./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/heap-manipulation/dll_of_dll-1.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version 527bcce2 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx/config/AutomizerMemDerefMemtrack.xml -i ../../sv-benchmarks/c/heap-manipulation/dll_of_dll-1.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx/config/svcomp-DerefFreeMemtrack-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0e14b8baad7c8f50637b16b3adcb891ef363d7563e7c4e0e74695e7b8e3d1787 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-527bcce [2023-11-21 22:25:56,762 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-21 22:25:56,882 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx/config/svcomp-DerefFreeMemtrack-32bit-Automizer_Default.epf [2023-11-21 22:25:56,893 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-21 22:25:56,894 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-21 22:25:56,919 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-21 22:25:56,920 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-21 22:25:56,921 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-21 22:25:56,922 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-21 22:25:56,922 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-21 22:25:56,923 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-21 22:25:56,924 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-21 22:25:56,925 INFO L153 SettingsManager]: * Use SBE=true [2023-11-21 22:25:56,925 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-21 22:25:56,926 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-21 22:25:56,926 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-21 22:25:56,927 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-21 22:25:56,928 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-21 22:25:56,928 INFO L153 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2023-11-21 22:25:56,929 INFO L153 SettingsManager]: * Bitprecise bitfields=true [2023-11-21 22:25:56,929 INFO L153 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2023-11-21 22:25:56,930 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-21 22:25:56,931 INFO L153 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2023-11-21 22:25:56,931 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2023-11-21 22:25:56,932 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-21 22:25:56,932 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-21 22:25:56,933 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-21 22:25:56,949 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-21 22:25:56,949 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-21 22:25:56,950 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-21 22:25:56,951 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-21 22:25:56,951 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-21 22:25:56,952 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-21 22:25:56,952 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-21 22:25:56,953 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-21 22:25:56,953 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-21 22:25:56,954 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-21 22:25:56,954 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-21 22:25:56,955 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-21 22:25:56,955 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0e14b8baad7c8f50637b16b3adcb891ef363d7563e7c4e0e74695e7b8e3d1787 [2023-11-21 22:25:57,225 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-21 22:25:57,251 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-21 22:25:57,254 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-21 22:25:57,256 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-21 22:25:57,257 INFO L274 PluginConnector]: CDTParser initialized [2023-11-21 22:25:57,258 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx/../../sv-benchmarks/c/heap-manipulation/dll_of_dll-1.i [2023-11-21 22:26:00,392 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-21 22:26:00,687 INFO L384 CDTParser]: Found 1 translation units. [2023-11-21 22:26:00,692 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/sv-benchmarks/c/heap-manipulation/dll_of_dll-1.i [2023-11-21 22:26:00,708 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx/data/6904a44a7/2fc276d74ec34e74a4287c71df434253/FLAG9f7df26fd [2023-11-21 22:26:00,722 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx/data/6904a44a7/2fc276d74ec34e74a4287c71df434253 [2023-11-21 22:26:00,724 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-21 22:26:00,726 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-21 22:26:00,728 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-21 22:26:00,728 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-21 22:26:00,737 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-21 22:26:00,740 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 10:26:00" (1/1) ... [2023-11-21 22:26:00,742 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2648192a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:26:00, skipping insertion in model container [2023-11-21 22:26:00,742 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 10:26:00" (1/1) ... [2023-11-21 22:26:00,796 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-21 22:26:01,181 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-21 22:26:01,197 INFO L202 MainTranslator]: Completed pre-run [2023-11-21 22:26:01,292 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-21 22:26:01,333 WARN L675 CHandler]: The function insert_fnc is called, but not defined or handled by StandardFunctionHandler. [2023-11-21 22:26:01,342 INFO L206 MainTranslator]: Completed translation [2023-11-21 22:26:01,343 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:26:01 WrapperNode [2023-11-21 22:26:01,343 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-21 22:26:01,345 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-21 22:26:01,345 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-21 22:26:01,345 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-21 22:26:01,354 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:26:01" (1/1) ... [2023-11-21 22:26:01,390 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:26:01" (1/1) ... [2023-11-21 22:26:01,445 INFO L138 Inliner]: procedures = 140, calls = 95, calls flagged for inlining = 14, calls inlined = 14, statements flattened = 242 [2023-11-21 22:26:01,446 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-21 22:26:01,446 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-21 22:26:01,447 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-21 22:26:01,447 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-21 22:26:01,459 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:26:01" (1/1) ... [2023-11-21 22:26:01,459 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:26:01" (1/1) ... [2023-11-21 22:26:01,468 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:26:01" (1/1) ... [2023-11-21 22:26:01,469 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:26:01" (1/1) ... [2023-11-21 22:26:01,484 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:26:01" (1/1) ... [2023-11-21 22:26:01,491 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:26:01" (1/1) ... [2023-11-21 22:26:01,495 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:26:01" (1/1) ... [2023-11-21 22:26:01,497 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:26:01" (1/1) ... [2023-11-21 22:26:01,503 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-21 22:26:01,504 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-21 22:26:01,505 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-21 22:26:01,505 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-21 22:26:01,506 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:26:01" (1/1) ... [2023-11-21 22:26:01,512 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-21 22:26:01,528 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:26:01,564 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-21 22:26:01,601 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-21 22:26:01,626 INFO L130 BoogieDeclarations]: Found specification of procedure fail [2023-11-21 22:26:01,627 INFO L138 BoogieDeclarations]: Found implementation of procedure fail [2023-11-21 22:26:01,627 INFO L130 BoogieDeclarations]: Found specification of procedure inspect_base [2023-11-21 22:26:01,627 INFO L138 BoogieDeclarations]: Found implementation of procedure inspect_base [2023-11-21 22:26:01,628 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2023-11-21 22:26:01,629 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-21 22:26:01,629 INFO L130 BoogieDeclarations]: Found specification of procedure dll_insert_master [2023-11-21 22:26:01,629 INFO L138 BoogieDeclarations]: Found implementation of procedure dll_insert_master [2023-11-21 22:26:01,634 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2023-11-21 22:26:01,634 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2023-11-21 22:26:01,634 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2023-11-21 22:26:01,634 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2023-11-21 22:26:01,634 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2023-11-21 22:26:01,635 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2023-11-21 22:26:01,635 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2023-11-21 22:26:01,637 INFO L130 BoogieDeclarations]: Found specification of procedure dll_create_generic [2023-11-21 22:26:01,638 INFO L138 BoogieDeclarations]: Found implementation of procedure dll_create_generic [2023-11-21 22:26:01,638 INFO L130 BoogieDeclarations]: Found specification of procedure dll_create_slave [2023-11-21 22:26:01,638 INFO L138 BoogieDeclarations]: Found implementation of procedure dll_create_slave [2023-11-21 22:26:01,638 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-21 22:26:01,638 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-21 22:26:01,639 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-21 22:26:01,854 INFO L240 CfgBuilder]: Building ICFG [2023-11-21 22:26:01,856 INFO L266 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-21 22:26:02,632 INFO L281 CfgBuilder]: Performing block encoding [2023-11-21 22:26:02,811 INFO L303 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-21 22:26:02,811 INFO L308 CfgBuilder]: Removed 38 assume(true) statements. [2023-11-21 22:26:02,813 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 10:26:02 BoogieIcfgContainer [2023-11-21 22:26:02,813 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-21 22:26:02,817 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-21 22:26:02,818 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-21 22:26:02,822 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-21 22:26:02,822 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.11 10:26:00" (1/3) ... [2023-11-21 22:26:02,823 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@69ab2e7f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.11 10:26:02, skipping insertion in model container [2023-11-21 22:26:02,823 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:26:01" (2/3) ... [2023-11-21 22:26:02,825 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@69ab2e7f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.11 10:26:02, skipping insertion in model container [2023-11-21 22:26:02,825 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 10:26:02" (3/3) ... [2023-11-21 22:26:02,827 INFO L112 eAbstractionObserver]: Analyzing ICFG dll_of_dll-1.i [2023-11-21 22:26:02,849 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-21 22:26:02,850 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 98 error locations. [2023-11-21 22:26:02,922 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-21 22:26:02,928 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@39761d7e, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-21 22:26:02,928 INFO L358 AbstractCegarLoop]: Starting to check reachability of 98 error locations. [2023-11-21 22:26:02,935 INFO L276 IsEmpty]: Start isEmpty. Operand has 235 states, 106 states have (on average 2.4622641509433962) internal successors, (261), 223 states have internal predecessors, (261), 24 states have call successors, (24), 6 states have call predecessors, (24), 6 states have return successors, (24), 23 states have call predecessors, (24), 24 states have call successors, (24) [2023-11-21 22:26:02,941 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2023-11-21 22:26:02,941 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:26:02,942 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:26:02,942 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ##fun~$Pointer$~TO~VOIDErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-11-21 22:26:02,946 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:26:02,947 INFO L85 PathProgramCache]: Analyzing trace with hash 946226634, now seen corresponding path program 1 times [2023-11-21 22:26:02,954 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:26:02,954 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1554543952] [2023-11-21 22:26:02,955 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:26:02,955 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:26:03,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:26:03,254 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:26:03,255 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:26:03,255 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1554543952] [2023-11-21 22:26:03,256 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1554543952] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:26:03,256 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:26:03,256 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-21 22:26:03,258 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [817366297] [2023-11-21 22:26:03,259 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:26:03,264 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-21 22:26:03,265 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:26:03,309 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-21 22:26:03,310 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:26:03,313 INFO L87 Difference]: Start difference. First operand has 235 states, 106 states have (on average 2.4622641509433962) internal successors, (261), 223 states have internal predecessors, (261), 24 states have call successors, (24), 6 states have call predecessors, (24), 6 states have return successors, (24), 23 states have call predecessors, (24), 24 states have call successors, (24) Second operand has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:26:03,607 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:26:03,607 INFO L93 Difference]: Finished difference Result 231 states and 261 transitions. [2023-11-21 22:26:03,608 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-21 22:26:03,610 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2023-11-21 22:26:03,610 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:26:03,620 INFO L225 Difference]: With dead ends: 231 [2023-11-21 22:26:03,621 INFO L226 Difference]: Without dead ends: 230 [2023-11-21 22:26:03,622 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:26:03,626 INFO L413 NwaCegarLoop]: 222 mSDtfsCounter, 3 mSDsluCounter, 150 mSDsCounter, 0 mSdLazyCounter, 146 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3 SdHoareTripleChecker+Valid, 372 SdHoareTripleChecker+Invalid, 147 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 146 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-21 22:26:03,627 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3 Valid, 372 Invalid, 147 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 146 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-21 22:26:03,646 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 230 states. [2023-11-21 22:26:03,674 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 230 to 230. [2023-11-21 22:26:03,676 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 230 states, 105 states have (on average 2.1523809523809523) internal successors, (226), 218 states have internal predecessors, (226), 24 states have call successors, (24), 6 states have call predecessors, (24), 5 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) [2023-11-21 22:26:03,681 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 230 states to 230 states and 260 transitions. [2023-11-21 22:26:03,683 INFO L78 Accepts]: Start accepts. Automaton has 230 states and 260 transitions. Word has length 7 [2023-11-21 22:26:03,683 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:26:03,683 INFO L495 AbstractCegarLoop]: Abstraction has 230 states and 260 transitions. [2023-11-21 22:26:03,684 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:26:03,684 INFO L276 IsEmpty]: Start isEmpty. Operand 230 states and 260 transitions. [2023-11-21 22:26:03,684 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2023-11-21 22:26:03,685 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:26:03,685 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:26:03,685 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-21 22:26:03,685 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ##fun~$Pointer$~TO~VOIDErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-11-21 22:26:03,686 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:26:03,686 INFO L85 PathProgramCache]: Analyzing trace with hash 946226635, now seen corresponding path program 1 times [2023-11-21 22:26:03,687 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:26:03,687 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [766998543] [2023-11-21 22:26:03,687 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:26:03,687 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:26:03,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:26:03,920 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:26:03,920 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:26:03,920 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [766998543] [2023-11-21 22:26:03,921 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [766998543] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:26:03,921 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:26:03,921 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-21 22:26:03,921 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1417692826] [2023-11-21 22:26:03,921 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:26:03,923 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-21 22:26:03,923 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:26:03,923 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-21 22:26:03,924 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-21 22:26:03,924 INFO L87 Difference]: Start difference. First operand 230 states and 260 transitions. Second operand has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:26:04,194 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:26:04,194 INFO L93 Difference]: Finished difference Result 252 states and 290 transitions. [2023-11-21 22:26:04,194 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-21 22:26:04,195 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2023-11-21 22:26:04,195 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:26:04,197 INFO L225 Difference]: With dead ends: 252 [2023-11-21 22:26:04,197 INFO L226 Difference]: Without dead ends: 252 [2023-11-21 22:26:04,198 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2023-11-21 22:26:04,199 INFO L413 NwaCegarLoop]: 236 mSDtfsCounter, 15 mSDsluCounter, 673 mSDsCounter, 0 mSdLazyCounter, 185 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 17 SdHoareTripleChecker+Valid, 909 SdHoareTripleChecker+Invalid, 196 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 185 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-21 22:26:04,200 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [17 Valid, 909 Invalid, 196 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 185 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-21 22:26:04,201 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 252 states. [2023-11-21 22:26:04,218 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 252 to 246. [2023-11-21 22:26:04,219 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 246 states, 114 states have (on average 2.0964912280701755) internal successors, (239), 227 states have internal predecessors, (239), 29 states have call successors, (29), 8 states have call predecessors, (29), 7 states have return successors, (18), 13 states have call predecessors, (18), 15 states have call successors, (18) [2023-11-21 22:26:04,223 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 246 states to 246 states and 286 transitions. [2023-11-21 22:26:04,223 INFO L78 Accepts]: Start accepts. Automaton has 246 states and 286 transitions. Word has length 7 [2023-11-21 22:26:04,223 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:26:04,223 INFO L495 AbstractCegarLoop]: Abstraction has 246 states and 286 transitions. [2023-11-21 22:26:04,224 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:26:04,224 INFO L276 IsEmpty]: Start isEmpty. Operand 246 states and 286 transitions. [2023-11-21 22:26:04,224 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2023-11-21 22:26:04,224 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:26:04,225 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:26:04,225 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-21 22:26:04,225 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-11-21 22:26:04,225 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:26:04,226 INFO L85 PathProgramCache]: Analyzing trace with hash -1226571017, now seen corresponding path program 1 times [2023-11-21 22:26:04,226 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:26:04,226 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [983476192] [2023-11-21 22:26:04,226 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:26:04,226 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:26:04,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:26:04,275 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:26:04,276 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:26:04,276 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [983476192] [2023-11-21 22:26:04,276 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [983476192] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:26:04,276 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:26:04,276 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-21 22:26:04,277 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1191549725] [2023-11-21 22:26:04,277 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:26:04,277 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-21 22:26:04,278 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:26:04,278 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-21 22:26:04,278 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:26:04,279 INFO L87 Difference]: Start difference. First operand 246 states and 286 transitions. Second operand has 3 states, 2 states have (on average 3.0) internal successors, (6), 3 states have internal predecessors, (6), 1 states have call successors, (3), 1 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:26:04,454 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:26:04,454 INFO L93 Difference]: Finished difference Result 243 states and 283 transitions. [2023-11-21 22:26:04,454 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-21 22:26:04,455 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 3.0) internal successors, (6), 3 states have internal predecessors, (6), 1 states have call successors, (3), 1 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9 [2023-11-21 22:26:04,455 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:26:04,457 INFO L225 Difference]: With dead ends: 243 [2023-11-21 22:26:04,457 INFO L226 Difference]: Without dead ends: 243 [2023-11-21 22:26:04,457 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:26:04,459 INFO L413 NwaCegarLoop]: 217 mSDtfsCounter, 5 mSDsluCounter, 149 mSDsCounter, 0 mSdLazyCounter, 142 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5 SdHoareTripleChecker+Valid, 366 SdHoareTripleChecker+Invalid, 144 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 142 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-21 22:26:04,459 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [5 Valid, 366 Invalid, 144 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 142 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-21 22:26:04,461 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 243 states. [2023-11-21 22:26:04,472 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 243 to 243. [2023-11-21 22:26:04,473 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 243 states, 114 states have (on average 2.0701754385964914) internal successors, (236), 224 states have internal predecessors, (236), 29 states have call successors, (29), 8 states have call predecessors, (29), 7 states have return successors, (18), 13 states have call predecessors, (18), 15 states have call successors, (18) [2023-11-21 22:26:04,475 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 243 states to 243 states and 283 transitions. [2023-11-21 22:26:04,475 INFO L78 Accepts]: Start accepts. Automaton has 243 states and 283 transitions. Word has length 9 [2023-11-21 22:26:04,476 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:26:04,476 INFO L495 AbstractCegarLoop]: Abstraction has 243 states and 283 transitions. [2023-11-21 22:26:04,476 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 3.0) internal successors, (6), 3 states have internal predecessors, (6), 1 states have call successors, (3), 1 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:26:04,476 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 283 transitions. [2023-11-21 22:26:04,476 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2023-11-21 22:26:04,477 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:26:04,477 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:26:04,477 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-21 22:26:04,477 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-11-21 22:26:04,478 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:26:04,478 INFO L85 PathProgramCache]: Analyzing trace with hash -1226571016, now seen corresponding path program 1 times [2023-11-21 22:26:04,478 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:26:04,478 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [564782623] [2023-11-21 22:26:04,478 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:26:04,479 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:26:04,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:26:04,566 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:26:04,567 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:26:04,567 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [564782623] [2023-11-21 22:26:04,567 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [564782623] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:26:04,567 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:26:04,568 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-21 22:26:04,568 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1537717697] [2023-11-21 22:26:04,568 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:26:04,568 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-21 22:26:04,569 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:26:04,569 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-21 22:26:04,569 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:26:04,570 INFO L87 Difference]: Start difference. First operand 243 states and 283 transitions. Second operand has 3 states, 2 states have (on average 3.0) internal successors, (6), 3 states have internal predecessors, (6), 1 states have call successors, (3), 1 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:26:04,766 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:26:04,766 INFO L93 Difference]: Finished difference Result 240 states and 280 transitions. [2023-11-21 22:26:04,767 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-21 22:26:04,767 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 3.0) internal successors, (6), 3 states have internal predecessors, (6), 1 states have call successors, (3), 1 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9 [2023-11-21 22:26:04,767 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:26:04,769 INFO L225 Difference]: With dead ends: 240 [2023-11-21 22:26:04,770 INFO L226 Difference]: Without dead ends: 240 [2023-11-21 22:26:04,770 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:26:04,771 INFO L413 NwaCegarLoop]: 217 mSDtfsCounter, 2 mSDsluCounter, 152 mSDsCounter, 0 mSdLazyCounter, 136 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 369 SdHoareTripleChecker+Invalid, 138 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 136 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-21 22:26:04,772 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 369 Invalid, 138 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 136 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-21 22:26:04,773 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 240 states. [2023-11-21 22:26:04,782 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 240 to 240. [2023-11-21 22:26:04,783 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 240 states, 114 states have (on average 2.043859649122807) internal successors, (233), 221 states have internal predecessors, (233), 29 states have call successors, (29), 8 states have call predecessors, (29), 7 states have return successors, (18), 13 states have call predecessors, (18), 15 states have call successors, (18) [2023-11-21 22:26:04,785 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 240 states to 240 states and 280 transitions. [2023-11-21 22:26:04,785 INFO L78 Accepts]: Start accepts. Automaton has 240 states and 280 transitions. Word has length 9 [2023-11-21 22:26:04,786 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:26:04,786 INFO L495 AbstractCegarLoop]: Abstraction has 240 states and 280 transitions. [2023-11-21 22:26:04,786 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 3.0) internal successors, (6), 3 states have internal predecessors, (6), 1 states have call successors, (3), 1 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:26:04,786 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 280 transitions. [2023-11-21 22:26:04,787 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2023-11-21 22:26:04,787 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:26:04,787 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:26:04,787 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-21 22:26:04,787 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting dll_insert_masterErr6REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-11-21 22:26:04,788 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:26:04,788 INFO L85 PathProgramCache]: Analyzing trace with hash 804589796, now seen corresponding path program 1 times [2023-11-21 22:26:04,788 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:26:04,788 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [665896462] [2023-11-21 22:26:04,789 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:26:04,789 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:26:04,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:26:05,055 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:26:05,055 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:26:05,056 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [665896462] [2023-11-21 22:26:05,056 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [665896462] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:26:05,056 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:26:05,056 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-21 22:26:05,056 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [555072262] [2023-11-21 22:26:05,057 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:26:05,059 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-21 22:26:05,059 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:26:05,059 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-21 22:26:05,060 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2023-11-21 22:26:05,060 INFO L87 Difference]: Start difference. First operand 240 states and 280 transitions. Second operand has 8 states, 6 states have (on average 1.5) internal successors, (9), 6 states have internal predecessors, (9), 3 states have call successors, (3), 3 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:26:05,664 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:26:05,665 INFO L93 Difference]: Finished difference Result 259 states and 302 transitions. [2023-11-21 22:26:05,665 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-21 22:26:05,665 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 1.5) internal successors, (9), 6 states have internal predecessors, (9), 3 states have call successors, (3), 3 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2023-11-21 22:26:05,666 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:26:05,668 INFO L225 Difference]: With dead ends: 259 [2023-11-21 22:26:05,669 INFO L226 Difference]: Without dead ends: 259 [2023-11-21 22:26:05,669 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=67, Unknown=0, NotChecked=0, Total=90 [2023-11-21 22:26:05,672 INFO L413 NwaCegarLoop]: 201 mSDtfsCounter, 75 mSDsluCounter, 799 mSDsCounter, 0 mSdLazyCounter, 724 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 75 SdHoareTripleChecker+Valid, 1000 SdHoareTripleChecker+Invalid, 736 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 724 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2023-11-21 22:26:05,673 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [75 Valid, 1000 Invalid, 736 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 724 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2023-11-21 22:26:05,674 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 259 states. [2023-11-21 22:26:05,685 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 259 to 249. [2023-11-21 22:26:05,686 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 249 states, 122 states have (on average 1.9918032786885247) internal successors, (243), 228 states have internal predecessors, (243), 30 states have call successors, (30), 10 states have call predecessors, (30), 7 states have return successors, (19), 13 states have call predecessors, (19), 16 states have call successors, (19) [2023-11-21 22:26:05,689 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 249 states to 249 states and 292 transitions. [2023-11-21 22:26:05,689 INFO L78 Accepts]: Start accepts. Automaton has 249 states and 292 transitions. Word has length 12 [2023-11-21 22:26:05,689 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:26:05,690 INFO L495 AbstractCegarLoop]: Abstraction has 249 states and 292 transitions. [2023-11-21 22:26:05,691 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 1.5) internal successors, (9), 6 states have internal predecessors, (9), 3 states have call successors, (3), 3 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:26:05,691 INFO L276 IsEmpty]: Start isEmpty. Operand 249 states and 292 transitions. [2023-11-21 22:26:05,691 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2023-11-21 22:26:05,691 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:26:05,692 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:26:05,692 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-21 22:26:05,692 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting dll_insert_masterErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-11-21 22:26:05,693 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:26:05,693 INFO L85 PathProgramCache]: Analyzing trace with hash 804589797, now seen corresponding path program 1 times [2023-11-21 22:26:05,693 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:26:05,694 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1794700691] [2023-11-21 22:26:05,694 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:26:05,694 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:26:05,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:26:06,104 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:26:06,105 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:26:06,105 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1794700691] [2023-11-21 22:26:06,105 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1794700691] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:26:06,105 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:26:06,105 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-21 22:26:06,106 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [35890047] [2023-11-21 22:26:06,108 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:26:06,110 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-21 22:26:06,110 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:26:06,110 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-21 22:26:06,111 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2023-11-21 22:26:06,112 INFO L87 Difference]: Start difference. First operand 249 states and 292 transitions. Second operand has 7 states, 5 states have (on average 1.8) internal successors, (9), 5 states have internal predecessors, (9), 3 states have call successors, (3), 3 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:26:06,793 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:26:06,793 INFO L93 Difference]: Finished difference Result 257 states and 300 transitions. [2023-11-21 22:26:06,794 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-21 22:26:06,794 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 5 states have (on average 1.8) internal successors, (9), 5 states have internal predecessors, (9), 3 states have call successors, (3), 3 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2023-11-21 22:26:06,795 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:26:06,796 INFO L225 Difference]: With dead ends: 257 [2023-11-21 22:26:06,797 INFO L226 Difference]: Without dead ends: 257 [2023-11-21 22:26:06,797 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=19, Invalid=53, Unknown=0, NotChecked=0, Total=72 [2023-11-21 22:26:06,798 INFO L413 NwaCegarLoop]: 195 mSDtfsCounter, 64 mSDsluCounter, 525 mSDsCounter, 0 mSdLazyCounter, 769 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 64 SdHoareTripleChecker+Valid, 720 SdHoareTripleChecker+Invalid, 778 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 769 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2023-11-21 22:26:06,798 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [64 Valid, 720 Invalid, 778 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 769 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2023-11-21 22:26:06,800 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 257 states. [2023-11-21 22:26:06,807 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 257 to 249. [2023-11-21 22:26:06,807 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 249 states, 122 states have (on average 1.9754098360655739) internal successors, (241), 228 states have internal predecessors, (241), 30 states have call successors, (30), 10 states have call predecessors, (30), 7 states have return successors, (19), 13 states have call predecessors, (19), 16 states have call successors, (19) [2023-11-21 22:26:06,810 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 249 states to 249 states and 290 transitions. [2023-11-21 22:26:06,810 INFO L78 Accepts]: Start accepts. Automaton has 249 states and 290 transitions. Word has length 12 [2023-11-21 22:26:06,810 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:26:06,810 INFO L495 AbstractCegarLoop]: Abstraction has 249 states and 290 transitions. [2023-11-21 22:26:06,811 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 5 states have (on average 1.8) internal successors, (9), 5 states have internal predecessors, (9), 3 states have call successors, (3), 3 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:26:06,811 INFO L276 IsEmpty]: Start isEmpty. Operand 249 states and 290 transitions. [2023-11-21 22:26:06,811 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2023-11-21 22:26:06,812 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:26:06,812 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:26:06,812 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-21 22:26:06,812 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting dll_insert_masterErr8REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-11-21 22:26:06,813 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:26:06,813 INFO L85 PathProgramCache]: Analyzing trace with hash -827500667, now seen corresponding path program 1 times [2023-11-21 22:26:06,813 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:26:06,813 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1540588993] [2023-11-21 22:26:06,814 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:26:06,814 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:26:06,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:26:06,881 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:26:06,882 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:26:06,882 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1540588993] [2023-11-21 22:26:06,882 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1540588993] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:26:06,882 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:26:06,882 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:26:06,883 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1251967523] [2023-11-21 22:26:06,883 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:26:06,883 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-21 22:26:06,883 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:26:06,884 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-21 22:26:06,884 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-21 22:26:06,884 INFO L87 Difference]: Start difference. First operand 249 states and 290 transitions. Second operand has 4 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 4 states have internal predecessors, (10), 1 states have call successors, (3), 1 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:26:07,096 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:26:07,096 INFO L93 Difference]: Finished difference Result 248 states and 289 transitions. [2023-11-21 22:26:07,097 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-21 22:26:07,097 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 4 states have internal predecessors, (10), 1 states have call successors, (3), 1 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2023-11-21 22:26:07,098 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:26:07,100 INFO L225 Difference]: With dead ends: 248 [2023-11-21 22:26:07,100 INFO L226 Difference]: Without dead ends: 248 [2023-11-21 22:26:07,100 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-21 22:26:07,101 INFO L413 NwaCegarLoop]: 210 mSDtfsCounter, 12 mSDsluCounter, 285 mSDsCounter, 0 mSdLazyCounter, 246 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 12 SdHoareTripleChecker+Valid, 495 SdHoareTripleChecker+Invalid, 248 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 246 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-21 22:26:07,102 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [12 Valid, 495 Invalid, 248 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 246 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-21 22:26:07,103 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 248 states. [2023-11-21 22:26:07,109 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 248 to 248. [2023-11-21 22:26:07,110 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 248 states, 122 states have (on average 1.9672131147540983) internal successors, (240), 227 states have internal predecessors, (240), 30 states have call successors, (30), 10 states have call predecessors, (30), 7 states have return successors, (19), 13 states have call predecessors, (19), 16 states have call successors, (19) [2023-11-21 22:26:07,113 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 248 states to 248 states and 289 transitions. [2023-11-21 22:26:07,113 INFO L78 Accepts]: Start accepts. Automaton has 248 states and 289 transitions. Word has length 13 [2023-11-21 22:26:07,113 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:26:07,114 INFO L495 AbstractCegarLoop]: Abstraction has 248 states and 289 transitions. [2023-11-21 22:26:07,114 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 4 states have internal predecessors, (10), 1 states have call successors, (3), 1 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:26:07,114 INFO L276 IsEmpty]: Start isEmpty. Operand 248 states and 289 transitions. [2023-11-21 22:26:07,115 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2023-11-21 22:26:07,115 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:26:07,115 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:26:07,115 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-21 22:26:07,116 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting dll_insert_masterErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-11-21 22:26:07,116 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:26:07,116 INFO L85 PathProgramCache]: Analyzing trace with hash -827500666, now seen corresponding path program 1 times [2023-11-21 22:26:07,116 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:26:07,117 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [557253026] [2023-11-21 22:26:07,117 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:26:07,117 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:26:07,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:26:07,260 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:26:07,261 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:26:07,261 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [557253026] [2023-11-21 22:26:07,261 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [557253026] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:26:07,261 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:26:07,261 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:26:07,262 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [625697323] [2023-11-21 22:26:07,262 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:26:07,262 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-21 22:26:07,263 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:26:07,263 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-21 22:26:07,263 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-21 22:26:07,264 INFO L87 Difference]: Start difference. First operand 248 states and 289 transitions. Second operand has 4 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 4 states have internal predecessors, (10), 1 states have call successors, (3), 1 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:26:07,468 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:26:07,468 INFO L93 Difference]: Finished difference Result 247 states and 288 transitions. [2023-11-21 22:26:07,469 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-21 22:26:07,469 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 4 states have internal predecessors, (10), 1 states have call successors, (3), 1 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2023-11-21 22:26:07,469 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:26:07,471 INFO L225 Difference]: With dead ends: 247 [2023-11-21 22:26:07,472 INFO L226 Difference]: Without dead ends: 247 [2023-11-21 22:26:07,472 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-21 22:26:07,473 INFO L413 NwaCegarLoop]: 211 mSDtfsCounter, 8 mSDsluCounter, 355 mSDsCounter, 0 mSdLazyCounter, 177 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 566 SdHoareTripleChecker+Invalid, 177 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 177 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-21 22:26:07,473 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [8 Valid, 566 Invalid, 177 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 177 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-21 22:26:07,475 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 247 states. [2023-11-21 22:26:07,482 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 247 to 247. [2023-11-21 22:26:07,482 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 247 states, 122 states have (on average 1.959016393442623) internal successors, (239), 226 states have internal predecessors, (239), 30 states have call successors, (30), 10 states have call predecessors, (30), 7 states have return successors, (19), 13 states have call predecessors, (19), 16 states have call successors, (19) [2023-11-21 22:26:07,485 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 247 states to 247 states and 288 transitions. [2023-11-21 22:26:07,485 INFO L78 Accepts]: Start accepts. Automaton has 247 states and 288 transitions. Word has length 13 [2023-11-21 22:26:07,486 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:26:07,486 INFO L495 AbstractCegarLoop]: Abstraction has 247 states and 288 transitions. [2023-11-21 22:26:07,486 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 4 states have internal predecessors, (10), 1 states have call successors, (3), 1 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:26:07,486 INFO L276 IsEmpty]: Start isEmpty. Operand 247 states and 288 transitions. [2023-11-21 22:26:07,487 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2023-11-21 22:26:07,487 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:26:07,488 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:26:07,488 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-21 22:26:07,488 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting dll_insert_masterErr10REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-11-21 22:26:07,489 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:26:07,489 INFO L85 PathProgramCache]: Analyzing trace with hash -659191194, now seen corresponding path program 1 times [2023-11-21 22:26:07,489 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:26:07,490 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1503253883] [2023-11-21 22:26:07,490 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:26:07,490 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:26:07,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:26:08,015 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:26:08,016 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:26:08,020 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1503253883] [2023-11-21 22:26:08,020 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1503253883] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:26:08,020 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:26:08,020 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2023-11-21 22:26:08,021 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1492901413] [2023-11-21 22:26:08,021 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:26:08,022 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2023-11-21 22:26:08,022 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:26:08,023 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2023-11-21 22:26:08,023 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2023-11-21 22:26:08,025 INFO L87 Difference]: Start difference. First operand 247 states and 288 transitions. Second operand has 9 states, 8 states have (on average 1.5) internal successors, (12), 7 states have internal predecessors, (12), 3 states have call successors, (3), 3 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:26:08,715 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:26:08,715 INFO L93 Difference]: Finished difference Result 276 states and 322 transitions. [2023-11-21 22:26:08,715 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2023-11-21 22:26:08,716 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 8 states have (on average 1.5) internal successors, (12), 7 states have internal predecessors, (12), 3 states have call successors, (3), 3 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2023-11-21 22:26:08,716 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:26:08,718 INFO L225 Difference]: With dead ends: 276 [2023-11-21 22:26:08,718 INFO L226 Difference]: Without dead ends: 276 [2023-11-21 22:26:08,719 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=36, Invalid=120, Unknown=0, NotChecked=0, Total=156 [2023-11-21 22:26:08,719 INFO L413 NwaCegarLoop]: 210 mSDtfsCounter, 27 mSDsluCounter, 1144 mSDsCounter, 0 mSdLazyCounter, 674 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 1354 SdHoareTripleChecker+Invalid, 687 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 674 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2023-11-21 22:26:08,720 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [28 Valid, 1354 Invalid, 687 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 674 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2023-11-21 22:26:08,721 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 276 states. [2023-11-21 22:26:08,728 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 276 to 261. [2023-11-21 22:26:08,729 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 261 states, 133 states have (on average 1.9172932330827068) internal successors, (255), 237 states have internal predecessors, (255), 32 states have call successors, (32), 12 states have call predecessors, (32), 8 states have return successors, (23), 14 states have call predecessors, (23), 18 states have call successors, (23) [2023-11-21 22:26:08,731 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 261 states to 261 states and 310 transitions. [2023-11-21 22:26:08,731 INFO L78 Accepts]: Start accepts. Automaton has 261 states and 310 transitions. Word has length 15 [2023-11-21 22:26:08,732 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:26:08,732 INFO L495 AbstractCegarLoop]: Abstraction has 261 states and 310 transitions. [2023-11-21 22:26:08,732 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 8 states have (on average 1.5) internal successors, (12), 7 states have internal predecessors, (12), 3 states have call successors, (3), 3 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:26:08,732 INFO L276 IsEmpty]: Start isEmpty. Operand 261 states and 310 transitions. [2023-11-21 22:26:08,733 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2023-11-21 22:26:08,733 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:26:08,733 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:26:08,733 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-21 22:26:08,734 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ##fun~$Pointer$~TO~VOIDErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-11-21 22:26:08,734 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:26:08,734 INFO L85 PathProgramCache]: Analyzing trace with hash 504380893, now seen corresponding path program 1 times [2023-11-21 22:26:08,735 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:26:08,735 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [322653106] [2023-11-21 22:26:08,735 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:26:08,735 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:26:08,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:26:08,837 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-11-21 22:26:08,837 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:26:08,837 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [322653106] [2023-11-21 22:26:08,837 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [322653106] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:26:08,838 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:26:08,838 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-21 22:26:08,838 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1893395608] [2023-11-21 22:26:08,838 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:26:08,839 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-21 22:26:08,839 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:26:08,839 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-21 22:26:08,839 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:26:08,840 INFO L87 Difference]: Start difference. First operand 261 states and 310 transitions. Second operand has 3 states, 2 states have (on average 6.5) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (5), 1 states have call predecessors, (5), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:26:08,994 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:26:08,995 INFO L93 Difference]: Finished difference Result 259 states and 308 transitions. [2023-11-21 22:26:08,995 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-21 22:26:08,995 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 6.5) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (5), 1 states have call predecessors, (5), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 21 [2023-11-21 22:26:08,996 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:26:08,997 INFO L225 Difference]: With dead ends: 259 [2023-11-21 22:26:08,998 INFO L226 Difference]: Without dead ends: 259 [2023-11-21 22:26:08,998 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:26:08,999 INFO L413 NwaCegarLoop]: 214 mSDtfsCounter, 1 mSDsluCounter, 151 mSDsCounter, 0 mSdLazyCounter, 133 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 365 SdHoareTripleChecker+Invalid, 134 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 133 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-21 22:26:08,999 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 365 Invalid, 134 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 133 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-21 22:26:09,000 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 259 states. [2023-11-21 22:26:09,006 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 259 to 259. [2023-11-21 22:26:09,007 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 259 states, 133 states have (on average 1.9022556390977443) internal successors, (253), 235 states have internal predecessors, (253), 32 states have call successors, (32), 12 states have call predecessors, (32), 8 states have return successors, (23), 14 states have call predecessors, (23), 18 states have call successors, (23) [2023-11-21 22:26:09,009 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 259 states to 259 states and 308 transitions. [2023-11-21 22:26:09,010 INFO L78 Accepts]: Start accepts. Automaton has 259 states and 308 transitions. Word has length 21 [2023-11-21 22:26:09,010 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:26:09,010 INFO L495 AbstractCegarLoop]: Abstraction has 259 states and 308 transitions. [2023-11-21 22:26:09,010 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 6.5) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (5), 1 states have call predecessors, (5), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:26:09,011 INFO L276 IsEmpty]: Start isEmpty. Operand 259 states and 308 transitions. [2023-11-21 22:26:09,011 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2023-11-21 22:26:09,011 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:26:09,012 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:26:09,012 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2023-11-21 22:26:09,012 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ##fun~$Pointer$~TO~VOIDErr4REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-11-21 22:26:09,012 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:26:09,013 INFO L85 PathProgramCache]: Analyzing trace with hash -621247758, now seen corresponding path program 1 times [2023-11-21 22:26:09,013 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:26:09,013 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2029794481] [2023-11-21 22:26:09,013 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:26:09,013 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:26:09,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:26:09,224 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-21 22:26:09,225 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:26:09,225 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2029794481] [2023-11-21 22:26:09,225 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2029794481] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:26:09,225 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:26:09,225 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-21 22:26:09,226 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1016358040] [2023-11-21 22:26:09,226 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:26:09,226 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-21 22:26:09,227 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:26:09,227 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-21 22:26:09,227 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2023-11-21 22:26:09,228 INFO L87 Difference]: Start difference. First operand 259 states and 308 transitions. Second operand has 7 states, 5 states have (on average 3.4) internal successors, (17), 6 states have internal predecessors, (17), 2 states have call successors, (6), 2 states have call predecessors, (6), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:26:09,645 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:26:09,645 INFO L93 Difference]: Finished difference Result 257 states and 306 transitions. [2023-11-21 22:26:09,645 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-21 22:26:09,646 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 5 states have (on average 3.4) internal successors, (17), 6 states have internal predecessors, (17), 2 states have call successors, (6), 2 states have call predecessors, (6), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 23 [2023-11-21 22:26:09,646 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:26:09,648 INFO L225 Difference]: With dead ends: 257 [2023-11-21 22:26:09,648 INFO L226 Difference]: Without dead ends: 257 [2023-11-21 22:26:09,648 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=49, Unknown=0, NotChecked=0, Total=72 [2023-11-21 22:26:09,649 INFO L413 NwaCegarLoop]: 203 mSDtfsCounter, 47 mSDsluCounter, 665 mSDsCounter, 0 mSdLazyCounter, 565 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 47 SdHoareTripleChecker+Valid, 868 SdHoareTripleChecker+Invalid, 574 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 565 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-21 22:26:09,649 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [47 Valid, 868 Invalid, 574 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 565 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-21 22:26:09,650 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 257 states. [2023-11-21 22:26:09,659 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 257 to 257. [2023-11-21 22:26:09,660 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 257 states, 133 states have (on average 1.887218045112782) internal successors, (251), 233 states have internal predecessors, (251), 32 states have call successors, (32), 12 states have call predecessors, (32), 8 states have return successors, (23), 14 states have call predecessors, (23), 18 states have call successors, (23) [2023-11-21 22:26:09,662 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 257 states to 257 states and 306 transitions. [2023-11-21 22:26:09,662 INFO L78 Accepts]: Start accepts. Automaton has 257 states and 306 transitions. Word has length 23 [2023-11-21 22:26:09,663 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:26:09,663 INFO L495 AbstractCegarLoop]: Abstraction has 257 states and 306 transitions. [2023-11-21 22:26:09,663 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 5 states have (on average 3.4) internal successors, (17), 6 states have internal predecessors, (17), 2 states have call successors, (6), 2 states have call predecessors, (6), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:26:09,664 INFO L276 IsEmpty]: Start isEmpty. Operand 257 states and 306 transitions. [2023-11-21 22:26:09,664 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2023-11-21 22:26:09,664 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:26:09,665 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:26:09,665 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2023-11-21 22:26:09,665 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ##fun~$Pointer$~TO~VOIDErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-11-21 22:26:09,665 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:26:09,665 INFO L85 PathProgramCache]: Analyzing trace with hash -621247757, now seen corresponding path program 1 times [2023-11-21 22:26:09,666 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:26:09,666 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [238162681] [2023-11-21 22:26:09,666 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:26:09,666 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:26:09,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:26:10,037 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-21 22:26:10,037 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:26:10,037 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [238162681] [2023-11-21 22:26:10,037 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [238162681] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:26:10,037 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:26:10,038 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-21 22:26:10,038 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [640066904] [2023-11-21 22:26:10,039 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:26:10,039 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-21 22:26:10,040 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:26:10,040 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-21 22:26:10,040 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-21 22:26:10,040 INFO L87 Difference]: Start difference. First operand 257 states and 306 transitions. Second operand has 6 states, 4 states have (on average 4.25) internal successors, (17), 5 states have internal predecessors, (17), 2 states have call successors, (6), 2 states have call predecessors, (6), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:26:10,545 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:26:10,545 INFO L93 Difference]: Finished difference Result 255 states and 304 transitions. [2023-11-21 22:26:10,550 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-21 22:26:10,550 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 4 states have (on average 4.25) internal successors, (17), 5 states have internal predecessors, (17), 2 states have call successors, (6), 2 states have call predecessors, (6), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 23 [2023-11-21 22:26:10,550 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:26:10,552 INFO L225 Difference]: With dead ends: 255 [2023-11-21 22:26:10,552 INFO L226 Difference]: Without dead ends: 255 [2023-11-21 22:26:10,553 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2023-11-21 22:26:10,553 INFO L413 NwaCegarLoop]: 201 mSDtfsCounter, 41 mSDsluCounter, 431 mSDsCounter, 0 mSdLazyCounter, 562 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 41 SdHoareTripleChecker+Valid, 632 SdHoareTripleChecker+Invalid, 570 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 562 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-21 22:26:10,553 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [41 Valid, 632 Invalid, 570 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 562 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-21 22:26:10,554 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 255 states. [2023-11-21 22:26:10,563 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 255 to 255. [2023-11-21 22:26:10,564 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 255 states, 133 states have (on average 1.8721804511278195) internal successors, (249), 231 states have internal predecessors, (249), 32 states have call successors, (32), 12 states have call predecessors, (32), 8 states have return successors, (23), 14 states have call predecessors, (23), 18 states have call successors, (23) [2023-11-21 22:26:10,566 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 255 states to 255 states and 304 transitions. [2023-11-21 22:26:10,566 INFO L78 Accepts]: Start accepts. Automaton has 255 states and 304 transitions. Word has length 23 [2023-11-21 22:26:10,566 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:26:10,567 INFO L495 AbstractCegarLoop]: Abstraction has 255 states and 304 transitions. [2023-11-21 22:26:10,567 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 4 states have (on average 4.25) internal successors, (17), 5 states have internal predecessors, (17), 2 states have call successors, (6), 2 states have call predecessors, (6), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:26:10,567 INFO L276 IsEmpty]: Start isEmpty. Operand 255 states and 304 transitions. [2023-11-21 22:26:10,569 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2023-11-21 22:26:10,570 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:26:10,570 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:26:10,570 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2023-11-21 22:26:10,571 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ##fun~$Pointer$~TO~VOIDErr6REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-11-21 22:26:10,571 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:26:10,571 INFO L85 PathProgramCache]: Analyzing trace with hash -2078794002, now seen corresponding path program 1 times [2023-11-21 22:26:10,571 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:26:10,572 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1402652160] [2023-11-21 22:26:10,572 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:26:10,572 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:26:10,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:26:10,678 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-11-21 22:26:10,678 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:26:10,678 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1402652160] [2023-11-21 22:26:10,678 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1402652160] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:26:10,678 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:26:10,679 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:26:10,679 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [590027405] [2023-11-21 22:26:10,679 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:26:10,679 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-21 22:26:10,679 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:26:10,680 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-21 22:26:10,680 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-21 22:26:10,681 INFO L87 Difference]: Start difference. First operand 255 states and 304 transitions. Second operand has 4 states, 3 states have (on average 5.333333333333333) internal successors, (16), 4 states have internal predecessors, (16), 1 states have call successors, (5), 1 states have call predecessors, (5), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:26:10,870 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:26:10,870 INFO L93 Difference]: Finished difference Result 254 states and 303 transitions. [2023-11-21 22:26:10,870 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-21 22:26:10,870 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 5.333333333333333) internal successors, (16), 4 states have internal predecessors, (16), 1 states have call successors, (5), 1 states have call predecessors, (5), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2023-11-21 22:26:10,871 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:26:10,872 INFO L225 Difference]: With dead ends: 254 [2023-11-21 22:26:10,872 INFO L226 Difference]: Without dead ends: 254 [2023-11-21 22:26:10,873 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-21 22:26:10,873 INFO L413 NwaCegarLoop]: 205 mSDtfsCounter, 7 mSDsluCounter, 283 mSDsCounter, 0 mSdLazyCounter, 236 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7 SdHoareTripleChecker+Valid, 488 SdHoareTripleChecker+Invalid, 237 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 236 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-21 22:26:10,874 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [7 Valid, 488 Invalid, 237 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 236 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-21 22:26:10,874 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 254 states. [2023-11-21 22:26:10,882 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 254 to 254. [2023-11-21 22:26:10,882 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 254 states, 133 states have (on average 1.8646616541353382) internal successors, (248), 230 states have internal predecessors, (248), 32 states have call successors, (32), 12 states have call predecessors, (32), 8 states have return successors, (23), 14 states have call predecessors, (23), 18 states have call successors, (23) [2023-11-21 22:26:10,885 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 254 states to 254 states and 303 transitions. [2023-11-21 22:26:10,886 INFO L78 Accepts]: Start accepts. Automaton has 254 states and 303 transitions. Word has length 24 [2023-11-21 22:26:10,886 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:26:10,886 INFO L495 AbstractCegarLoop]: Abstraction has 254 states and 303 transitions. [2023-11-21 22:26:10,886 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 5.333333333333333) internal successors, (16), 4 states have internal predecessors, (16), 1 states have call successors, (5), 1 states have call predecessors, (5), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:26:10,886 INFO L276 IsEmpty]: Start isEmpty. Operand 254 states and 303 transitions. [2023-11-21 22:26:10,887 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2023-11-21 22:26:10,887 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:26:10,887 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:26:10,887 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2023-11-21 22:26:10,888 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ##fun~$Pointer$~TO~VOIDErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-11-21 22:26:10,888 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:26:10,888 INFO L85 PathProgramCache]: Analyzing trace with hash -2078794001, now seen corresponding path program 1 times [2023-11-21 22:26:10,889 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:26:10,889 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [98510039] [2023-11-21 22:26:10,889 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:26:10,889 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:26:10,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:26:11,062 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-11-21 22:26:11,062 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:26:11,062 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [98510039] [2023-11-21 22:26:11,063 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [98510039] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:26:11,063 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:26:11,063 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:26:11,063 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [233504267] [2023-11-21 22:26:11,063 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:26:11,064 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-21 22:26:11,064 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:26:11,065 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-21 22:26:11,065 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-21 22:26:11,065 INFO L87 Difference]: Start difference. First operand 254 states and 303 transitions. Second operand has 4 states, 3 states have (on average 5.333333333333333) internal successors, (16), 4 states have internal predecessors, (16), 1 states have call successors, (5), 1 states have call predecessors, (5), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:26:11,225 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:26:11,225 INFO L93 Difference]: Finished difference Result 253 states and 302 transitions. [2023-11-21 22:26:11,226 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-21 22:26:11,226 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 5.333333333333333) internal successors, (16), 4 states have internal predecessors, (16), 1 states have call successors, (5), 1 states have call predecessors, (5), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2023-11-21 22:26:11,226 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:26:11,228 INFO L225 Difference]: With dead ends: 253 [2023-11-21 22:26:11,228 INFO L226 Difference]: Without dead ends: 253 [2023-11-21 22:26:11,229 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-21 22:26:11,229 INFO L413 NwaCegarLoop]: 205 mSDtfsCounter, 6 mSDsluCounter, 350 mSDsCounter, 0 mSdLazyCounter, 167 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 6 SdHoareTripleChecker+Valid, 555 SdHoareTripleChecker+Invalid, 167 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 167 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-21 22:26:11,230 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [6 Valid, 555 Invalid, 167 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 167 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-21 22:26:11,231 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 253 states. [2023-11-21 22:26:11,236 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 253 to 253. [2023-11-21 22:26:11,237 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 253 states, 133 states have (on average 1.8571428571428572) internal successors, (247), 229 states have internal predecessors, (247), 32 states have call successors, (32), 12 states have call predecessors, (32), 8 states have return successors, (23), 14 states have call predecessors, (23), 18 states have call successors, (23) [2023-11-21 22:26:11,238 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 253 states to 253 states and 302 transitions. [2023-11-21 22:26:11,239 INFO L78 Accepts]: Start accepts. Automaton has 253 states and 302 transitions. Word has length 24 [2023-11-21 22:26:11,239 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:26:11,239 INFO L495 AbstractCegarLoop]: Abstraction has 253 states and 302 transitions. [2023-11-21 22:26:11,239 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 5.333333333333333) internal successors, (16), 4 states have internal predecessors, (16), 1 states have call successors, (5), 1 states have call predecessors, (5), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:26:11,239 INFO L276 IsEmpty]: Start isEmpty. Operand 253 states and 302 transitions. [2023-11-21 22:26:11,240 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2023-11-21 22:26:11,240 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:26:11,240 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:26:11,240 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2023-11-21 22:26:11,241 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ##fun~$Pointer$~TO~VOIDErr8REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-11-21 22:26:11,241 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:26:11,241 INFO L85 PathProgramCache]: Analyzing trace with hash -561240689, now seen corresponding path program 1 times [2023-11-21 22:26:11,241 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:26:11,258 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [910749716] [2023-11-21 22:26:11,258 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:26:11,259 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:26:11,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:26:11,746 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-21 22:26:11,746 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:26:11,746 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [910749716] [2023-11-21 22:26:11,747 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [910749716] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:26:11,747 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:26:11,747 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-21 22:26:11,748 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [259481820] [2023-11-21 22:26:11,748 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:26:11,748 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-21 22:26:11,748 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:26:11,749 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-21 22:26:11,749 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2023-11-21 22:26:11,749 INFO L87 Difference]: Start difference. First operand 253 states and 302 transitions. Second operand has 8 states, 7 states have (on average 2.857142857142857) internal successors, (20), 7 states have internal predecessors, (20), 2 states have call successors, (6), 2 states have call predecessors, (6), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:26:12,305 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:26:12,306 INFO L93 Difference]: Finished difference Result 260 states and 309 transitions. [2023-11-21 22:26:12,306 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-21 22:26:12,306 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 2.857142857142857) internal successors, (20), 7 states have internal predecessors, (20), 2 states have call successors, (6), 2 states have call predecessors, (6), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 26 [2023-11-21 22:26:12,307 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:26:12,308 INFO L225 Difference]: With dead ends: 260 [2023-11-21 22:26:12,308 INFO L226 Difference]: Without dead ends: 260 [2023-11-21 22:26:12,309 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2023-11-21 22:26:12,309 INFO L413 NwaCegarLoop]: 206 mSDtfsCounter, 10 mSDsluCounter, 981 mSDsCounter, 0 mSdLazyCounter, 525 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 1187 SdHoareTripleChecker+Invalid, 535 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 525 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-21 22:26:12,310 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 1187 Invalid, 535 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 525 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-21 22:26:12,310 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 260 states. [2023-11-21 22:26:12,319 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 260 to 258. [2023-11-21 22:26:12,322 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 258 states, 138 states have (on average 1.826086956521739) internal successors, (252), 234 states have internal predecessors, (252), 32 states have call successors, (32), 12 states have call predecessors, (32), 8 states have return successors, (23), 14 states have call predecessors, (23), 18 states have call successors, (23) [2023-11-21 22:26:12,324 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 258 states to 258 states and 307 transitions. [2023-11-21 22:26:12,324 INFO L78 Accepts]: Start accepts. Automaton has 258 states and 307 transitions. Word has length 26 [2023-11-21 22:26:12,324 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:26:12,324 INFO L495 AbstractCegarLoop]: Abstraction has 258 states and 307 transitions. [2023-11-21 22:26:12,325 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 2.857142857142857) internal successors, (20), 7 states have internal predecessors, (20), 2 states have call successors, (6), 2 states have call predecessors, (6), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:26:12,325 INFO L276 IsEmpty]: Start isEmpty. Operand 258 states and 307 transitions. [2023-11-21 22:26:12,328 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2023-11-21 22:26:12,329 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:26:12,329 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:26:12,329 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2023-11-21 22:26:12,329 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ##fun~$Pointer$~TO~VOIDErr8REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-11-21 22:26:12,330 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:26:12,330 INFO L85 PathProgramCache]: Analyzing trace with hash 422305593, now seen corresponding path program 1 times [2023-11-21 22:26:12,330 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:26:12,330 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1380828830] [2023-11-21 22:26:12,330 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:26:12,331 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:26:12,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:26:13,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-21 22:26:13,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:26:13,308 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 4 proven. 7 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-21 22:26:13,308 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:26:13,308 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1380828830] [2023-11-21 22:26:13,308 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1380828830] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-21 22:26:13,309 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [950915431] [2023-11-21 22:26:13,309 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:26:13,309 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:26:13,309 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:26:13,311 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-21 22:26:13,340 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-21 22:26:13,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:26:13,539 INFO L262 TraceCheckSpWp]: Trace formula consists of 478 conjuncts, 58 conjunts are in the unsatisfiable core [2023-11-21 22:26:13,549 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-21 22:26:13,722 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2023-11-21 22:26:13,869 INFO L349 Elim1Store]: treesize reduction 21, result has 44.7 percent of original size [2023-11-21 22:26:13,870 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 21 [2023-11-21 22:26:13,925 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-11-21 22:26:13,926 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 26 treesize of output 19 [2023-11-21 22:26:13,954 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-11-21 22:26:13,955 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 26 treesize of output 19 [2023-11-21 22:26:14,001 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 25 treesize of output 13 [2023-11-21 22:26:14,047 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 5 proven. 6 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-21 22:26:14,047 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-21 22:26:14,214 WARN L854 $PredicateComparison]: unable to prove that (forall ((|v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_25| Int) (v_ArrVal_572 (Array Int Int))) (or (< |c_#StackHeapBarrier| (+ |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_25| 1)) (= (select (store |c_#valid| |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_25| 1) (select (select (store |c_#memory_$Pointer$.base| |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_25| v_ArrVal_572) |c_##fun~$Pointer$~TO~VOID_#~10#1.base|) |c_##fun~$Pointer$~TO~VOID_#~10#1.offset|)) 1))) is different from false [2023-11-21 22:26:14,233 WARN L854 $PredicateComparison]: unable to prove that (forall ((|v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_25| Int) (v_ArrVal_572 (Array Int Int))) (or (< |c_#StackHeapBarrier| (+ |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_25| 1)) (= (select (store |c_#valid| |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_25| 1) (select (select (store |c_#memory_$Pointer$.base| |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_25| v_ArrVal_572) |c_##fun~$Pointer$~TO~VOID_#in~10#1.base|) |c_##fun~$Pointer$~TO~VOID_#in~10#1.offset|)) 1))) is different from false [2023-11-21 22:26:14,946 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-11-21 22:26:14,946 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2023-11-21 22:26:14,954 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 42 treesize of output 34 [2023-11-21 22:26:14,973 INFO L349 Elim1Store]: treesize reduction 5, result has 50.0 percent of original size [2023-11-21 22:26:14,974 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 50 treesize of output 47 [2023-11-21 22:26:14,982 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2023-11-21 22:26:17,145 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-11-21 22:26:17,146 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2023-11-21 22:26:17,150 INFO L173 IndexEqualityManager]: detected equality via solver [2023-11-21 22:26:17,160 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-11-21 22:26:17,160 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 24 [2023-11-21 22:26:17,402 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-11-21 22:26:17,402 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 71 treesize of output 87 [2023-11-21 22:26:19,574 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 5 proven. 5 refuted. 0 times theorem prover too weak. 2 trivial. 1 not checked. [2023-11-21 22:26:19,575 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [950915431] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-21 22:26:19,575 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-21 22:26:19,575 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 13, 13] total 33 [2023-11-21 22:26:19,575 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1183290666] [2023-11-21 22:26:19,575 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-21 22:26:19,576 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 34 states [2023-11-21 22:26:19,576 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:26:19,577 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 34 interpolants. [2023-11-21 22:26:19,578 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=97, Invalid=890, Unknown=13, NotChecked=122, Total=1122 [2023-11-21 22:26:19,578 INFO L87 Difference]: Start difference. First operand 258 states and 307 transitions. Second operand has 34 states, 28 states have (on average 2.107142857142857) internal successors, (59), 28 states have internal predecessors, (59), 6 states have call successors, (11), 5 states have call predecessors, (11), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-21 22:26:22,461 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:26:22,461 INFO L93 Difference]: Finished difference Result 260 states and 308 transitions. [2023-11-21 22:26:22,462 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2023-11-21 22:26:22,462 INFO L78 Accepts]: Start accepts. Automaton has has 34 states, 28 states have (on average 2.107142857142857) internal successors, (59), 28 states have internal predecessors, (59), 6 states have call successors, (11), 5 states have call predecessors, (11), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) Word has length 37 [2023-11-21 22:26:22,462 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:26:22,464 INFO L225 Difference]: With dead ends: 260 [2023-11-21 22:26:22,464 INFO L226 Difference]: Without dead ends: 260 [2023-11-21 22:26:22,465 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 101 GetRequests, 56 SyntacticMatches, 1 SemanticMatches, 44 ConstructedPredicates, 2 IntricatePredicates, 0 DeprecatedPredicates, 320 ImplicationChecksByTransitivity, 6.0s TimeCoverageRelationStatistics Valid=245, Invalid=1641, Unknown=14, NotChecked=170, Total=2070 [2023-11-21 22:26:22,466 INFO L413 NwaCegarLoop]: 146 mSDtfsCounter, 164 mSDsluCounter, 1601 mSDsCounter, 0 mSdLazyCounter, 2312 mSolverCounterSat, 75 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 167 SdHoareTripleChecker+Valid, 1747 SdHoareTripleChecker+Invalid, 2761 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 75 IncrementalHoareTripleChecker+Valid, 2312 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 374 IncrementalHoareTripleChecker+Unchecked, 2.2s IncrementalHoareTripleChecker+Time [2023-11-21 22:26:22,466 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [167 Valid, 1747 Invalid, 2761 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [75 Valid, 2312 Invalid, 0 Unknown, 374 Unchecked, 2.2s Time] [2023-11-21 22:26:22,467 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 260 states. [2023-11-21 22:26:22,473 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 260 to 260. [2023-11-21 22:26:22,474 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 260 states, 140 states have (on average 1.8071428571428572) internal successors, (253), 236 states have internal predecessors, (253), 32 states have call successors, (32), 12 states have call predecessors, (32), 9 states have return successors, (23), 14 states have call predecessors, (23), 18 states have call successors, (23) [2023-11-21 22:26:22,476 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 308 transitions. [2023-11-21 22:26:22,476 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 308 transitions. Word has length 37 [2023-11-21 22:26:22,476 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:26:22,476 INFO L495 AbstractCegarLoop]: Abstraction has 260 states and 308 transitions. [2023-11-21 22:26:22,477 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 34 states, 28 states have (on average 2.107142857142857) internal successors, (59), 28 states have internal predecessors, (59), 6 states have call successors, (11), 5 states have call predecessors, (11), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-21 22:26:22,477 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 308 transitions. [2023-11-21 22:26:22,477 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2023-11-21 22:26:22,478 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:26:22,478 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:26:22,506 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-21 22:26:22,698 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2023-11-21 22:26:22,698 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ##fun~$Pointer$~TO~VOIDErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-11-21 22:26:22,698 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:26:22,698 INFO L85 PathProgramCache]: Analyzing trace with hash 422305594, now seen corresponding path program 1 times [2023-11-21 22:26:22,699 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:26:22,699 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1451123796] [2023-11-21 22:26:22,699 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:26:22,699 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:26:22,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:26:23,758 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-21 22:26:23,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:26:24,060 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 4 proven. 7 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-21 22:26:24,060 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:26:24,060 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1451123796] [2023-11-21 22:26:24,061 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1451123796] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-21 22:26:24,061 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [909030543] [2023-11-21 22:26:24,061 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:26:24,061 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:26:24,061 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:26:24,062 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-21 22:26:24,082 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-21 22:26:24,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:26:24,278 INFO L262 TraceCheckSpWp]: Trace formula consists of 478 conjuncts, 69 conjunts are in the unsatisfiable core [2023-11-21 22:26:24,284 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-21 22:26:24,328 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2023-11-21 22:26:24,395 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2023-11-21 22:26:24,398 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2023-11-21 22:26:24,556 INFO L349 Elim1Store]: treesize reduction 27, result has 25.0 percent of original size [2023-11-21 22:26:24,557 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 16 treesize of output 18 [2023-11-21 22:26:24,613 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-11-21 22:26:24,614 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-11-21 22:26:24,622 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-11-21 22:26:24,623 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 11 [2023-11-21 22:26:24,645 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-11-21 22:26:24,646 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2023-11-21 22:26:24,655 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-11-21 22:26:24,656 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 11 [2023-11-21 22:26:24,724 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 9 [2023-11-21 22:26:24,729 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2023-11-21 22:26:24,759 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 5 proven. 6 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-21 22:26:24,759 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-21 22:26:24,855 WARN L854 $PredicateComparison]: unable to prove that (and (forall ((v_ArrVal_759 (Array Int Int)) (v_ArrVal_758 (Array Int Int))) (<= (+ 8 (select (select (store |c_#memory_$Pointer$.offset| |c_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base| v_ArrVal_759) |c_##fun~$Pointer$~TO~VOID_dll_insert_slave_~dll#1.base|) |c_##fun~$Pointer$~TO~VOID_dll_insert_slave_~dll#1.offset|)) (select |c_#length| (select (select (store |c_#memory_$Pointer$.base| |c_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base| v_ArrVal_758) |c_##fun~$Pointer$~TO~VOID_dll_insert_slave_~dll#1.base|) |c_##fun~$Pointer$~TO~VOID_dll_insert_slave_~dll#1.offset|)))) (forall ((v_ArrVal_759 (Array Int Int))) (<= 0 (+ 4 (select (select (store |c_#memory_$Pointer$.offset| |c_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base| v_ArrVal_759) |c_##fun~$Pointer$~TO~VOID_dll_insert_slave_~dll#1.base|) |c_##fun~$Pointer$~TO~VOID_dll_insert_slave_~dll#1.offset|))))) is different from false [2023-11-21 22:26:24,904 WARN L854 $PredicateComparison]: unable to prove that (and (forall ((|v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_33| Int)) (or (< |c_#StackHeapBarrier| (+ |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_33| 1)) (forall ((v_ArrVal_759 (Array Int Int))) (<= 0 (+ (select (select (store |c_#memory_$Pointer$.offset| |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_33| v_ArrVal_759) |c_##fun~$Pointer$~TO~VOID_#~10#1.base|) |c_##fun~$Pointer$~TO~VOID_#~10#1.offset|) 4))))) (forall ((|v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_33| Int)) (or (forall ((v_ArrVal_759 (Array Int Int)) (v_ArrVal_758 (Array Int Int))) (<= (+ (select (select (store |c_#memory_$Pointer$.offset| |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_33| v_ArrVal_759) |c_##fun~$Pointer$~TO~VOID_#~10#1.base|) |c_##fun~$Pointer$~TO~VOID_#~10#1.offset|) 8) (select (store |c_#length| |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_33| 8) (select (select (store |c_#memory_$Pointer$.base| |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_33| v_ArrVal_758) |c_##fun~$Pointer$~TO~VOID_#~10#1.base|) |c_##fun~$Pointer$~TO~VOID_#~10#1.offset|)))) (< |c_#StackHeapBarrier| (+ |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_33| 1))))) is different from false [2023-11-21 22:26:24,947 WARN L854 $PredicateComparison]: unable to prove that (and (forall ((|v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_33| Int)) (or (forall ((v_ArrVal_759 (Array Int Int))) (<= 0 (+ 4 (select (select (store |c_#memory_$Pointer$.offset| |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_33| v_ArrVal_759) |c_##fun~$Pointer$~TO~VOID_#in~10#1.base|) |c_##fun~$Pointer$~TO~VOID_#in~10#1.offset|)))) (< |c_#StackHeapBarrier| (+ |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_33| 1)))) (forall ((|v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_33| Int)) (or (< |c_#StackHeapBarrier| (+ |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_33| 1)) (forall ((v_ArrVal_759 (Array Int Int)) (v_ArrVal_758 (Array Int Int))) (<= (+ 8 (select (select (store |c_#memory_$Pointer$.offset| |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_33| v_ArrVal_759) |c_##fun~$Pointer$~TO~VOID_#in~10#1.base|) |c_##fun~$Pointer$~TO~VOID_#in~10#1.offset|)) (select (store |c_#length| |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_33| 8) (select (select (store |c_#memory_$Pointer$.base| |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_33| v_ArrVal_758) |c_##fun~$Pointer$~TO~VOID_#in~10#1.base|) |c_##fun~$Pointer$~TO~VOID_#in~10#1.offset|))))))) is different from false [2023-11-21 22:26:24,985 WARN L854 $PredicateComparison]: unable to prove that (and (forall ((|v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_33| Int)) (or (forall ((v_ArrVal_759 (Array Int Int))) (<= 0 (+ (select (select (store |c_#memory_$Pointer$.offset| |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_33| v_ArrVal_759) |c_dll_create_generic_~#dll~0.base|) |c_dll_create_generic_~#dll~0.offset|) 4))) (< |c_#StackHeapBarrier| (+ |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_33| 1)))) (forall ((|v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_33| Int)) (or (forall ((v_ArrVal_759 (Array Int Int)) (v_ArrVal_758 (Array Int Int))) (<= (+ (select (select (store |c_#memory_$Pointer$.offset| |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_33| v_ArrVal_759) |c_dll_create_generic_~#dll~0.base|) |c_dll_create_generic_~#dll~0.offset|) 8) (select (store |c_#length| |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_33| 8) (select (select (store |c_#memory_$Pointer$.base| |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_33| v_ArrVal_758) |c_dll_create_generic_~#dll~0.base|) |c_dll_create_generic_~#dll~0.offset|)))) (< |c_#StackHeapBarrier| (+ |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_33| 1))))) is different from false [2023-11-21 22:26:25,133 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-11-21 22:26:25,134 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 43 treesize of output 44 [2023-11-21 22:26:25,143 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 80 treesize of output 68 [2023-11-21 22:26:25,151 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-11-21 22:26:25,151 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 68 treesize of output 60 [2023-11-21 22:26:25,159 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 106 treesize of output 94 [2023-11-21 22:26:25,166 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 77 treesize of output 73 [2023-11-21 22:26:25,176 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 64 treesize of output 56 [2023-11-21 22:26:25,180 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 56 treesize of output 44 [2023-11-21 22:26:25,205 INFO L349 Elim1Store]: treesize reduction 7, result has 12.5 percent of original size [2023-11-21 22:26:25,205 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 20 treesize of output 1 [2023-11-21 22:26:25,394 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-11-21 22:26:25,394 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 41 [2023-11-21 22:26:25,403 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-11-21 22:26:25,404 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 32 treesize of output 33 [2023-11-21 22:26:25,407 INFO L173 IndexEqualityManager]: detected equality via solver [2023-11-21 22:26:25,419 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-11-21 22:26:25,419 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 30 treesize of output 33 [2023-11-21 22:26:25,424 INFO L173 IndexEqualityManager]: detected equality via solver [2023-11-21 22:26:25,436 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-11-21 22:26:25,436 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 26 [2023-11-21 22:26:25,483 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2023-11-21 22:26:25,483 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 20 treesize of output 21 [2023-11-21 22:26:25,487 INFO L173 IndexEqualityManager]: detected equality via solver [2023-11-21 22:26:25,490 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 10 [2023-11-21 22:26:25,843 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 5 proven. 3 refuted. 0 times theorem prover too weak. 2 trivial. 3 not checked. [2023-11-21 22:26:25,843 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [909030543] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-21 22:26:25,843 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-21 22:26:25,844 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 12, 12] total 30 [2023-11-21 22:26:25,844 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2043821182] [2023-11-21 22:26:25,844 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-21 22:26:25,845 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2023-11-21 22:26:25,845 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:26:25,846 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2023-11-21 22:26:25,846 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=82, Invalid=632, Unknown=4, NotChecked=212, Total=930 [2023-11-21 22:26:25,847 INFO L87 Difference]: Start difference. First operand 260 states and 308 transitions. Second operand has 31 states, 25 states have (on average 2.32) internal successors, (58), 25 states have internal predecessors, (58), 6 states have call successors, (11), 5 states have call predecessors, (11), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-21 22:26:29,179 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:26:29,179 INFO L93 Difference]: Finished difference Result 259 states and 307 transitions. [2023-11-21 22:26:29,180 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2023-11-21 22:26:29,180 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 25 states have (on average 2.32) internal successors, (58), 25 states have internal predecessors, (58), 6 states have call successors, (11), 5 states have call predecessors, (11), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) Word has length 37 [2023-11-21 22:26:29,180 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:26:29,182 INFO L225 Difference]: With dead ends: 259 [2023-11-21 22:26:29,182 INFO L226 Difference]: Without dead ends: 259 [2023-11-21 22:26:29,183 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 101 GetRequests, 58 SyntacticMatches, 2 SemanticMatches, 41 ConstructedPredicates, 4 IntricatePredicates, 0 DeprecatedPredicates, 222 ImplicationChecksByTransitivity, 1.6s TimeCoverageRelationStatistics Valid=217, Invalid=1277, Unknown=4, NotChecked=308, Total=1806 [2023-11-21 22:26:29,184 INFO L413 NwaCegarLoop]: 146 mSDtfsCounter, 122 mSDsluCounter, 1967 mSDsCounter, 0 mSdLazyCounter, 2585 mSolverCounterSat, 66 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 125 SdHoareTripleChecker+Valid, 2113 SdHoareTripleChecker+Invalid, 3364 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 66 IncrementalHoareTripleChecker+Valid, 2585 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 713 IncrementalHoareTripleChecker+Unchecked, 2.5s IncrementalHoareTripleChecker+Time [2023-11-21 22:26:29,184 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [125 Valid, 2113 Invalid, 3364 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [66 Valid, 2585 Invalid, 0 Unknown, 713 Unchecked, 2.5s Time] [2023-11-21 22:26:29,185 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 259 states. [2023-11-21 22:26:29,191 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 259 to 259. [2023-11-21 22:26:29,192 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 259 states, 140 states have (on average 1.8) internal successors, (252), 235 states have internal predecessors, (252), 32 states have call successors, (32), 12 states have call predecessors, (32), 9 states have return successors, (23), 14 states have call predecessors, (23), 18 states have call successors, (23) [2023-11-21 22:26:29,193 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 259 states to 259 states and 307 transitions. [2023-11-21 22:26:29,194 INFO L78 Accepts]: Start accepts. Automaton has 259 states and 307 transitions. Word has length 37 [2023-11-21 22:26:29,194 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:26:29,194 INFO L495 AbstractCegarLoop]: Abstraction has 259 states and 307 transitions. [2023-11-21 22:26:29,194 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 25 states have (on average 2.32) internal successors, (58), 25 states have internal predecessors, (58), 6 states have call successors, (11), 5 states have call predecessors, (11), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-21 22:26:29,194 INFO L276 IsEmpty]: Start isEmpty. Operand 259 states and 307 transitions. [2023-11-21 22:26:29,195 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2023-11-21 22:26:29,195 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:26:29,196 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:26:29,223 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-21 22:26:29,414 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2023-11-21 22:26:29,414 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting dll_insert_masterErr10REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-11-21 22:26:29,414 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:26:29,414 INFO L85 PathProgramCache]: Analyzing trace with hash -551666034, now seen corresponding path program 1 times [2023-11-21 22:26:29,415 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:26:29,415 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [106463445] [2023-11-21 22:26:29,415 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:26:29,415 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:26:29,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:26:29,616 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-21 22:26:29,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:26:29,640 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 14 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-21 22:26:29,640 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:26:29,640 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [106463445] [2023-11-21 22:26:29,641 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [106463445] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-21 22:26:29,641 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1443826597] [2023-11-21 22:26:29,641 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:26:29,641 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:26:29,641 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:26:29,642 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-21 22:26:29,666 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-11-21 22:26:29,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:26:29,851 INFO L262 TraceCheckSpWp]: Trace formula consists of 507 conjuncts, 4 conjunts are in the unsatisfiable core [2023-11-21 22:26:29,871 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-21 22:26:29,897 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-21 22:26:29,897 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-21 22:26:29,897 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1443826597] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:26:29,898 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-21 22:26:29,898 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [6] total 6 [2023-11-21 22:26:29,898 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1829227123] [2023-11-21 22:26:29,898 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:26:29,899 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-21 22:26:29,899 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:26:29,899 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-21 22:26:29,900 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-21 22:26:29,900 INFO L87 Difference]: Start difference. First operand 259 states and 307 transitions. Second operand has 5 states, 4 states have (on average 7.5) internal successors, (30), 4 states have internal predecessors, (30), 3 states have call successors, (8), 4 states have call predecessors, (8), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-21 22:26:30,037 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:26:30,037 INFO L93 Difference]: Finished difference Result 248 states and 284 transitions. [2023-11-21 22:26:30,037 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-21 22:26:30,038 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 7.5) internal successors, (30), 4 states have internal predecessors, (30), 3 states have call successors, (8), 4 states have call predecessors, (8), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 40 [2023-11-21 22:26:30,038 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:26:30,039 INFO L225 Difference]: With dead ends: 248 [2023-11-21 22:26:30,039 INFO L226 Difference]: Without dead ends: 248 [2023-11-21 22:26:30,040 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 48 GetRequests, 42 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2023-11-21 22:26:30,040 INFO L413 NwaCegarLoop]: 205 mSDtfsCounter, 19 mSDsluCounter, 606 mSDsCounter, 0 mSdLazyCounter, 155 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 19 SdHoareTripleChecker+Valid, 811 SdHoareTripleChecker+Invalid, 162 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 155 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-21 22:26:30,040 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [19 Valid, 811 Invalid, 162 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 155 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-21 22:26:30,041 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 248 states. [2023-11-21 22:26:30,045 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 248 to 248. [2023-11-21 22:26:30,049 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 248 states, 132 states have (on average 1.8106060606060606) internal successors, (239), 227 states have internal predecessors, (239), 29 states have call successors, (29), 11 states have call predecessors, (29), 9 states have return successors, (16), 12 states have call predecessors, (16), 15 states have call successors, (16) [2023-11-21 22:26:30,050 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 248 states to 248 states and 284 transitions. [2023-11-21 22:26:30,050 INFO L78 Accepts]: Start accepts. Automaton has 248 states and 284 transitions. Word has length 40 [2023-11-21 22:26:30,050 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:26:30,051 INFO L495 AbstractCegarLoop]: Abstraction has 248 states and 284 transitions. [2023-11-21 22:26:30,051 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 7.5) internal successors, (30), 4 states have internal predecessors, (30), 3 states have call successors, (8), 4 states have call predecessors, (8), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-21 22:26:30,051 INFO L276 IsEmpty]: Start isEmpty. Operand 248 states and 284 transitions. [2023-11-21 22:26:30,052 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2023-11-21 22:26:30,052 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:26:30,052 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:26:30,077 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2023-11-21 22:26:30,266 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable17 [2023-11-21 22:26:30,266 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting dll_insert_masterErr12REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-11-21 22:26:30,266 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:26:30,266 INFO L85 PathProgramCache]: Analyzing trace with hash 1758370675, now seen corresponding path program 1 times [2023-11-21 22:26:30,267 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:26:30,267 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1331381379] [2023-11-21 22:26:30,267 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:26:30,267 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:26:30,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:26:31,063 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-21 22:26:31,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:26:31,579 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2023-11-21 22:26:31,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:26:31,894 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-21 22:26:31,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:26:32,070 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-21 22:26:32,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:26:32,459 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 6 proven. 8 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-21 22:26:32,459 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:26:32,459 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1331381379] [2023-11-21 22:26:32,459 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1331381379] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-21 22:26:32,459 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1627674836] [2023-11-21 22:26:32,459 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:26:32,459 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:26:32,460 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:26:32,461 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-21 22:26:32,478 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2023-11-21 22:26:32,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:26:32,691 INFO L262 TraceCheckSpWp]: Trace formula consists of 526 conjuncts, 58 conjunts are in the unsatisfiable core [2023-11-21 22:26:32,697 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-21 22:26:32,742 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2023-11-21 22:26:33,111 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-11-21 22:26:33,115 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-11-21 22:26:33,116 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 30 treesize of output 27 [2023-11-21 22:26:33,122 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 3 [2023-11-21 22:26:33,174 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 10 [2023-11-21 22:26:34,052 INFO L349 Elim1Store]: treesize reduction 24, result has 4.0 percent of original size [2023-11-21 22:26:34,053 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 109 treesize of output 1 [2023-11-21 22:26:34,054 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 5 proven. 9 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-21 22:26:34,054 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-21 22:26:34,933 WARN L854 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1318 (Array Int Int)) (|v_##fun~$Pointer$~TO~VOID_dll_insert_slave_~dll#1.offset_49| Int) (|v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_67| Int)) (or (< |c_#StackHeapBarrier| (+ |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_67| 1)) (not (= (select (select (store |c_#memory_$Pointer$.base| |v_##fun~$Pointer$~TO~VOID_alloc_or_die_slave_~ptr~0#1.base_67| v_ArrVal_1318) |c_dll_create_generic_~#dll~0.base|) |v_##fun~$Pointer$~TO~VOID_dll_insert_slave_~dll#1.offset_49|) 0)) (< |v_##fun~$Pointer$~TO~VOID_dll_insert_slave_~dll#1.offset_49| 0) (< |c_dll_create_generic_~#dll~0.offset| |v_##fun~$Pointer$~TO~VOID_dll_insert_slave_~dll#1.offset_49|))) is different from false [2023-11-21 22:26:34,936 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1627674836] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-21 22:26:34,936 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2023-11-21 22:26:34,936 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 17] total 32 [2023-11-21 22:26:34,936 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [682391759] [2023-11-21 22:26:34,937 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2023-11-21 22:26:34,937 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2023-11-21 22:26:34,937 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:26:34,938 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2023-11-21 22:26:34,939 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=92, Invalid=896, Unknown=8, NotChecked=60, Total=1056 [2023-11-21 22:26:34,939 INFO L87 Difference]: Start difference. First operand 248 states and 284 transitions. Second operand has 32 states, 29 states have (on average 1.8620689655172413) internal successors, (54), 28 states have internal predecessors, (54), 5 states have call successors, (11), 3 states have call predecessors, (11), 5 states have return successors, (7), 3 states have call predecessors, (7), 5 states have call successors, (7) [2023-11-21 22:26:39,681 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:26:39,681 INFO L93 Difference]: Finished difference Result 253 states and 287 transitions. [2023-11-21 22:26:39,682 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2023-11-21 22:26:39,682 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 29 states have (on average 1.8620689655172413) internal successors, (54), 28 states have internal predecessors, (54), 5 states have call successors, (11), 3 states have call predecessors, (11), 5 states have return successors, (7), 3 states have call predecessors, (7), 5 states have call successors, (7) Word has length 46 [2023-11-21 22:26:39,682 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-21 22:26:39,684 INFO L225 Difference]: With dead ends: 253 [2023-11-21 22:26:39,684 INFO L226 Difference]: Without dead ends: 250 [2023-11-21 22:26:39,686 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 100 GetRequests, 47 SyntacticMatches, 0 SemanticMatches, 53 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 591 ImplicationChecksByTransitivity, 2.7s TimeCoverageRelationStatistics Valid=319, Invalid=2529, Unknown=18, NotChecked=104, Total=2970 [2023-11-21 22:26:39,686 INFO L413 NwaCegarLoop]: 142 mSDtfsCounter, 164 mSDsluCounter, 2420 mSDsCounter, 0 mSdLazyCounter, 2982 mSolverCounterSat, 53 mSolverCounterUnsat, 52 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 164 SdHoareTripleChecker+Valid, 2562 SdHoareTripleChecker+Invalid, 3087 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 53 IncrementalHoareTripleChecker+Valid, 2982 IncrementalHoareTripleChecker+Invalid, 52 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.1s IncrementalHoareTripleChecker+Time [2023-11-21 22:26:39,687 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [164 Valid, 2562 Invalid, 3087 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [53 Valid, 2982 Invalid, 52 Unknown, 0 Unchecked, 3.1s Time] [2023-11-21 22:26:39,687 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 250 states. [2023-11-21 22:26:39,692 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 250 to 250. [2023-11-21 22:26:39,692 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 250 states, 133 states have (on average 1.7969924812030076) internal successors, (239), 228 states have internal predecessors, (239), 29 states have call successors, (29), 11 states have call predecessors, (29), 10 states have return successors, (16), 13 states have call predecessors, (16), 15 states have call successors, (16) [2023-11-21 22:26:39,694 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 250 states to 250 states and 284 transitions. [2023-11-21 22:26:39,694 INFO L78 Accepts]: Start accepts. Automaton has 250 states and 284 transitions. Word has length 46 [2023-11-21 22:26:39,694 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-21 22:26:39,695 INFO L495 AbstractCegarLoop]: Abstraction has 250 states and 284 transitions. [2023-11-21 22:26:39,695 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 29 states have (on average 1.8620689655172413) internal successors, (54), 28 states have internal predecessors, (54), 5 states have call successors, (11), 3 states have call predecessors, (11), 5 states have return successors, (7), 3 states have call predecessors, (7), 5 states have call successors, (7) [2023-11-21 22:26:39,695 INFO L276 IsEmpty]: Start isEmpty. Operand 250 states and 284 transitions. [2023-11-21 22:26:39,695 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2023-11-21 22:26:39,696 INFO L187 NwaCegarLoop]: Found error trace [2023-11-21 22:26:39,696 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:26:39,717 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2023-11-21 22:26:39,910 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5eb9721c-9d5b-4528-8c63-7c2a5f2dbef9/bin/uautomizer-verify-bycVGegfSx/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-21 22:26:39,910 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting dll_insert_masterErr12REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [dll_insert_masterErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, dll_insert_masterErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 95 more)] === [2023-11-21 22:26:39,910 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:26:39,911 INFO L85 PathProgramCache]: Analyzing trace with hash -1731128146, now seen corresponding path program 1 times [2023-11-21 22:26:39,911 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:26:39,911 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [226778781] [2023-11-21 22:26:39,911 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:26:39,911 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:26:39,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:26:41,157 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-21 22:26:41,185 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:26:41,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2023-11-21 22:26:41,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat