02:21,670 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:02:21,685 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:02:21,719 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:02:21,721 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:02:22,563 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 80 for LOIs [2022-12-14 14:02:22,597 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-12-14 14:02:22,606 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-12-14 14:02:22,704 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:02:22,719 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:02:22,739 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:02:22,773 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:02:22,779 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:02:22,786 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:02:22,794 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:02:54,983 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7299#(and (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (<= 4 |ULTIMATE.start_l3_insert_~list#1.offset|) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (= |ULTIMATE.start_l4_insert_~item~0#1.offset| 0) (= |ULTIMATE.start_l4_insert_~list#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (= |~#list~0.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l2_insert_~list#1.offset|) (= |ULTIMATE.start_l3_insert_~item~1#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (= |ULTIMATE.start_l2_insert_~item~2#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (<= |ULTIMATE.start_l2_insert_~list#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (= |ULTIMATE.start_l0_insert_~item~4#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= |ULTIMATE.start_l1_insert_~list#1.offset| 4) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (<= 0 |ULTIMATE.start_l0_insert_#in~list#1.offset|) (< (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l4_insert_#t~ret7#1.base| 0)) (<= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (<= |ULTIMATE.start_l4_insert_~list#1.offset| 0) (= |ULTIMATE.start_l0_insert_#in~list#1.base| |~#list~0.base|) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= |ULTIMATE.start_l0_insert_~list#1.base| |ULTIMATE.start_l0_insert_#in~list#1.base|) (= |ULTIMATE.start_l4_insert_#t~ret7#1.offset| 0) (<= 0 |ULTIMATE.start_l4_insert_~list#1.offset|) (= |ULTIMATE.start_l0_insert_~item~4#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (<= 4 |ULTIMATE.start_l1_insert_~list#1.offset|) (<= 3 |ULTIMATE.start_l0_insert_~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= (+ |ULTIMATE.start_l0_insert_~item~4#1.offset| 4) |ULTIMATE.start_l1_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| |ULTIMATE.start_l2_insert_#in~list#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_l4_insert_#in~list#1.offset| 0) (<= |ULTIMATE.start_l3_insert_~list#1.offset| 4) (= |ULTIMATE.start_l2_insert_~item~2#1.offset| 0) (= (+ |ULTIMATE.start_l2_insert_~item~2#1.offset| 4) |ULTIMATE.start_l3_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l4_insert_#in~list#1.offset|) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| 0) (< 0 |#StackHeapBarrier|) (= |#NULL.base| 0))' at error location [2022-12-14 14:02:54,984 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:02:54,984 INFO L184 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2022-12-14 14:02:54,984 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25] total 25 [2022-12-14 14:02:54,984 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1795284060] [2022-12-14 14:02:54,984 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2022-12-14 14:02:54,984 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-12-14 14:02:54,984 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:02:54,985 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-12-14 14:02:54,985 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=197, Invalid=2153, Unknown=6, NotChecked=94, Total=2450 [2022-12-14 14:02:54,985 INFO L87 Difference]: Start difference. First operand 281 states and 344 transitions. Second operand has 26 states, 23 states have (on average 1.826086956521739) internal successors, (42), 23 states have internal predecessors, (42), 2 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-12-14 14:02:57,006 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:02:59,013 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:03:01,066 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:03:05,207 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:03:07,347 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:03:09,477 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:03:11,595 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:03:13,731 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:03:17,863 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:03:20,185 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:03:24,315 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:03:40,769 WARN L233 SmtUtils]: Spent 6.28s on a formula simplification that was a NOOP. DAG size: 45 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 14:03:47,396 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:03:50,080 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:03:52,218 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:03:57,384 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:03:57,384 INFO L93 Difference]: Finished difference Result 427 states and 524 transitions. [2022-12-14 14:03:57,384 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2022-12-14 14:03:57,385 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 23 states have (on average 1.826086956521739) internal successors, (42), 23 states have internal predecessors, (42), 2 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 98 [2022-12-14 14:03:57,385 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:03:57,386 INFO L225 Difference]: With dead ends: 427 [2022-12-14 14:03:57,386 INFO L226 Difference]: Without dead ends: 427 [2022-12-14 14:03:57,387 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 210 GetRequests, 143 SyntacticMatches, 6 SemanticMatches, 61 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 886 ImplicationChecksByTransitivity, 70.4s TimeCoverageRelationStatistics Valid=299, Invalid=3470, Unknown=17, NotChecked=120, Total=3906 [2022-12-14 14:03:57,387 INFO L413 NwaCegarLoop]: 53 mSDtfsCounter, 229 mSDsluCounter, 744 mSDsCounter, 0 mSdLazyCounter, 3871 mSolverCounterSat, 30 mSolverCounterUnsat, 14 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 35.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 237 SdHoareTripleChecker+Valid, 797 SdHoareTripleChecker+Invalid, 4305 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 30 IncrementalHoareTripleChecker+Valid, 3871 IncrementalHoareTripleChecker+Invalid, 14 IncrementalHoareTripleChecker+Unknown, 390 IncrementalHoareTripleChecker+Unchecked, 35.4s IncrementalHoareTripleChecker+Time [2022-12-14 14:03:57,388 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [237 Valid, 797 Invalid, 4305 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [30 Valid, 3871 Invalid, 14 Unknown, 390 Unchecked, 35.4s Time] [2022-12-14 14:03:57,388 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 427 states. [2022-12-14 14:03:57,393 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 427 to 279. [2022-12-14 14:03:57,394 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 279 states, 177 states have (on average 1.728813559322034) internal successors, (306), 256 states have internal predecessors, (306), 17 states have call successors, (17), 5 states have call predecessors, (17), 5 states have return successors, (17), 17 states have call predecessors, (17), 17 states have call successors, (17) [2022-12-14 14:03:57,395 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 279 states to 279 states and 340 transitions. [2022-12-14 14:03:57,395 INFO L78 Accepts]: Start accepts. Automaton has 279 states and 340 transitions. Word has length 98 [2022-12-14 14:03:57,395 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:03:57,395 INFO L495 AbstractCegarLoop]: Abstraction has 279 states and 340 transitions. [2022-12-14 14:03:57,395 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 23 states have (on average 1.826086956521739) internal successors, (42), 23 states have internal predecessors, (42), 2 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-12-14 14:03:57,395 INFO L276 IsEmpty]: Start isEmpty. Operand 279 states and 340 transitions. [2022-12-14 14:03:57,396 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2022-12-14 14:03:57,396 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:03:57,396 INFO L195 NwaCegarLoop]: trace histogram [50, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:03:57,420 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2022-12-14 14:03:57,597 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:03:57,598 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 82 more)] === [2022-12-14 14:03:57,599 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:03:57,599 INFO L85 PathProgramCache]: Analyzing trace with hash -1737964160, now seen corresponding path program 1 times [2022-12-14 14:03:57,599 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:03:57,600 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [51283063] [2022-12-14 14:03:57,600 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:03:57,601 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:03:57,752 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-12-14 14:03:57,752 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1725181511] [2022-12-14 14:03:57,752 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:03:57,752 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:03:57,752 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:03:57,753 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:03:57,755 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2022-12-14 14:03:58,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:03:58,008 INFO L263 TraceCheckSpWp]: Trace formula consists of 1293 conjuncts, 33 conjunts are in the unsatisfiable core [2022-12-14 14:03:58,012 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:03:58,063 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_2349 Int)) (= |c_#valid| (store |c_old(#valid)| |c_zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_2349))) is different from true [2022-12-14 14:03:58,112 INFO L321 Elim1Store]: treesize reduction 15, result has 25.0 percent of original size [2022-12-14 14:03:58,112 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 14:03:58,127 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_2350 Int)) (= |c_#valid| (store |c_old(#valid)| |c_zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_2350))) is different from true [2022-12-14 14:03:58,185 INFO L321 Elim1Store]: treesize reduction 15, result has 25.0 percent of original size [2022-12-14 14:03:58,185 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 14:03:58,194 INFO L134 CoverageAnalysis]: Checked inductivity of 1600 backedges. 818 proven. 184 refuted. 0 times theorem prover too weak. 595 trivial. 3 not checked. [2022-12-14 14:03:58,194 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:03:58,421 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-12-14 14:03:58,421 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 11 [2022-12-14 14:03:58,428 INFO L134 CoverageAnalysis]: Checked inductivity of 1600 backedges. 818 proven. 186 refuted. 0 times theorem prover too weak. 596 trivial. 0 not checked. [2022-12-14 14:03:58,428 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:03:58,428 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [51283063] [2022-12-14 14:03:58,428 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-12-14 14:03:58,428 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1725181511] [2022-12-14 14:03:58,429 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1725181511] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:03:58,429 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1917851730] [2022-12-14 14:03:58,430 INFO L159 IcfgInterpreter]: Started Sifa with 25 locations of interest [2022-12-14 14:03:58,430 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:03:58,430 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:03:58,430 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:03:58,430 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:03:58,447 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-12-14 14:03:58,453 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-12-14 14:03:58,496 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:03:58,529 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:03:58,578 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:03:58,622 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-12-14 14:03:58,622 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 182 treesize of output 185 [2022-12-14 14:03:58,644 INFO L321 Elim1Store]: treesize reduction 15, result has 42.3 percent of original size [2022-12-14 14:03:58,644 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 180 treesize of output 183 [2022-12-14 14:03:58,661 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-12-14 14:03:58,661 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 174 treesize of output 177 [2022-12-14 14:03:58,727 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:03:58,732 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:03:58,736 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:03:58,761 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:03:58,764 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:03:58,814 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:03:58,818 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:03:59,624 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:03:59,632 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 1 [2022-12-14 14:03:59,639 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:03:59,722 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 80 for LOIs [2022-12-14 14:03:59,747 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-12-14 14:03:59,771 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-12-14 14:03:59,826 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:03:59,865 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:03:59,899 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:03:59,935 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:03:59,943 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:03:59,950 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:03:59,964 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:04:04,449 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8655#(and (not (= (select |#valid| |ULTIMATE.start_l4_insert_~list#1.base|) 1)) (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (<= 4 |ULTIMATE.start_l3_insert_~list#1.offset|) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (= |ULTIMATE.start_l4_insert_~item~0#1.offset| 0) (= |ULTIMATE.start_l4_insert_~list#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (<= (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (= |~#list~0.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l2_insert_~list#1.offset|) (= |ULTIMATE.start_l3_insert_~item~1#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (= (select |#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (= |ULTIMATE.start_l2_insert_~item~2#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (<= |ULTIMATE.start_l2_insert_~list#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (= |ULTIMATE.start_l0_insert_~item~4#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= |ULTIMATE.start_l1_insert_~list#1.offset| 4) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (<= 0 |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (<= |ULTIMATE.start_l4_insert_~list#1.offset| 0) (= |ULTIMATE.start_l0_insert_#in~list#1.base| |~#list~0.base|) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= |ULTIMATE.start_l0_insert_~list#1.base| |ULTIMATE.start_l0_insert_#in~list#1.base|) (not (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0)) (<= 0 |ULTIMATE.start_l4_insert_~list#1.offset|) (= |ULTIMATE.start_l0_insert_~item~4#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (<= 4 |ULTIMATE.start_l1_insert_~list#1.offset|) (<= 3 |ULTIMATE.start_l0_insert_~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= (+ |ULTIMATE.start_l0_insert_~item~4#1.offset| 4) |ULTIMATE.start_l1_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| |ULTIMATE.start_l2_insert_#in~list#1.offset|) (= |#NULL.offset| 0) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0) (<= |ULTIMATE.start_l4_insert_#in~list#1.offset| 0) (<= |ULTIMATE.start_l3_insert_~list#1.offset| 4) (= |ULTIMATE.start_l2_insert_~item~2#1.offset| 0) (= (+ |ULTIMATE.start_l2_insert_~item~2#1.offset| 4) |ULTIMATE.start_l3_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l4_insert_#in~list#1.offset|) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| 0) (< 0 |#StackHeapBarrier|) (= |#NULL.base| 0))' at error location [2022-12-14 14:04:04,449 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:04:04,449 INFO L184 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2022-12-14 14:04:04,449 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 9] total 13 [2022-12-14 14:04:04,449 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [727537649] [2022-12-14 14:04:04,449 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2022-12-14 14:04:04,450 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-12-14 14:04:04,450 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:04:04,450 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-12-14 14:04:04,450 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=167, Invalid=1029, Unknown=2, NotChecked=134, Total=1332 [2022-12-14 14:04:04,451 INFO L87 Difference]: Start difference. First operand 279 states and 340 transitions. Second operand has 14 states, 12 states have (on average 2.9166666666666665) internal successors, (35), 12 states have internal predecessors, (35), 2 states have call successors, (8), 3 states have call predecessors, (8), 4 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) [2022-12-14 14:04:05,006 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:04:05,006 INFO L93 Difference]: Finished difference Result 413 states and 501 transitions. [2022-12-14 14:04:05,006 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-12-14 14:04:05,006 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 12 states have (on average 2.9166666666666665) internal successors, (35), 12 states have internal predecessors, (35), 2 states have call successors, (8), 3 states have call predecessors, (8), 4 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) Word has length 99 [2022-12-14 14:04:05,006 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:04:05,008 INFO L225 Difference]: With dead ends: 413 [2022-12-14 14:04:05,008 INFO L226 Difference]: Without dead ends: 413 [2022-12-14 14:04:05,008 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 304 GetRequests, 249 SyntacticMatches, 14 SemanticMatches, 41 ConstructedPredicates, 2 IntricatePredicates, 0 DeprecatedPredicates, 333 ImplicationChecksByTransitivity, 4.7s TimeCoverageRelationStatistics Valid=205, Invalid=1441, Unknown=2, NotChecked=158, Total=1806 [2022-12-14 14:04:05,009 INFO L413 NwaCegarLoop]: 164 mSDtfsCounter, 495 mSDsluCounter, 1033 mSDsCounter, 0 mSdLazyCounter, 948 mSolverCounterSat, 57 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 495 SdHoareTripleChecker+Valid, 1197 SdHoareTripleChecker+Invalid, 1745 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 57 IncrementalHoareTripleChecker+Valid, 948 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 740 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-12-14 14:04:05,009 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [495 Valid, 1197 Invalid, 1745 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [57 Valid, 948 Invalid, 0 Unknown, 740 Unchecked, 0.4s Time] [2022-12-14 14:04:05,009 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 413 states. [2022-12-14 14:04:05,013 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 413 to 276. [2022-12-14 14:04:05,013 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 276 states, 177 states have (on average 1.694915254237288) internal successors, (300), 253 states have internal predecessors, (300), 17 states have call successors, (17), 5 states have call predecessors, (17), 5 states have return successors, (17), 17 states have call predecessors, (17), 17 states have call successors, (17) [2022-12-14 14:04:05,014 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 276 states to 276 states and 334 transitions. [2022-12-14 14:04:05,014 INFO L78 Accepts]: Start accepts. Automaton has 276 states and 334 transitions. Word has length 99 [2022-12-14 14:04:05,015 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:04:05,015 INFO L495 AbstractCegarLoop]: Abstraction has 276 states and 334 transitions. [2022-12-14 14:04:05,015 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 12 states have (on average 2.9166666666666665) internal successors, (35), 12 states have internal predecessors, (35), 2 states have call successors, (8), 3 states have call predecessors, (8), 4 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) [2022-12-14 14:04:05,015 INFO L276 IsEmpty]: Start isEmpty. Operand 276 states and 334 transitions. [2022-12-14 14:04:05,015 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2022-12-14 14:04:05,015 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:04:05,016 INFO L195 NwaCegarLoop]: trace histogram [50, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:04:05,022 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Ended with exit code 0 [2022-12-14 14:04:05,216 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-12-14 14:04:05,217 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 82 more)] === [2022-12-14 14:04:05,218 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:04:05,219 INFO L85 PathProgramCache]: Analyzing trace with hash -1737964159, now seen corresponding path program 1 times [2022-12-14 14:04:05,219 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:04:05,219 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1219990859] [2022-12-14 14:04:05,220 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:04:05,220 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:04:05,289 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-12-14 14:04:05,289 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [2138380560] [2022-12-14 14:04:05,289 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:04:05,290 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:04:05,290 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:04:05,290 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:04:05,291 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2022-12-14 14:04:05,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:04:05,526 INFO L263 TraceCheckSpWp]: Trace formula consists of 1293 conjuncts, 81 conjunts are in the unsatisfiable core [2022-12-14 14:04:05,529 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:04:05,549 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 14:04:17,135 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:04:17,136 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 14:04:17,147 INFO L321 Elim1Store]: treesize reduction 18, result has 35.7 percent of original size [2022-12-14 14:04:17,148 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 17 treesize of output 21 [2022-12-14 14:04:17,832 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_2996 Int) (|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (and (= (store |c_old(#length)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_2996) |c_#length|) (= (select |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 0))) is different from true [2022-12-14 14:04:17,955 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:04:17,955 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 14:04:18,016 INFO L321 Elim1Store]: treesize reduction 8, result has 52.9 percent of original size [2022-12-14 14:04:18,017 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 14:04:18,582 INFO L134 CoverageAnalysis]: Checked inductivity of 1600 backedges. 706 proven. 280 refuted. 0 times theorem prover too weak. 366 trivial. 248 not checked. [2022-12-14 14:04:18,582 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:04:18,886 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:04:18,887 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1219990859] [2022-12-14 14:04:18,887 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-12-14 14:04:18,887 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2138380560] [2022-12-14 14:04:18,887 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2138380560] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:04:18,887 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [188220275] [2022-12-14 14:04:18,889 INFO L159 IcfgInterpreter]: Started Sifa with 25 locations of interest [2022-12-14 14:04:18,889 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:04:18,889 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:04:18,889 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:04:18,890 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:04:18,908 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-12-14 14:04:18,912 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-12-14 14:04:18,925 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:04:18,985 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:04:19,022 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:04:19,069 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-12-14 14:04:19,070 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 182 treesize of output 185 [2022-12-14 14:04:19,091 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-12-14 14:04:19,091 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 178 treesize of output 181 [2022-12-14 14:04:19,109 INFO L321 Elim1Store]: treesize reduction 15, result has 42.3 percent of original size [2022-12-14 14:04:19,110 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 176 treesize of output 179 [2022-12-14 14:04:19,186 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:04:19,193 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:04:19,200 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:04:19,243 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:04:19,247 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:04:19,270 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:04:19,276 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:04:20,092 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:04:20,103 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 1 [2022-12-14 14:04:20,113 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:04:20,188 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 80 for LOIs [2022-12-14 14:04:20,209 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-12-14 14:04:20,221 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-12-14 14:04:20,311 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:04:20,340 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:04:20,371 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:04:20,401 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:04:20,407 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:04:20,415 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:04:20,422 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:04:52,133 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9711#(and (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (<= 4 |ULTIMATE.start_l3_insert_~list#1.offset|) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (= |ULTIMATE.start_l4_insert_~item~0#1.offset| 0) (= |ULTIMATE.start_l4_insert_~list#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (<= (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (= |~#list~0.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l2_insert_~list#1.offset|) (= |ULTIMATE.start_l3_insert_~item~1#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (= (select |#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (= |ULTIMATE.start_l2_insert_~item~2#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (<= |ULTIMATE.start_l2_insert_~list#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (= |ULTIMATE.start_l0_insert_~item~4#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= |ULTIMATE.start_l1_insert_~list#1.offset| 4) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (<= 0 |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (<= |ULTIMATE.start_l4_insert_~list#1.offset| 0) (= |ULTIMATE.start_l0_insert_#in~list#1.base| |~#list~0.base|) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (< (select |#length| |ULTIMATE.start_l4_insert_~list#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~list#1.offset|)) (<= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= |ULTIMATE.start_l0_insert_~list#1.base| |ULTIMATE.start_l0_insert_#in~list#1.base|) (not (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0)) (<= 0 |ULTIMATE.start_l4_insert_~list#1.offset|) (= |ULTIMATE.start_l0_insert_~item~4#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (<= 4 |ULTIMATE.start_l1_insert_~list#1.offset|) (<= 3 |ULTIMATE.start_l0_insert_~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= (+ |ULTIMATE.start_l0_insert_~item~4#1.offset| 4) |ULTIMATE.start_l1_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| |ULTIMATE.start_l2_insert_#in~list#1.offset|) (= |#NULL.offset| 0) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0) (<= |ULTIMATE.start_l4_insert_#in~list#1.offset| 0) (<= |ULTIMATE.start_l3_insert_~list#1.offset| 4) (= |ULTIMATE.start_l2_insert_~item~2#1.offset| 0) (= (+ |ULTIMATE.start_l2_insert_~item~2#1.offset| 4) |ULTIMATE.start_l3_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l4_insert_#in~list#1.offset|) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| 0) (< 0 |#StackHeapBarrier|) (= |#NULL.base| 0))' at error location [2022-12-14 14:04:52,133 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:04:52,133 INFO L184 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2022-12-14 14:04:52,133 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [23] total 23 [2022-12-14 14:04:52,133 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1006509244] [2022-12-14 14:04:52,134 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2022-12-14 14:04:52,134 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2022-12-14 14:04:52,134 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:04:52,135 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2022-12-14 14:04:52,136 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=202, Invalid=2052, Unknown=6, NotChecked=92, Total=2352 [2022-12-14 14:04:52,136 INFO L87 Difference]: Start difference. First operand 276 states and 334 transitions. Second operand has 24 states, 21 states have (on average 2.0476190476190474) internal successors, (43), 22 states have internal predecessors, (43), 3 states have call successors, (6), 2 states have call predecessors, (6), 4 states have return successors, (6), 4 states have call predecessors, (6), 3 states have call successors, (6) [2022-12-14 14:04:54,159 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:04:56,186 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:05:00,278 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:05:04,377 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:05:06,595 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:05:10,765 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:05:12,925 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:05:15,144 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:05:36,097 WARN L233 SmtUtils]: Spent 10.80s on a formula simplification. DAG size of input: 57 DAG size of output: 48 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 14:05:55,668 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:05:55,668 INFO L93 Difference]: Finished difference Result 403 states and 489 transitions. [2022-12-14 14:05:55,668 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-12-14 14:05:55,668 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 21 states have (on average 2.0476190476190474) internal successors, (43), 22 states have internal predecessors, (43), 3 states have call successors, (6), 2 states have call predecessors, (6), 4 states have return successors, (6), 4 states have call predecessors, (6), 3 states have call successors, (6) Word has length 99 [2022-12-14 14:05:55,668 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:05:55,669 INFO L225 Difference]: With dead ends: 403 [2022-12-14 14:05:55,669 INFO L226 Difference]: Without dead ends: 403 [2022-12-14 14:05:55,670 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 214 GetRequests, 148 SyntacticMatches, 8 SemanticMatches, 58 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 823 ImplicationChecksByTransitivity, 83.5s TimeCoverageRelationStatistics Valid=294, Invalid=3123, Unknown=9, NotChecked=114, Total=3540 [2022-12-14 14:05:55,670 INFO L413 NwaCegarLoop]: 50 mSDtfsCounter, 310 mSDsluCounter, 573 mSDsCounter, 0 mSdLazyCounter, 3544 mSolverCounterSat, 46 mSolverCounterUnsat, 8 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 23.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 318 SdHoareTripleChecker+Valid, 623 SdHoareTripleChecker+Invalid, 3947 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 46 IncrementalHoareTripleChecker+Valid, 3544 IncrementalHoareTripleChecker+Invalid, 8 IncrementalHoareTripleChecker+Unknown, 349 IncrementalHoareTripleChecker+Unchecked, 23.8s IncrementalHoareTripleChecker+Time [2022-12-14 14:05:55,671 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [318 Valid, 623 Invalid, 3947 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [46 Valid, 3544 Invalid, 8 Unknown, 349 Unchecked, 23.8s Time] [2022-12-14 14:05:55,671 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 403 states. [2022-12-14 14:05:55,675 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 403 to 274. [2022-12-14 14:05:55,675 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 274 states, 177 states have (on average 1.6723163841807909) internal successors, (296), 251 states have internal predecessors, (296), 17 states have call successors, (17), 5 states have call predecessors, (17), 5 states have return successors, (17), 17 states have call predecessors, (17), 17 states have call successors, (17) [2022-12-14 14:05:55,676 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 274 states to 274 states and 330 transitions. [2022-12-14 14:05:55,676 INFO L78 Accepts]: Start accepts. Automaton has 274 states and 330 transitions. Word has length 99 [2022-12-14 14:05:55,676 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:05:55,676 INFO L495 AbstractCegarLoop]: Abstraction has 274 states and 330 transitions. [2022-12-14 14:05:55,676 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 21 states have (on average 2.0476190476190474) internal successors, (43), 22 states have internal predecessors, (43), 3 states have call successors, (6), 2 states have call predecessors, (6), 4 states have return successors, (6), 4 states have call predecessors, (6), 3 states have call successors, (6) [2022-12-14 14:05:55,677 INFO L276 IsEmpty]: Start isEmpty. Operand 274 states and 330 transitions. [2022-12-14 14:05:55,677 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2022-12-14 14:05:55,677 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:05:55,677 INFO L195 NwaCegarLoop]: trace histogram [50, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:05:55,684 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Ended with exit code 0 [2022-12-14 14:05:55,878 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:05:55,879 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr8REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 82 more)] === [2022-12-14 14:05:55,880 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:05:55,880 INFO L85 PathProgramCache]: Analyzing trace with hash 72030324, now seen corresponding path program 1 times [2022-12-14 14:05:55,881 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:05:55,881 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1293445551] [2022-12-14 14:05:55,881 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:05:55,882 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:05:55,964 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-12-14 14:05:55,964 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1248872802] [2022-12-14 14:05:55,964 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:05:55,964 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:05:55,964 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:05:55,965 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:05:55,966 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2022-12-14 14:05:56,259 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:05:56,265 INFO L263 TraceCheckSpWp]: Trace formula consists of 1337 conjuncts, 40 conjunts are in the unsatisfiable core [2022-12-14 14:05:56,267 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:05:56,324 WARN L859 $PredicateComparison]: unable to prove that (exists ((|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int) (v_ArrVal_3660 Int)) (and (= |c_#valid| (store |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_3660)) (= (select |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 0))) is different from true [2022-12-14 14:05:56,376 INFO L321 Elim1Store]: treesize reduction 18, result has 35.7 percent of original size [2022-12-14 14:05:56,376 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 17 treesize of output 21 [2022-12-14 14:05:56,388 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_3661 Int) (|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (and (= |c_#valid| (store |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_3661)) (= (select |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 0))) is different from true [2022-12-14 14:05:56,439 INFO L321 Elim1Store]: treesize reduction 18, result has 35.7 percent of original size [2022-12-14 14:05:56,439 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 17 treesize of output 21 [2022-12-14 14:05:56,449 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_3662 Int)) (= |c_#valid| (store |c_old(#valid)| |c_zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_3662))) is different from true [2022-12-14 14:05:56,528 INFO L321 Elim1Store]: treesize reduction 15, result has 25.0 percent of original size [2022-12-14 14:05:56,528 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 14 [2022-12-14 14:05:56,546 INFO L134 CoverageAnalysis]: Checked inductivity of 1600 backedges. 717 proven. 101 refuted. 0 times theorem prover too weak. 325 trivial. 457 not checked. [2022-12-14 14:05:56,546 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:05:56,742 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:05:56,742 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1293445551] [2022-12-14 14:05:56,742 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-12-14 14:05:56,742 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1248872802] [2022-12-14 14:05:56,742 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1248872802] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:05:56,743 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1677562255] [2022-12-14 14:05:56,745 INFO L159 IcfgInterpreter]: Started Sifa with 29 locations of interest [2022-12-14 14:05:56,745 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:05:56,745 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:05:56,745 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:05:56,745 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:05:56,766 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-12-14 14:05:56,771 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-12-14 14:05:56,789 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:05:56,800 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:05:56,811 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:05:56,843 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 197 treesize of output 196 [2022-12-14 14:05:56,852 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-12-14 14:05:56,862 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-12-14 14:05:56,898 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:05:56,907 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:05:56,914 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:05:56,936 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:05:56,940 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:05:56,984 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:05:57,001 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:05:57,849 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:05:57,856 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:05:57,862 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 1 [2022-12-14 14:05:57,911 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-12-14 14:05:57,922 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:05:57,923 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:05:57,931 INFO L321 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2022-12-14 14:05:57,932 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 25 treesize of output 27 [2022-12-14 14:05:57,942 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:05:57,943 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:05:57,953 INFO L321 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2022-12-14 14:05:57,954 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 28 [2022-12-14 14:05:58,003 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:05:58,004 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:05:58,005 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:05:58,015 INFO L321 Elim1Store]: treesize reduction 21, result has 34.4 percent of original size [2022-12-14 14:05:58,015 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 32 treesize of output 34 [2022-12-14 14:05:58,037 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:05:58,038 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:05:58,038 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:05:58,048 INFO L321 Elim1Store]: treesize reduction 21, result has 34.4 percent of original size [2022-12-14 14:05:58,048 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 33 treesize of output 35 [2022-12-14 14:05:58,067 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-12-14 14:05:58,159 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 80 for LOIs [2022-12-14 14:05:58,181 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-12-14 14:05:58,203 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-12-14 14:05:58,278 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:05:58,301 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:05:58,322 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:05:58,357 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:05:58,363 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:05:58,371 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:05:58,378 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:06:05,010 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10830#(and (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (<= 4 |ULTIMATE.start_l3_insert_~list#1.offset|) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (= |ULTIMATE.start_l4_insert_~item~0#1.offset| 0) (= |ULTIMATE.start_l4_insert_~list#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (<= (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (= |~#list~0.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l2_insert_~list#1.offset|) (= |ULTIMATE.start_l3_insert_~item~1#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (not (= (select |#valid| |ULTIMATE.start_l3_insert_~list#1.base|) 1)) (= (select |#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (= |ULTIMATE.start_l2_insert_~item~2#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (<= |ULTIMATE.start_l2_insert_~list#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (= |ULTIMATE.start_l0_insert_~item~4#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~list#1.base|) |ULTIMATE.start_l4_insert_~list#1.offset|) |ULTIMATE.start_l4_insert_~item~0#1.offset|) (<= |ULTIMATE.start_l1_insert_~list#1.offset| 4) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (= (select |#valid| |ULTIMATE.start_l4_insert_~list#1.base|) 1) (= |ULTIMATE.start_l4_insert_~item~0#1.base| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~list#1.base|) |ULTIMATE.start_l4_insert_~list#1.offset|)) (<= 0 |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= (+ 4 |ULTIMATE.start_l4_insert_~list#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~list#1.base|)) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (<= |ULTIMATE.start_l4_insert_~list#1.offset| 0) (= |ULTIMATE.start_l0_insert_#in~list#1.base| |~#list~0.base|) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= |ULTIMATE.start_l0_insert_~list#1.base| |ULTIMATE.start_l0_insert_#in~list#1.base|) (not (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0)) (<= 0 |ULTIMATE.start_l4_insert_~list#1.offset|) (= |ULTIMATE.start_l0_insert_~item~4#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (<= 4 |ULTIMATE.start_l1_insert_~list#1.offset|) (<= 3 |ULTIMATE.start_l0_insert_~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= (+ |ULTIMATE.start_l0_insert_~item~4#1.offset| 4) |ULTIMATE.start_l1_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| |ULTIMATE.start_l2_insert_#in~list#1.offset|) (= |#NULL.offset| 0) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0) (<= |ULTIMATE.start_l4_insert_#in~list#1.offset| 0) (<= |ULTIMATE.start_l3_insert_~list#1.offset| 4) (= |ULTIMATE.start_l2_insert_~item~2#1.offset| 0) (= (+ |ULTIMATE.start_l2_insert_~item~2#1.offset| 4) |ULTIMATE.start_l3_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l4_insert_#in~list#1.offset|) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| 0) (< 0 |#StackHeapBarrier|) (= |#NULL.base| 0))' at error location [2022-12-14 14:06:05,010 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:06:05,010 INFO L184 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2022-12-14 14:06:05,010 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12] total 12 [2022-12-14 14:06:05,010 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1316899103] [2022-12-14 14:06:05,010 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2022-12-14 14:06:05,011 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-12-14 14:06:05,011 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:06:05,011 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-12-14 14:06:05,011 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=222, Invalid=1347, Unknown=3, NotChecked=234, Total=1806 [2022-12-14 14:06:05,012 INFO L87 Difference]: Start difference. First operand 274 states and 330 transitions. Second operand has 13 states, 11 states have (on average 3.8181818181818183) internal successors, (42), 11 states have internal predecessors, (42), 2 states have call successors, (6), 2 states have call predecessors, (6), 5 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-12-14 14:06:05,883 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:06:05,883 INFO L93 Difference]: Finished difference Result 405 states and 487 transitions. [2022-12-14 14:06:05,883 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-12-14 14:06:05,883 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 11 states have (on average 3.8181818181818183) internal successors, (42), 11 states have internal predecessors, (42), 2 states have call successors, (6), 2 states have call predecessors, (6), 5 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 103 [2022-12-14 14:06:05,883 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:06:05,884 INFO L225 Difference]: With dead ends: 405 [2022-12-14 14:06:05,884 INFO L226 Difference]: Without dead ends: 405 [2022-12-14 14:06:05,885 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 238 GetRequests, 181 SyntacticMatches, 9 SemanticMatches, 48 ConstructedPredicates, 3 IntricatePredicates, 0 DeprecatedPredicates, 476 ImplicationChecksByTransitivity, 6.9s TimeCoverageRelationStatistics Valid=272, Invalid=1899, Unknown=3, NotChecked=276, Total=2450 [2022-12-14 14:06:05,885 INFO L413 NwaCegarLoop]: 158 mSDtfsCounter, 368 mSDsluCounter, 998 mSDsCounter, 0 mSdLazyCounter, 880 mSolverCounterSat, 44 mSolverCounterUnsat, 39 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 368 SdHoareTripleChecker+Valid, 1156 SdHoareTripleChecker+Invalid, 1707 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 44 IncrementalHoareTripleChecker+Valid, 880 IncrementalHoareTripleChecker+Invalid, 39 IncrementalHoareTripleChecker+Unknown, 744 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-12-14 14:06:05,885 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [368 Valid, 1156 Invalid, 1707 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [44 Valid, 880 Invalid, 39 Unknown, 744 Unchecked, 0.7s Time] [2022-12-14 14:06:05,886 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 405 states. [2022-12-14 14:06:05,890 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 405 to 271. [2022-12-14 14:06:05,890 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 271 states, 177 states have (on average 1.6384180790960452) internal successors, (290), 248 states have internal predecessors, (290), 17 states have call successors, (17), 5 states have call predecessors, (17), 5 states have return successors, (17), 17 states have call predecessors, (17), 17 states have call successors, (17) [2022-12-14 14:06:05,891 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 271 states to 271 states and 324 transitions. [2022-12-14 14:06:05,891 INFO L78 Accepts]: Start accepts. Automaton has 271 states and 324 transitions. Word has length 103 [2022-12-14 14:06:05,892 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:06:05,892 INFO L495 AbstractCegarLoop]: Abstraction has 271 states and 324 transitions. [2022-12-14 14:06:05,892 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 11 states have (on average 3.8181818181818183) internal successors, (42), 11 states have internal predecessors, (42), 2 states have call successors, (6), 2 states have call predecessors, (6), 5 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-12-14 14:06:05,892 INFO L276 IsEmpty]: Start isEmpty. Operand 271 states and 324 transitions. [2022-12-14 14:06:05,893 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2022-12-14 14:06:05,893 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:06:05,893 INFO L195 NwaCegarLoop]: trace histogram [50, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:06:05,900 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Ended with exit code 0 [2022-12-14 14:06:06,093 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:06:06,093 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 82 more)] === [2022-12-14 14:06:06,094 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:06:06,094 INFO L85 PathProgramCache]: Analyzing trace with hash 72030325, now seen corresponding path program 1 times [2022-12-14 14:06:06,094 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:06:06,094 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [480677061] [2022-12-14 14:06:06,094 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:06:06,094 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:06:06,134 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-12-14 14:06:06,135 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [153658264] [2022-12-14 14:06:06,135 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:06:06,135 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:06:06,135 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:06:06,136 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:06:06,137 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2022-12-14 14:06:06,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:06:06,553 INFO L263 TraceCheckSpWp]: Trace formula consists of 1337 conjuncts, 128 conjunts are in the unsatisfiable core [2022-12-14 14:06:06,557 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:06:06,616 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 14:06:17,797 WARN L859 $PredicateComparison]: unable to prove that (exists ((|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int) (v_ArrVal_4330 Int) (v_ArrVal_4331 Int)) (and (= |c_#valid| (store |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_4330)) (= (store |c_old(#length)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_4331) |c_#length|) (= (select |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 0))) is different from true [2022-12-14 14:06:17,909 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:06:17,910 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 14:06:17,998 INFO L321 Elim1Store]: treesize reduction 18, result has 35.7 percent of original size [2022-12-14 14:06:17,998 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 17 treesize of output 21 [2022-12-14 14:06:18,179 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_4332 Int) (|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (and (= (store |c_old(#length)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_4332) |c_#length|) (= (select |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 0))) is different from true [2022-12-14 14:06:18,292 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:06:18,292 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 14:06:18,298 INFO L321 Elim1Store]: treesize reduction 4, result has 50.0 percent of original size [2022-12-14 14:06:18,298 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 11 [2022-12-14 14:06:19,109 WARN L859 $PredicateComparison]: unable to prove that (exists ((|zalloc_or_die_calloc_model_~size#1| Int) (v_ArrVal_4333 Int) (|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int) (|zalloc_or_die_calloc_model_~nmemb#1| Int)) (let ((.cse0 (* |zalloc_or_die_calloc_model_~nmemb#1| |zalloc_or_die_calloc_model_~size#1|))) (and (<= (mod .cse0 4294967296) v_ArrVal_4333) (= (store |c_old(#length)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_4333) |c_#length|) (= |c_zalloc_or_die_#Ultimate.C_memset_#amount#1| .cse0)))) is different from true [2022-12-14 14:06:20,626 WARN L859 $PredicateComparison]: unable to prove that (exists ((|zalloc_or_die_calloc_model_~size#1| Int) (v_ArrVal_4333 Int) (|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int) (|zalloc_or_die_calloc_model_~nmemb#1| Int)) (let ((.cse0 (mod (* |zalloc_or_die_calloc_model_~nmemb#1| |zalloc_or_die_calloc_model_~size#1|) 4294967296))) (and (<= .cse0 v_ArrVal_4333) (< 8 .cse0) (= (store |c_old(#length)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_4333) |c_#length|)))) is different from true [2022-12-14 14:06:21,077 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 14:06:21,078 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 16 treesize of output 22 [2022-12-14 14:06:26,295 INFO L134 CoverageAnalysis]: Checked inductivity of 1600 backedges. 391 proven. 418 refuted. 0 times theorem prover too weak. 116 trivial. 675 not checked. [2022-12-14 14:06:26,295 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:06:28,157 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:06:28,157 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [480677061] [2022-12-14 14:06:28,157 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-12-14 14:06:28,158 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [153658264] [2022-12-14 14:06:28,158 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [153658264] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:06:28,158 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [352217560] [2022-12-14 14:06:28,160 INFO L159 IcfgInterpreter]: Started Sifa with 29 locations of interest [2022-12-14 14:06:28,160 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:06:28,160 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:06:28,160 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:06:28,160 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:06:28,181 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-12-14 14:06:28,190 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-12-14 14:06:28,206 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:06:28,242 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:06:28,253 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:06:28,331 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-12-14 14:06:28,331 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 182 treesize of output 185 [2022-12-14 14:06:28,384 INFO L321 Elim1Store]: treesize reduction 15, result has 42.3 percent of original size [2022-12-14 14:06:28,384 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 180 treesize of output 183 [2022-12-14 14:06:28,405 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-12-14 14:06:28,406 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 174 treesize of output 177 [2022-12-14 14:06:28,465 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:06:28,471 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:06:28,475 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:06:28,506 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:06:28,509 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:06:28,543 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:06:28,559 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:06:29,366 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:06:29,375 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:06:29,383 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 1 [2022-12-14 14:06:29,439 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:06:29,439 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:06:29,447 INFO L321 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2022-12-14 14:06:29,447 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 25 treesize of output 27 [2022-12-14 14:06:29,458 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:06:29,458 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:06:29,466 INFO L321 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2022-12-14 14:06:29,466 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 28 [2022-12-14 14:06:29,479 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-12-14 14:06:29,531 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:06:29,531 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:06:29,532 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:06:29,542 INFO L321 Elim1Store]: treesize reduction 21, result has 34.4 percent of original size [2022-12-14 14:06:29,542 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 32 treesize of output 34 [2022-12-14 14:06:29,556 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:06:29,557 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:06:29,558 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:06:29,567 INFO L321 Elim1Store]: treesize reduction 21, result has 34.4 percent of original size [2022-12-14 14:06:29,568 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 33 treesize of output 35 [2022-12-14 14:06:29,580 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-12-14 14:06:29,682 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 80 for LOIs [2022-12-14 14:06:29,717 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-12-14 14:06:29,735 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-12-14 14:06:29,818 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:06:29,851 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:06:29,867 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:06:29,903 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:06:29,908 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:06:29,918 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:06:29,925 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:07:14,896 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11921#(and (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (<= 4 |ULTIMATE.start_l3_insert_~list#1.offset|) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (= |ULTIMATE.start_l4_insert_~item~0#1.offset| 0) (= |ULTIMATE.start_l4_insert_~list#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (<= (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (= |~#list~0.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l2_insert_~list#1.offset|) (= |ULTIMATE.start_l3_insert_~item~1#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (= (select |#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (= |ULTIMATE.start_l2_insert_~item~2#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (<= |ULTIMATE.start_l2_insert_~list#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (= |ULTIMATE.start_l0_insert_~item~4#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~list#1.base|) |ULTIMATE.start_l4_insert_~list#1.offset|) |ULTIMATE.start_l4_insert_~item~0#1.offset|) (<= |ULTIMATE.start_l1_insert_~list#1.offset| 4) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (= (select |#valid| |ULTIMATE.start_l4_insert_~list#1.base|) 1) (= |ULTIMATE.start_l4_insert_~item~0#1.base| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~list#1.base|) |ULTIMATE.start_l4_insert_~list#1.offset|)) (<= 0 |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= (+ 4 |ULTIMATE.start_l4_insert_~list#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~list#1.base|)) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (<= |ULTIMATE.start_l4_insert_~list#1.offset| 0) (= |ULTIMATE.start_l0_insert_#in~list#1.base| |~#list~0.base|) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= |ULTIMATE.start_l0_insert_~list#1.base| |ULTIMATE.start_l0_insert_#in~list#1.base|) (not (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0)) (<= 0 |ULTIMATE.start_l4_insert_~list#1.offset|) (= |ULTIMATE.start_l0_insert_~item~4#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (<= 4 |ULTIMATE.start_l1_insert_~list#1.offset|) (<= 3 |ULTIMATE.start_l0_insert_~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| 0) (< (select |#length| |ULTIMATE.start_l3_insert_~list#1.base|) (+ |ULTIMATE.start_l3_insert_~list#1.offset| 4)) (= |ULTIMATE.start_l0_insert_~list#1.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= (+ |ULTIMATE.start_l0_insert_~item~4#1.offset| 4) |ULTIMATE.start_l1_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| |ULTIMATE.start_l2_insert_#in~list#1.offset|) (= |#NULL.offset| 0) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0) (<= |ULTIMATE.start_l4_insert_#in~list#1.offset| 0) (<= |ULTIMATE.start_l3_insert_~list#1.offset| 4) (= |ULTIMATE.start_l2_insert_~item~2#1.offset| 0) (= (+ |ULTIMATE.start_l2_insert_~item~2#1.offset| 4) |ULTIMATE.start_l3_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l4_insert_#in~list#1.offset|) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| 0) (< 0 |#StackHeapBarrier|) (= |#NULL.base| 0))' at error location [2022-12-14 14:07:14,897 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:07:14,897 INFO L184 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2022-12-14 14:07:14,897 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [42] total 42 [2022-12-14 14:07:14,897 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1963685010] [2022-12-14 14:07:14,897 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2022-12-14 14:07:14,898 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 43 states [2022-12-14 14:07:14,898 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:07:14,898 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 43 interpolants. [2022-12-14 14:07:14,901 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=307, Invalid=4239, Unknown=26, NotChecked=540, Total=5112 [2022-12-14 14:07:14,901 INFO L87 Difference]: Start difference. First operand 271 states and 324 transitions. Second operand has 43 states, 41 states have (on average 1.6585365853658536) internal successors, (68), 40 states have internal predecessors, (68), 3 states have call successors, (6), 3 states have call predecessors, (6), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2022-12-14 14:07:16,956 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:07:18,965 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:07:21,129 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:07:25,453 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:07:29,765 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:07:34,016 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:07:38,255 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:07:40,905 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:07:45,252 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:07:49,568 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:07:53,930 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:08:31,713 WARN L233 SmtUtils]: Spent 8.17s on a formula simplification. DAG size of input: 52 DAG size of output: 47 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 14:08:43,746 WARN L233 SmtUtils]: Spent 9.09s on a formula simplification. DAG size of input: 64 DAG size of output: 57 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 14:09:08,586 WARN L233 SmtUtils]: Spent 16.95s on a formula simplification. DAG size of input: 61 DAG size of output: 56 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 14:09:15,342 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:09:17,390 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:09:19,400 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:09:32,862 WARN L233 SmtUtils]: Spent 10.39s on a formula simplification. DAG size of input: 46 DAG size of output: 38 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 14:09:34,904 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:09:37,005 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:09:39,082 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:09:48,851 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:09:51,526 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:09:54,944 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:09:57,089 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:10:04,289 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:10:06,453 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:10:08,607 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:10:10,659 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:10:25,868 WARN L233 SmtUtils]: Spent 12.43s on a formula simplification. DAG size of input: 46 DAG size of output: 38 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 14:10:29,752 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:10:32,534 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:10:36,616 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:10:36,616 INFO L93 Difference]: Finished difference Result 422 states and 528 transitions. [2022-12-14 14:10:36,616 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2022-12-14 14:10:36,617 INFO L78 Accepts]: Start accepts. Automaton has has 43 states, 41 states have (on average 1.6585365853658536) internal successors, (68), 40 states have internal predecessors, (68), 3 states have call successors, (6), 3 states have call predecessors, (6), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) Word has length 103 [2022-12-14 14:10:36,617 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:10:36,620 INFO L225 Difference]: With dead ends: 422 [2022-12-14 14:10:36,620 INFO L226 Difference]: Without dead ends: 422 [2022-12-14 14:10:36,623 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 234 GetRequests, 138 SyntacticMatches, 6 SemanticMatches, 90 ConstructedPredicates, 4 IntricatePredicates, 0 DeprecatedPredicates, 2125 ImplicationChecksByTransitivity, 198.0s TimeCoverageRelationStatistics Valid=477, Invalid=7139, Unknown=56, NotChecked=700, Total=8372 [2022-12-14 14:10:36,623 INFO L413 NwaCegarLoop]: 62 mSDtfsCounter, 577 mSDsluCounter, 1274 mSDsCounter, 0 mSdLazyCounter, 6995 mSolverCounterSat, 87 mSolverCounterUnsat, 27 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 65.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 585 SdHoareTripleChecker+Valid, 1336 SdHoareTripleChecker+Invalid, 8219 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 87 IncrementalHoareTripleChecker+Valid, 6995 IncrementalHoareTripleChecker+Invalid, 27 IncrementalHoareTripleChecker+Unknown, 1110 IncrementalHoareTripleChecker+Unchecked, 66.3s IncrementalHoareTripleChecker+Time [2022-12-14 14:10:36,624 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [585 Valid, 1336 Invalid, 8219 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [87 Valid, 6995 Invalid, 27 Unknown, 1110 Unchecked, 66.3s Time] [2022-12-14 14:10:36,624 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 422 states. [2022-12-14 14:10:36,629 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 422 to 268. [2022-12-14 14:10:36,629 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 268 states, 177 states have (on average 1.6045197740112995) internal successors, (284), 245 states have internal predecessors, (284), 17 states have call successors, (17), 5 states have call predecessors, (17), 5 states have return successors, (17), 17 states have call predecessors, (17), 17 states have call successors, (17) [2022-12-14 14:10:36,630 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 268 states to 268 states and 318 transitions. [2022-12-14 14:10:36,630 INFO L78 Accepts]: Start accepts. Automaton has 268 states and 318 transitions. Word has length 103 [2022-12-14 14:10:36,630 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:10:36,630 INFO L495 AbstractCegarLoop]: Abstraction has 268 states and 318 transitions. [2022-12-14 14:10:36,630 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 43 states, 41 states have (on average 1.6585365853658536) internal successors, (68), 40 states have internal predecessors, (68), 3 states have call successors, (6), 3 states have call predecessors, (6), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2022-12-14 14:10:36,630 INFO L276 IsEmpty]: Start isEmpty. Operand 268 states and 318 transitions. [2022-12-14 14:10:36,631 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2022-12-14 14:10:36,631 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:10:36,631 INFO L195 NwaCegarLoop]: trace histogram [50, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:10:36,639 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Forceful destruction successful, exit code 0 [2022-12-14 14:10:36,831 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2022-12-14 14:10:36,832 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 82 more)] === [2022-12-14 14:10:36,832 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:10:36,832 INFO L85 PathProgramCache]: Analyzing trace with hash -2062027218, now seen corresponding path program 1 times [2022-12-14 14:10:36,832 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:10:36,832 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1586362096] [2022-12-14 14:10:36,833 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:10:36,833 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:10:36,876 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-12-14 14:10:36,876 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [767915011] [2022-12-14 14:10:36,876 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:10:36,876 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:10:36,876 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:10:36,877 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:10:36,878 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2022-12-14 14:10:40,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:10:40,193 INFO L263 TraceCheckSpWp]: Trace formula consists of 1345 conjuncts, 90 conjunts are in the unsatisfiable core [2022-12-14 14:10:40,197 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:10:40,231 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 14:10:50,196 INFO L321 Elim1Store]: treesize reduction 18, result has 35.7 percent of original size [2022-12-14 14:10:50,196 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 17 treesize of output 21 [2022-12-14 14:10:50,373 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 14:10:51,160 WARN L859 $PredicateComparison]: unable to prove that (exists ((|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int) (v_ArrVal_5000 Int)) (and (= (store |c_old(#length)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_5000) |c_#length|) (= (select |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 0))) is different from true [2022-12-14 14:10:51,319 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:10:51,320 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 14:10:51,330 INFO L321 Elim1Store]: treesize reduction 8, result has 52.9 percent of original size [2022-12-14 14:10:51,330 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 14:10:52,468 INFO L134 CoverageAnalysis]: Checked inductivity of 1600 backedges. 622 proven. 400 refuted. 0 times theorem prover too weak. 297 trivial. 281 not checked. [2022-12-14 14:10:52,468 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:10:56,834 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:10:56,834 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1586362096] [2022-12-14 14:10:56,834 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-12-14 14:10:56,834 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [767915011] [2022-12-14 14:10:56,834 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [767915011] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:10:56,834 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1447146272] [2022-12-14 14:10:56,836 INFO L159 IcfgInterpreter]: Started Sifa with 30 locations of interest [2022-12-14 14:10:56,836 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:10:56,836 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:10:56,836 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:10:56,836 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:10:56,858 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-12-14 14:10:56,863 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-12-14 14:10:56,877 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:10:56,913 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:10:56,997 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:10:57,073 INFO L321 Elim1Store]: treesize reduction 15, result has 42.3 percent of original size [2022-12-14 14:10:57,074 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 184 treesize of output 187 [2022-12-14 14:10:57,097 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-12-14 14:10:57,098 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 178 treesize of output 181 [2022-12-14 14:10:57,118 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-12-14 14:10:57,119 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 174 treesize of output 177 [2022-12-14 14:10:57,209 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:10:57,215 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:10:57,221 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:10:57,247 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:10:57,251 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:10:57,284 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:10:57,289 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:10:58,132 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 1 [2022-12-14 14:10:58,141 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:10:58,150 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:10:58,235 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:10:58,235 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:10:58,243 INFO L321 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2022-12-14 14:10:58,244 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 28 [2022-12-14 14:10:58,257 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-12-14 14:10:58,276 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:10:58,277 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:10:58,288 INFO L321 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2022-12-14 14:10:58,289 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 25 treesize of output 27 [2022-12-14 14:10:58,327 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:10:58,327 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:10:58,328 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:10:58,341 INFO L321 Elim1Store]: treesize reduction 21, result has 34.4 percent of original size [2022-12-14 14:10:58,342 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 33 treesize of output 35 [2022-12-14 14:10:58,364 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:10:58,365 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:10:58,366 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:10:58,380 INFO L321 Elim1Store]: treesize reduction 21, result has 34.4 percent of original size [2022-12-14 14:10:58,380 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 32 treesize of output 34 [2022-12-14 14:10:58,401 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-12-14 14:10:58,511 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 80 for LOIs [2022-12-14 14:10:58,540 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-12-14 14:10:58,557 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-12-14 14:10:58,643 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:10:58,681 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:10:58,719 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:10:58,773 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:10:58,781 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:10:58,789 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:10:58,803 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:11:37,404 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '13044#(and (<= (+ |ULTIMATE.start_l3_insert_~list#1.offset| 4) (select |#length| |ULTIMATE.start_l3_insert_~list#1.base|)) (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (<= 4 |ULTIMATE.start_l3_insert_~list#1.offset|) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (= |ULTIMATE.start_l4_insert_~item~0#1.offset| 0) (= |ULTIMATE.start_l4_insert_~list#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (<= (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (= |~#list~0.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l2_insert_~list#1.offset|) (= |ULTIMATE.start_l3_insert_~item~1#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (= (select |#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (= |ULTIMATE.start_l2_insert_~item~2#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (<= |ULTIMATE.start_l2_insert_~list#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (= |ULTIMATE.start_l0_insert_~item~4#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~list#1.base|) |ULTIMATE.start_l4_insert_~list#1.offset|) |ULTIMATE.start_l4_insert_~item~0#1.offset|) (<= |ULTIMATE.start_l1_insert_~list#1.offset| 4) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (= (select |#valid| |ULTIMATE.start_l4_insert_~list#1.base|) 1) (= |ULTIMATE.start_l4_insert_~item~0#1.base| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~list#1.base|) |ULTIMATE.start_l4_insert_~list#1.offset|)) (<= 0 |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= (select |#valid| |ULTIMATE.start_l3_insert_~list#1.base|) 1) (<= (+ 4 |ULTIMATE.start_l4_insert_~list#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~list#1.base|)) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (<= |ULTIMATE.start_l4_insert_~list#1.offset| 0) (= |ULTIMATE.start_l0_insert_#in~list#1.base| |~#list~0.base|) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (< (select |#length| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8)) (<= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= |ULTIMATE.start_l0_insert_~list#1.base| |ULTIMATE.start_l0_insert_#in~list#1.base|) (not (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0)) (<= 0 |ULTIMATE.start_l4_insert_~list#1.offset|) (= |ULTIMATE.start_l0_insert_~item~4#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (<= 4 |ULTIMATE.start_l1_insert_~list#1.offset|) (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l3_insert_~list#1.base|) |ULTIMATE.start_l3_insert_~list#1.offset|) |ULTIMATE.start_l3_insert_#t~mem11#1.base|) (<= 3 |ULTIMATE.start_l0_insert_~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= (+ |ULTIMATE.start_l0_insert_~item~4#1.offset| 4) |ULTIMATE.start_l1_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| |ULTIMATE.start_l2_insert_#in~list#1.offset|) (= |#NULL.offset| 0) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0) (<= |ULTIMATE.start_l4_insert_#in~list#1.offset| 0) (<= |ULTIMATE.start_l3_insert_~list#1.offset| 4) (= |ULTIMATE.start_l2_insert_~item~2#1.offset| 0) (= |ULTIMATE.start_l3_insert_#t~mem11#1.offset| (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l3_insert_~list#1.base|) |ULTIMATE.start_l3_insert_~list#1.offset|)) (= (+ |ULTIMATE.start_l2_insert_~item~2#1.offset| 4) |ULTIMATE.start_l3_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l4_insert_#in~list#1.offset|) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| 0) (< 0 |#StackHeapBarrier|) (= |#NULL.base| 0))' at error location [2022-12-14 14:11:37,404 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:11:37,404 INFO L184 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2022-12-14 14:11:37,404 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [28] total 28 [2022-12-14 14:11:37,404 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1408458383] [2022-12-14 14:11:37,404 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2022-12-14 14:11:37,404 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2022-12-14 14:11:37,404 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:11:37,405 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2022-12-14 14:11:37,405 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=282, Invalid=3022, Unknown=6, NotChecked=112, Total=3422 [2022-12-14 14:11:37,406 INFO L87 Difference]: Start difference. First operand 268 states and 318 transitions. Second operand has 29 states, 27 states have (on average 1.962962962962963) internal successors, (53), 27 states have internal predecessors, (53), 3 states have call successors, (6), 2 states have call predecessors, (6), 4 states have return successors, (6), 4 states have call predecessors, (6), 3 states have call successors, (6) [2022-12-14 14:11:39,438 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:11:41,452 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:11:45,562 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:11:47,633 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:11:49,882 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:11:52,068 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:11:55,477 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:11:59,678 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:12:01,847 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:12:06,094 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:12:08,268 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:12:20,712 WARN L233 SmtUtils]: Spent 6.24s on a formula simplification. DAG size of input: 48 DAG size of output: 41 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 14:12:33,252 WARN L233 SmtUtils]: Spent 10.51s on a formula simplification. DAG size of input: 57 DAG size of output: 50 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 14:12:40,988 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:12:43,059 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:12:43,059 INFO L93 Difference]: Finished difference Result 396 states and 475 transitions. [2022-12-14 14:12:43,059 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-12-14 14:12:43,059 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 27 states have (on average 1.962962962962963) internal successors, (53), 27 states have internal predecessors, (53), 3 states have call successors, (6), 2 states have call predecessors, (6), 4 states have return successors, (6), 4 states have call predecessors, (6), 3 states have call successors, (6) Word has length 104 [2022-12-14 14:12:43,060 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:12:43,061 INFO L225 Difference]: With dead ends: 396 [2022-12-14 14:12:43,061 INFO L226 Difference]: Without dead ends: 396 [2022-12-14 14:12:43,062 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 228 GetRequests, 152 SyntacticMatches, 8 SemanticMatches, 68 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 1169 ImplicationChecksByTransitivity, 88.3s TimeCoverageRelationStatistics Valid=377, Invalid=4309, Unknown=10, NotChecked=134, Total=4830 [2022-12-14 14:12:43,062 INFO L413 NwaCegarLoop]: 58 mSDtfsCounter, 353 mSDsluCounter, 855 mSDsCounter, 0 mSdLazyCounter, 4280 mSolverCounterSat, 45 mSolverCounterUnsat, 12 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 30.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 361 SdHoareTripleChecker+Valid, 913 SdHoareTripleChecker+Invalid, 4589 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 4280 IncrementalHoareTripleChecker+Invalid, 12 IncrementalHoareTripleChecker+Unknown, 252 IncrementalHoareTripleChecker+Unchecked, 30.7s IncrementalHoareTripleChecker+Time [2022-12-14 14:12:43,062 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [361 Valid, 913 Invalid, 4589 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 4280 Invalid, 12 Unknown, 252 Unchecked, 30.7s Time] [2022-12-14 14:12:43,063 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 396 states. [2022-12-14 14:12:43,069 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 396 to 267. [2022-12-14 14:12:43,069 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 267 states, 177 states have (on average 1.5932203389830508) internal successors, (282), 244 states have internal predecessors, (282), 17 states have call successors, (17), 5 states have call predecessors, (17), 5 states have return successors, (17), 17 states have call predecessors, (17), 17 states have call successors, (17) [2022-12-14 14:12:43,071 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 267 states to 267 states and 316 transitions. [2022-12-14 14:12:43,071 INFO L78 Accepts]: Start accepts. Automaton has 267 states and 316 transitions. Word has length 104 [2022-12-14 14:12:43,071 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:12:43,071 INFO L495 AbstractCegarLoop]: Abstraction has 267 states and 316 transitions. [2022-12-14 14:12:43,071 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 27 states have (on average 1.962962962962963) internal successors, (53), 27 states have internal predecessors, (53), 3 states have call successors, (6), 2 states have call predecessors, (6), 4 states have return successors, (6), 4 states have call predecessors, (6), 3 states have call successors, (6) [2022-12-14 14:12:43,072 INFO L276 IsEmpty]: Start isEmpty. Operand 267 states and 316 transitions. [2022-12-14 14:12:43,072 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 108 [2022-12-14 14:12:43,072 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:12:43,072 INFO L195 NwaCegarLoop]: trace histogram [50, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:12:43,109 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Ended with exit code 0 [2022-12-14 14:12:43,273 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2022-12-14 14:12:43,274 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr14REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 82 more)] === [2022-12-14 14:12:43,275 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:12:43,276 INFO L85 PathProgramCache]: Analyzing trace with hash 1075844653, now seen corresponding path program 1 times [2022-12-14 14:12:43,276 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:12:43,276 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1130139945] [2022-12-14 14:12:43,277 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:12:43,277 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:12:43,348 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-12-14 14:12:43,348 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [593552751] [2022-12-14 14:12:43,348 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:12:43,349 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:12:43,349 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:12:43,349 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:12:43,350 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2022-12-14 14:12:43,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:12:43,731 INFO L263 TraceCheckSpWp]: Trace formula consists of 1381 conjuncts, 65 conjunts are in the unsatisfiable core [2022-12-14 14:12:43,734 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:12:43,785 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_5688 Int) (|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (and (= |c_#valid| (store |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_5688)) (= (select |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 0))) is different from true [2022-12-14 14:12:43,834 INFO L321 Elim1Store]: treesize reduction 18, result has 35.7 percent of original size [2022-12-14 14:12:43,834 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 17 treesize of output 21 [2022-12-14 14:12:43,843 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_5689 Int)) (= |c_#valid| (store |c_old(#valid)| |c_zalloc_or_die_calloc_model_~ptr~0#1.base| v_ArrVal_5689))) is different from true [2022-12-14 14:12:43,859 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_5689 Int)) (= |c_#valid| (store |c_old(#valid)| |c_zalloc_or_die_#res#1.base| v_ArrVal_5689))) is different from true [2022-12-14 14:12:43,867 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 14:12:43,867 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 18 [2022-12-14 14:12:43,895 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_5690 Int)) (= |c_#valid| (store |c_old(#valid)| |c_zalloc_or_die_calloc_model_~ptr~0#1.base| v_ArrVal_5690))) is different from true [2022-12-14 14:12:43,910 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_5690 Int)) (= |c_#valid| (store |c_old(#valid)| |c_zalloc_or_die_#res#1.base| v_ArrVal_5690))) is different from true [2022-12-14 14:12:43,920 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 14:12:43,921 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 16 treesize of output 22 [2022-12-14 14:12:43,958 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_5691 Int)) (= |c_#valid| (store |c_old(#valid)| |c_zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_5691))) is different from true [2022-12-14 14:12:44,028 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 14:12:44,028 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 25 [2022-12-14 14:12:44,150 INFO L134 CoverageAnalysis]: Checked inductivity of 1600 backedges. 446 proven. 101 refuted. 0 times theorem prover too weak. 242 trivial. 811 not checked. [2022-12-14 14:12:44,150 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:12:44,252 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:12:44,252 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1130139945] [2022-12-14 14:12:44,252 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-12-14 14:12:44,253 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [593552751] [2022-12-14 14:12:44,253 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [593552751] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:12:44,253 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1793983755] [2022-12-14 14:12:44,254 INFO L159 IcfgInterpreter]: Started Sifa with 33 locations of interest [2022-12-14 14:12:44,254 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:12:44,254 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:12:44,254 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:12:44,254 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:12:44,272 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-12-14 14:12:44,277 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-12-14 14:12:44,317 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:12:44,326 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:12:44,334 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:12:44,361 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-12-14 14:12:44,371 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 197 treesize of output 196 [2022-12-14 14:12:44,379 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-12-14 14:12:44,411 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:12:44,416 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:12:44,420 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:12:44,444 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:12:44,447 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:12:44,505 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:12:44,509 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:12:45,378 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:12:45,389 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:12:45,401 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 1 [2022-12-14 14:12:45,458 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:12:45,458 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:12:45,468 INFO L321 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2022-12-14 14:12:45,468 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 25 treesize of output 27 [2022-12-14 14:12:45,481 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-12-14 14:12:45,492 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:12:45,493 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:12:45,502 INFO L321 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2022-12-14 14:12:45,503 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 28 [2022-12-14 14:12:45,541 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-12-14 14:12:45,556 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:12:45,556 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:12:45,557 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:12:45,570 INFO L321 Elim1Store]: treesize reduction 21, result has 34.4 percent of original size [2022-12-14 14:12:45,570 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 33 treesize of output 35 [2022-12-14 14:12:45,583 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:12:45,584 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:12:45,585 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:12:45,595 INFO L321 Elim1Store]: treesize reduction 21, result has 34.4 percent of original size [2022-12-14 14:12:45,596 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 32 treesize of output 34 [2022-12-14 14:12:45,681 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 1 [2022-12-14 14:12:45,695 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:12:45,696 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:12:45,697 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:12:45,720 INFO L321 Elim1Store]: treesize reduction 30, result has 49.2 percent of original size [2022-12-14 14:12:45,720 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 5 case distinctions, treesize of input 35 treesize of output 52 [2022-12-14 14:12:45,743 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:12:45,744 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:12:45,744 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:12:45,770 INFO L321 Elim1Store]: treesize reduction 30, result has 49.2 percent of original size [2022-12-14 14:12:45,770 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 5 case distinctions, treesize of input 34 treesize of output 51 [2022-12-14 14:12:45,838 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:12:45,840 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:12:45,840 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:12:45,841 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:12:45,867 INFO L321 Elim1Store]: treesize reduction 44, result has 44.3 percent of original size [2022-12-14 14:12:45,867 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 78 treesize of output 81 [2022-12-14 14:12:45,913 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-12-14 14:12:45,930 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:12:45,932 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:12:45,932 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:12:45,932 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:12:45,953 INFO L321 Elim1Store]: treesize reduction 56, result has 29.1 percent of original size [2022-12-14 14:12:45,953 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 57 treesize of output 58 [2022-12-14 14:12:46,104 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 80 for LOIs [2022-12-14 14:12:46,135 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-12-14 14:12:46,152 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-12-14 14:12:46,233 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:12:46,265 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:12:46,280 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:12:46,311 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:12:46,317 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:12:46,325 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:12:46,333 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:12:55,803 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '14135#(and (<= (+ |ULTIMATE.start_l3_insert_~list#1.offset| 4) (select |#length| |ULTIMATE.start_l3_insert_~list#1.base|)) (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (<= 4 |ULTIMATE.start_l3_insert_~list#1.offset|) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (= |ULTIMATE.start_l4_insert_~item~0#1.offset| 0) (= |ULTIMATE.start_l4_insert_~list#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (<= (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (= |~#list~0.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l2_insert_~list#1.offset|) (= |ULTIMATE.start_l3_insert_~item~1#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (= (select |#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (= |ULTIMATE.start_l2_insert_~item~2#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (<= |ULTIMATE.start_l2_insert_~list#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (or (and (or (= |ULTIMATE.start_l4_insert_~item~0#1.base| |ULTIMATE.start_l3_insert_~item~1#1.base|) (not (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0))) (not (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l4_insert_~item~0#1.base|))) (and (not (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 4)) 0)) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l4_insert_~item~0#1.base|))) (= |ULTIMATE.start_l0_insert_~item~4#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l3_insert_~list#1.base|) |ULTIMATE.start_l3_insert_~list#1.offset|)) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~list#1.base|) |ULTIMATE.start_l4_insert_~list#1.offset|) |ULTIMATE.start_l4_insert_~item~0#1.offset|) (<= |ULTIMATE.start_l1_insert_~list#1.offset| 4) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (= |ULTIMATE.start_l4_insert_~item~0#1.base| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~list#1.base|) |ULTIMATE.start_l4_insert_~list#1.offset|)) (<= 0 |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= (select |#valid| |ULTIMATE.start_l3_insert_~list#1.base|) 1) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8) (select |#length| |ULTIMATE.start_l3_insert_~item~1#1.base|)) (<= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (<= |ULTIMATE.start_l4_insert_~list#1.offset| 0) (= |ULTIMATE.start_l0_insert_#in~list#1.base| |~#list~0.base|) (not (= (select |#valid| |ULTIMATE.start_l2_insert_~list#1.base|) 1)) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (or (not (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 4)) 0)) (<= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= |ULTIMATE.start_l0_insert_~list#1.base| |ULTIMATE.start_l0_insert_#in~list#1.base|) (<= 0 |ULTIMATE.start_l4_insert_~list#1.offset|) (= |ULTIMATE.start_l0_insert_~item~4#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (<= 4 |ULTIMATE.start_l1_insert_~list#1.offset|) (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l3_insert_~list#1.base|) |ULTIMATE.start_l3_insert_~list#1.offset|) |ULTIMATE.start_l3_insert_~item~1#1.base|) (<= 3 |ULTIMATE.start_l0_insert_~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= (+ |ULTIMATE.start_l0_insert_~item~4#1.offset| 4) |ULTIMATE.start_l1_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| |ULTIMATE.start_l2_insert_#in~list#1.offset|) (= |#NULL.offset| 0) (or (= |ULTIMATE.start_l4_insert_~item~0#1.base| |ULTIMATE.start_l3_insert_~item~1#1.base|) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0)) (<= |ULTIMATE.start_l4_insert_#in~list#1.offset| 0) (<= |ULTIMATE.start_l3_insert_~list#1.offset| 4) (= (select |#valid| |ULTIMATE.start_l3_insert_~item~1#1.base|) 1) (= |ULTIMATE.start_l2_insert_~item~2#1.offset| 0) (= (+ |ULTIMATE.start_l2_insert_~item~2#1.offset| 4) |ULTIMATE.start_l3_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l4_insert_#in~list#1.offset|) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| 0) (< 0 |#StackHeapBarrier|) (= |#NULL.base| 0))' at error location [2022-12-14 14:12:55,803 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:12:55,803 INFO L184 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2022-12-14 14:12:55,803 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21] total 21 [2022-12-14 14:12:55,803 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1520808982] [2022-12-14 14:12:55,803 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2022-12-14 14:12:55,804 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-12-14 14:12:55,804 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:12:55,804 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-12-14 14:12:55,805 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=308, Invalid=2133, Unknown=33, NotChecked=606, Total=3080 [2022-12-14 14:12:55,805 INFO L87 Difference]: Start difference. First operand 267 states and 316 transitions. Second operand has 22 states, 17 states have (on average 3.0) internal successors, (51), 17 states have internal predecessors, (51), 4 states have call successors, (6), 2 states have call predecessors, (6), 6 states have return successors, (6), 6 states have call predecessors, (6), 4 states have call successors, (6) [2022-12-14 14:12:56,802 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:12:56,803 INFO L93 Difference]: Finished difference Result 395 states and 469 transitions. [2022-12-14 14:12:56,803 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-12-14 14:12:56,803 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 17 states have (on average 3.0) internal successors, (51), 17 states have internal predecessors, (51), 4 states have call successors, (6), 2 states have call predecessors, (6), 6 states have return successors, (6), 6 states have call predecessors, (6), 4 states have call successors, (6) Word has length 107 [2022-12-14 14:12:56,803 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:12:56,804 INFO L225 Difference]: With dead ends: 395 [2022-12-14 14:12:56,804 INFO L226 Difference]: Without dead ends: 395 [2022-12-14 14:12:56,805 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 233 GetRequests, 165 SyntacticMatches, 8 SemanticMatches, 60 ConstructedPredicates, 6 IntricatePredicates, 0 DeprecatedPredicates, 939 ImplicationChecksByTransitivity, 9.8s TimeCoverageRelationStatistics Valid=356, Invalid=2715, Unknown=33, NotChecked=678, Total=3782 [2022-12-14 14:12:56,805 INFO L413 NwaCegarLoop]: 150 mSDtfsCounter, 604 mSDsluCounter, 1137 mSDsCounter, 0 mSdLazyCounter, 1002 mSolverCounterSat, 87 mSolverCounterUnsat, 37 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 604 SdHoareTripleChecker+Valid, 1287 SdHoareTripleChecker+Invalid, 3304 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 87 IncrementalHoareTripleChecker+Valid, 1002 IncrementalHoareTripleChecker+Invalid, 37 IncrementalHoareTripleChecker+Unknown, 2178 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-12-14 14:12:56,805 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [604 Valid, 1287 Invalid, 3304 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [87 Valid, 1002 Invalid, 37 Unknown, 2178 Unchecked, 0.8s Time] [2022-12-14 14:12:56,806 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 395 states. [2022-12-14 14:12:56,809 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 395 to 264. [2022-12-14 14:12:56,809 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 264 states, 177 states have (on average 1.5593220338983051) internal successors, (276), 241 states have internal predecessors, (276), 17 states have call successors, (17), 5 states have call predecessors, (17), 5 states have return successors, (17), 17 states have call predecessors, (17), 17 states have call successors, (17) [2022-12-14 14:12:56,810 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 264 states to 264 states and 310 transitions. [2022-12-14 14:12:56,810 INFO L78 Accepts]: Start accepts. Automaton has 264 states and 310 transitions. Word has length 107 [2022-12-14 14:12:56,810 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:12:56,810 INFO L495 AbstractCegarLoop]: Abstraction has 264 states and 310 transitions. [2022-12-14 14:12:56,810 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 17 states have (on average 3.0) internal successors, (51), 17 states have internal predecessors, (51), 4 states have call successors, (6), 2 states have call predecessors, (6), 6 states have return successors, (6), 6 states have call predecessors, (6), 4 states have call successors, (6) [2022-12-14 14:12:56,810 INFO L276 IsEmpty]: Start isEmpty. Operand 264 states and 310 transitions. [2022-12-14 14:12:56,811 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 108 [2022-12-14 14:12:56,811 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:12:56,811 INFO L195 NwaCegarLoop]: trace histogram [50, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:12:56,818 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Ended with exit code 0 [2022-12-14 14:12:57,011 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15,16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:12:57,013 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 82 more)] === [2022-12-14 14:12:57,014 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:12:57,014 INFO L85 PathProgramCache]: Analyzing trace with hash 1075844654, now seen corresponding path program 1 times [2022-12-14 14:12:57,014 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:12:57,015 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1299595040] [2022-12-14 14:12:57,015 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:12:57,016 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:12:57,077 ERROR L245 FreeRefinementEngine]: Caught known exception: Unsupported non-linear arithmetic [2022-12-14 14:12:57,077 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1312527195] [2022-12-14 14:12:57,077 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:12:57,077 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:12:57,077 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:12:57,078 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:12:57,078 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_6fa4af59-ed37-4693-856d-d3085772a794/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2022-12-14 14:12:57,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:12:57,505 INFO L263 TraceCheckSpWp]: Trace formula consists of 1381 conjuncts, 136 conjunts are in the unsatisfiable core [2022-12-14 14:12:57,510 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:12:57,580 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 14:13:02,665 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_6381 Int) (v_ArrVal_6380 Int) (|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (and (= |c_#length| (store |c_old(#length)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_6381)) (= |c_#valid| (store |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_6380)) (= (select |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 0))) is different from true [2022-12-14 14:13:02,787 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:13:02,788 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 14:13:02,828 INFO L321 Elim1Store]: treesize reduction 18, result has 35.7 percent of original size [2022-12-14 14:13:02,829 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 17 treesize of output 21 [2022-12-14 14:13:02,988 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_6383 Int) (v_ArrVal_6382 Int) (|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (and (= |c_#valid| (store |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_6382)) (= |c_#length| (store |c_old(#length)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_6383)) (= (select |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 0))) is different from true [2022-12-14 14:13:03,210 INFO L321 Elim1Store]: treesize reduction 18, result has 35.7 percent of original size [2022-12-14 14:13:03,210 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 17 treesize of output 21 [2022-12-14 14:13:03,267 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 14:13:03,498 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_6384 Int) (|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (and (= |c_#length| (store |c_old(#length)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_6384)) (= (select |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 0))) is different from true [2022-12-14 14:13:03,577 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:13:03,577 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 14:13:03,660 INFO L321 Elim1Store]: treesize reduction 4, result has 50.0 percent of original size [2022-12-14 14:13:03,660 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 11 [2022-12-14 14:13:04,487 WARN L859 $PredicateComparison]: unable to prove that (exists ((|zalloc_or_die_calloc_model_~size#1| Int) (|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int) (|zalloc_or_die_calloc_model_~nmemb#1| Int) (v_ArrVal_6385 Int)) (let ((.cse0 (* |zalloc_or_die_calloc_model_~nmemb#1| |zalloc_or_die_calloc_model_~size#1|))) (and (<= (mod .cse0 4294967296) v_ArrVal_6385) (= |c_#length| (store |c_old(#length)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_6385)) (= |c_zalloc_or_die_#Ultimate.C_memset_#amount#1| .cse0)))) is different from true [2022-12-14 14:13:06,017 WARN L859 $PredicateComparison]: unable to prove that (exists ((|zalloc_or_die_calloc_model_~size#1| Int) (|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int) (|zalloc_or_die_calloc_model_~nmemb#1| Int) (v_ArrVal_6385 Int)) (let ((.cse0 (mod (* |zalloc_or_die_calloc_model_~nmemb#1| |zalloc_or_die_calloc_model_~size#1|) 4294967296))) (and (< 8 .cse0) (<= .cse0 v_ArrVal_6385) (= |c_#length| (store |c_old(#length)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| v_ArrVal_6385))))) is different from true [2022-12-14 14:13:06,365 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 14:13:06,365 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 16 treesize of output 22 [2022-12-14 14:13:15,033 INFO L134 CoverageAnalysis]: Checked inductivity of 1600 backedges. 37 proven. 339 refuted. 0 times theorem prover too weak. 114 trivial. 1110 not checked. [2022-12-14 14:13:15,033 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:13:18,350 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:13:18,350 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1299595040] [2022-12-14 14:13:18,350 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2022-12-14 14:13:18,350 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1312527195] [2022-12-14 14:13:18,350 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1312527195] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:13:18,350 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [227399872] [2022-12-14 14:13:18,351 INFO L159 IcfgInterpreter]: Started Sifa with 33 locations of interest [2022-12-14 14:13:18,351 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:13:18,352 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:13:18,352 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:13:18,352 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:13:18,370 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-12-14 14:13:18,388 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-12-14 14:13:18,399 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:13:18,435 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:13:18,505 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:13:18,536 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 197 treesize of output 196 [2022-12-14 14:13:18,545 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-12-14 14:13:18,554 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 195 treesize of output 194 [2022-12-14 14:13:18,587 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:13:18,592 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:13:18,599 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:13:18,619 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:13:18,634 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:13:18,656 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:13:18,661 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:13:19,512 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:13:19,522 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:13:19,541 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 1 [2022-12-14 14:13:19,594 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:13:19,594 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:13:19,604 INFO L321 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2022-12-14 14:13:19,604 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 25 treesize of output 27 [2022-12-14 14:13:19,617 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-12-14 14:13:19,628 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:13:19,629 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:13:19,638 INFO L321 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2022-12-14 14:13:19,638 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 2 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 28 [2022-12-14 14:13:19,692 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-12-14 14:13:19,703 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:13:19,704 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:13:19,705 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:13:19,716 INFO L321 Elim1Store]: treesize reduction 21, result has 34.4 percent of original size [2022-12-14 14:13:19,716 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 33 treesize of output 35 [2022-12-14 14:13:19,730 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:13:19,731 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:13:19,731 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:13:19,743 INFO L321 Elim1Store]: treesize reduction 21, result has 34.4 percent of original size [2022-12-14 14:13:19,743 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 32 treesize of output 34 [2022-12-14 14:13:19,817 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 1 [2022-12-14 14:13:19,840 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:13:19,841 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:13:19,842 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:13:19,866 INFO L321 Elim1Store]: treesize reduction 30, result has 49.2 percent of original size [2022-12-14 14:13:19,867 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 5 case distinctions, treesize of input 34 treesize of output 51 [2022-12-14 14:13:19,892 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:13:19,894 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:13:19,895 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:13:19,926 INFO L321 Elim1Store]: treesize reduction 30, result has 49.2 percent of original size [2022-12-14 14:13:19,926 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 5 case distinctions, treesize of input 35 treesize of output 52 [2022-12-14 14:13:20,000 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:13:20,000 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:13:20,001 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:13:20,001 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:13:20,034 INFO L321 Elim1Store]: treesize reduction 44, result has 44.3 percent of original size [2022-12-14 14:13:20,034 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 78 treesize of output 81 [2022-12-14 14:13:20,096 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:13:20,097 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:13:20,098 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:13:20,099 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:13:20,135 INFO L321 Elim1Store]: treesize reduction 56, result has 29.1 percent of original size [2022-12-14 14:13:20,136 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 57 treesize of output 58 [2022-12-14 14:13:20,168 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2022-12-14 14:13:20,317 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 80 for LOIs [2022-12-14 14:13:20,343 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 12 treesize of output 9 [2022-12-14 14:13:20,372 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2022-12-14 14:13:20,429 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:13:20,451 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:13:20,492 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:13:20,529 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:13:20,536 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:13:20,543 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:13:20,552 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:14:15,316 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '15236#(and (<= (+ |ULTIMATE.start_l3_insert_~list#1.offset| 4) (select |#length| |ULTIMATE.start_l3_insert_~list#1.base|)) (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (<= 4 |ULTIMATE.start_l3_insert_~list#1.offset|) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (= |ULTIMATE.start_l4_insert_~item~0#1.offset| 0) (= |ULTIMATE.start_l4_insert_~list#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (<= (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (= |~#list~0.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l2_insert_~list#1.offset|) (= |ULTIMATE.start_l3_insert_~item~1#1.base| |ULTIMATE.start_l4_insert_#in~list#1.base|) (< (select |#length| |ULTIMATE.start_l2_insert_~list#1.base|) (+ |ULTIMATE.start_l2_insert_~list#1.offset| 4)) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (= (select |#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (= |ULTIMATE.start_l2_insert_~item~2#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (<= |ULTIMATE.start_l2_insert_~list#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (or (and (or (= |ULTIMATE.start_l4_insert_~item~0#1.base| |ULTIMATE.start_l3_insert_~item~1#1.base|) (not (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0))) (not (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l4_insert_~item~0#1.base|))) (and (not (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 4)) 0)) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l4_insert_~item~0#1.base|))) (= |ULTIMATE.start_l0_insert_~item~4#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l3_insert_~list#1.base|) |ULTIMATE.start_l3_insert_~list#1.offset|)) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~list#1.base|) |ULTIMATE.start_l4_insert_~list#1.offset|) |ULTIMATE.start_l4_insert_~item~0#1.offset|) (<= |ULTIMATE.start_l1_insert_~list#1.offset| 4) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (= |ULTIMATE.start_l4_insert_~item~0#1.base| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~list#1.base|) |ULTIMATE.start_l4_insert_~list#1.offset|)) (<= 0 |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= (select |#valid| |ULTIMATE.start_l3_insert_~list#1.base|) 1) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l1_insert_#in~list#1.base|) (<= (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8) (select |#length| |ULTIMATE.start_l3_insert_~item~1#1.base|)) (<= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (<= |ULTIMATE.start_l4_insert_~list#1.offset| 0) (= |ULTIMATE.start_l0_insert_#in~list#1.base| |~#list~0.base|) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (or (not (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 4)) 0)) (<= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= |ULTIMATE.start_l0_insert_~list#1.base| |ULTIMATE.start_l0_insert_#in~list#1.base|) (<= 0 |ULTIMATE.start_l4_insert_~list#1.offset|) (= |ULTIMATE.start_l0_insert_~item~4#1.offset| 0) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (<= 4 |ULTIMATE.start_l1_insert_~list#1.offset|) (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l3_insert_~list#1.base|) |ULTIMATE.start_l3_insert_~list#1.offset|) |ULTIMATE.start_l3_insert_~item~1#1.base|) (<= 3 |ULTIMATE.start_l0_insert_~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.offset| |ULTIMATE.start_l0_insert_#in~list#1.offset|) (= (+ |ULTIMATE.start_l0_insert_~item~4#1.offset| 4) |ULTIMATE.start_l1_insert_#in~list#1.offset|) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| |ULTIMATE.start_l2_insert_#in~list#1.offset|) (= |#NULL.offset| 0) (or (= |ULTIMATE.start_l4_insert_~item~0#1.base| |ULTIMATE.start_l3_insert_~item~1#1.base|) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 4 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0)) (<= |ULTIMATE.start_l4_insert_#in~list#1.offset| 0) (<= |ULTIMATE.start_l3_insert_~list#1.offset| 4) (= (select |#valid| |ULTIMATE.start_l3_insert_~item~1#1.base|) 1) (= |ULTIMATE.start_l2_insert_~item~2#1.offset| 0) (= (+ |ULTIMATE.start_l2_insert_~item~2#1.offset| 4) |ULTIMATE.start_l3_insert_#in~list#1.offset|) (<= 0 |ULTIMATE.start_l4_insert_#in~list#1.offset|) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l3_insert_#in~list#1.base|) (= |ULTIMATE.start_l1_insert_~item~3#1.base| |ULTIMATE.start_l2_insert_#in~list#1.base|) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| 0) (< 0 |#StackHeapBarrier|) (= |#NULL.base| 0))' at error location [2022-12-14 14:14:15,316 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:14:15,316 INFO L184 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2022-12-14 14:14:15,317 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [42] total 42 [2022-12-14 14:14:15,317 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [442926028] [2022-12-14 14:14:15,317 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2022-12-14 14:14:15,317 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 43 states [2022-12-14 14:14:15,317 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:14:15,318 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 43 interpolants. [2022-12-14 14:14:15,319 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=350, Invalid=4614, Unknown=26, NotChecked=710, Total=5700 [2022-12-14 14:14:15,320 INFO L87 Difference]: Start difference. First operand 264 states and 310 transitions. Second operand has 43 states, 41 states have (on average 1.8048780487804879) internal successors, (74), 40 states have internal predecessors, (74), 3 states have call successors, (6), 3 states have call predecessors, (6), 6 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2022-12-14 14:14:17,368 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:14:19,394 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:14:21,574 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:14:25,887 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:14:30,163 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:14:34,542 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:14:38,777 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:14:43,026 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:14:47,427 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:14:51,873 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2022-12-14 14:15:34,995 WARN L233 SmtUtils]: Spent 8.62s on a formula simplification. DAG size of input: 60 DAG size of output: 47 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 14:15:47,013 WARN L233 SmtUtils]: Spent 9.17s on a formula simplification. DAG size of input: 72 DAG size of output: 57 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate)