./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/ldv-memsafety/memleaks_test15-1.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version 30e01a73 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/ldv-memsafety/memleaks_test15-1.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash e94333448b9ec2a5ffed0adee00d968fb025c54e55196475ef51117fcee9fc3a --- Real Ultimate output --- This is Ultimate 0.2.3-dev-30e01a7 [2023-11-23 21:31:50,111 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-23 21:31:50,209 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf [2023-11-23 21:31:50,215 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-23 21:31:50,215 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-23 21:31:50,250 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-23 21:31:50,251 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-23 21:31:50,252 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-23 21:31:50,253 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-23 21:31:50,261 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-23 21:31:50,261 INFO L153 SettingsManager]: * User list type=DISABLED [2023-11-23 21:31:50,262 INFO L151 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2023-11-23 21:31:50,262 INFO L153 SettingsManager]: * Explicit value domain=true [2023-11-23 21:31:50,263 INFO L153 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2023-11-23 21:31:50,263 INFO L153 SettingsManager]: * Octagon Domain=false [2023-11-23 21:31:50,264 INFO L153 SettingsManager]: * Abstract domain=CompoundDomain [2023-11-23 21:31:50,264 INFO L153 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2023-11-23 21:31:50,264 INFO L153 SettingsManager]: * Use the RCFG-of-the-future interface=true [2023-11-23 21:31:50,265 INFO L153 SettingsManager]: * Interval Domain=false [2023-11-23 21:31:50,265 INFO L151 SettingsManager]: Preferences of Sifa differ from their defaults: [2023-11-23 21:31:50,266 INFO L153 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2023-11-23 21:31:50,266 INFO L153 SettingsManager]: * Simplification Technique=POLY_PAC [2023-11-23 21:31:50,267 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-23 21:31:50,267 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-23 21:31:50,268 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-23 21:31:50,268 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-23 21:31:50,269 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-23 21:31:50,269 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-23 21:31:50,269 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-23 21:31:50,270 INFO L153 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2023-11-23 21:31:50,270 INFO L153 SettingsManager]: * Bitprecise bitfields=true [2023-11-23 21:31:50,271 INFO L153 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2023-11-23 21:31:50,271 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-23 21:31:50,271 INFO L153 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2023-11-23 21:31:50,271 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2023-11-23 21:31:50,272 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-23 21:31:50,272 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-23 21:31:50,272 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-23 21:31:50,272 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-23 21:31:50,273 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-23 21:31:50,273 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-23 21:31:50,273 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-23 21:31:50,273 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-23 21:31:50,274 INFO L153 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2023-11-23 21:31:50,274 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-23 21:31:50,274 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-23 21:31:50,274 INFO L153 SettingsManager]: * Trace refinement exception blacklist=NONE [2023-11-23 21:31:50,274 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-23 21:31:50,275 INFO L153 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> e94333448b9ec2a5ffed0adee00d968fb025c54e55196475ef51117fcee9fc3a [2023-11-23 21:31:50,558 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-23 21:31:50,584 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-23 21:31:50,589 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-23 21:31:50,591 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-23 21:31:50,591 INFO L274 PluginConnector]: CDTParser initialized [2023-11-23 21:31:50,593 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/../../sv-benchmarks/c/ldv-memsafety/memleaks_test15-1.i [2023-11-23 21:31:53,906 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-23 21:31:54,291 INFO L384 CDTParser]: Found 1 translation units. [2023-11-23 21:31:54,292 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/sv-benchmarks/c/ldv-memsafety/memleaks_test15-1.i [2023-11-23 21:31:54,310 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/data/ea30e6b08/9f8190ee70fb46809d587288d3d87524/FLAG1aeadd123 [2023-11-23 21:31:54,325 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/data/ea30e6b08/9f8190ee70fb46809d587288d3d87524 [2023-11-23 21:31:54,328 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-23 21:31:54,330 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-23 21:31:54,331 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-23 21:31:54,332 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-23 21:31:54,338 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-23 21:31:54,339 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 09:31:54" (1/1) ... [2023-11-23 21:31:54,340 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@23078acb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:31:54, skipping insertion in model container [2023-11-23 21:31:54,340 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 09:31:54" (1/1) ... [2023-11-23 21:31:54,416 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-23 21:31:55,007 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-23 21:31:55,039 ERROR L324 MainTranslator]: Unsupported Syntax: Found a cast between two array/pointer types of different sizes while using memory model HoenickeLindenmann_Original (while Not using bitvector translation) [2023-11-23 21:31:55,040 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieTranslatorObserver@41483614 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:31:55, skipping insertion in model container [2023-11-23 21:31:55,040 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-23 21:31:55,041 INFO L186 ToolchainWalker]: Toolchain execution was canceled (user or tool) before executing de.uni_freiburg.informatik.ultimate.boogie.procedureinliner [2023-11-23 21:31:55,043 INFO L158 Benchmark]: Toolchain (without parser) took 712.43ms. Allocated memory is still 121.6MB. Free memory was 78.2MB in the beginning and 63.0MB in the end (delta: 15.2MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2023-11-23 21:31:55,044 INFO L158 Benchmark]: CDTParser took 0.26ms. Allocated memory is still 121.6MB. Free memory is still 94.0MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-23 21:31:55,045 INFO L158 Benchmark]: CACSL2BoogieTranslator took 709.59ms. Allocated memory is still 121.6MB. Free memory was 77.7MB in the beginning and 63.0MB in the end (delta: 14.7MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2023-11-23 21:31:55,047 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.26ms. Allocated memory is still 121.6MB. Free memory is still 94.0MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 709.59ms. Allocated memory is still 121.6MB. Free memory was 77.7MB in the beginning and 63.0MB in the end (delta: 14.7MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - UnsupportedSyntaxResult [Line: 576]: Unsupported Syntax Found a cast between two array/pointer types of different sizes while using memory model HoenickeLindenmann_Original (while Not using bitvector translation) RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/ldv-memsafety/memleaks_test15-1.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash e94333448b9ec2a5ffed0adee00d968fb025c54e55196475ef51117fcee9fc3a --- Real Ultimate output --- This is Ultimate 0.2.3-dev-30e01a7 [2023-11-23 21:31:57,625 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-23 21:31:57,775 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Bitvector.epf [2023-11-23 21:31:57,780 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-23 21:31:57,781 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-23 21:31:57,825 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-23 21:31:57,825 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-23 21:31:57,826 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-23 21:31:57,827 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-23 21:31:57,832 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-23 21:31:57,832 INFO L153 SettingsManager]: * User list type=DISABLED [2023-11-23 21:31:57,833 INFO L151 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2023-11-23 21:31:57,833 INFO L153 SettingsManager]: * Explicit value domain=true [2023-11-23 21:31:57,835 INFO L153 SettingsManager]: * Octagon Domain=false [2023-11-23 21:31:57,835 INFO L153 SettingsManager]: * Abstract domain=CompoundDomain [2023-11-23 21:31:57,836 INFO L153 SettingsManager]: * Interval Domain=false [2023-11-23 21:31:57,837 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-23 21:31:57,837 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-23 21:31:57,838 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-23 21:31:57,839 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-23 21:31:57,839 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-23 21:31:57,840 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-23 21:31:57,840 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-23 21:31:57,841 INFO L153 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2023-11-23 21:31:57,841 INFO L153 SettingsManager]: * Bitprecise bitfields=true [2023-11-23 21:31:57,842 INFO L153 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2023-11-23 21:31:57,842 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-23 21:31:57,842 INFO L153 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2023-11-23 21:31:57,843 INFO L153 SettingsManager]: * Use bitvectors instead of ints=true [2023-11-23 21:31:57,843 INFO L153 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2023-11-23 21:31:57,845 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2023-11-23 21:31:57,845 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-23 21:31:57,845 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-23 21:31:57,846 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-23 21:31:57,846 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-23 21:31:57,846 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-23 21:31:57,847 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-23 21:31:57,847 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-23 21:31:57,848 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-23 21:31:57,848 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-23 21:31:57,848 INFO L153 SettingsManager]: * Trace refinement strategy=WALRUS [2023-11-23 21:31:57,848 INFO L153 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2023-11-23 21:31:57,849 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-23 21:31:57,849 INFO L153 SettingsManager]: * Trace refinement exception blacklist=NONE [2023-11-23 21:31:57,849 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-23 21:31:57,850 INFO L153 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> e94333448b9ec2a5ffed0adee00d968fb025c54e55196475ef51117fcee9fc3a [2023-11-23 21:31:58,281 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-23 21:31:58,309 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-23 21:31:58,312 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-23 21:31:58,313 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-23 21:31:58,314 INFO L274 PluginConnector]: CDTParser initialized [2023-11-23 21:31:58,316 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/../../sv-benchmarks/c/ldv-memsafety/memleaks_test15-1.i [2023-11-23 21:32:01,705 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-23 21:32:02,024 INFO L384 CDTParser]: Found 1 translation units. [2023-11-23 21:32:02,032 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/sv-benchmarks/c/ldv-memsafety/memleaks_test15-1.i [2023-11-23 21:32:02,057 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/data/5350b9e4f/1bf06dcc67e049749ce0f5cb35a3d166/FLAGa0952bd72 [2023-11-23 21:32:02,073 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/data/5350b9e4f/1bf06dcc67e049749ce0f5cb35a3d166 [2023-11-23 21:32:02,075 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-23 21:32:02,077 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-23 21:32:02,078 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-23 21:32:02,078 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-23 21:32:02,084 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-23 21:32:02,085 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 09:32:02" (1/1) ... [2023-11-23 21:32:02,086 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6ab7fe6b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:32:02, skipping insertion in model container [2023-11-23 21:32:02,086 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 09:32:02" (1/1) ... [2023-11-23 21:32:02,139 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-23 21:32:02,658 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-23 21:32:02,687 INFO L199 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2023-11-23 21:32:02,711 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-23 21:32:02,808 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-23 21:32:02,827 INFO L202 MainTranslator]: Completed pre-run [2023-11-23 21:32:02,915 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-23 21:32:02,985 WARN L675 CHandler]: The function release is called, but not defined or handled by StandardFunctionHandler. [2023-11-23 21:32:02,992 INFO L206 MainTranslator]: Completed translation [2023-11-23 21:32:02,993 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:32:02 WrapperNode [2023-11-23 21:32:02,993 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-23 21:32:02,994 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-23 21:32:02,994 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-23 21:32:02,995 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-23 21:32:03,002 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:32:02" (1/1) ... [2023-11-23 21:32:03,057 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:32:02" (1/1) ... [2023-11-23 21:32:03,115 INFO L138 Inliner]: procedures = 176, calls = 103, calls flagged for inlining = 31, calls inlined = 14, statements flattened = 180 [2023-11-23 21:32:03,115 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-23 21:32:03,116 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-23 21:32:03,117 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-23 21:32:03,117 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-23 21:32:03,126 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:32:02" (1/1) ... [2023-11-23 21:32:03,126 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:32:02" (1/1) ... [2023-11-23 21:32:03,144 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:32:02" (1/1) ... [2023-11-23 21:32:03,144 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:32:02" (1/1) ... [2023-11-23 21:32:03,172 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:32:02" (1/1) ... [2023-11-23 21:32:03,174 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:32:02" (1/1) ... [2023-11-23 21:32:03,176 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:32:02" (1/1) ... [2023-11-23 21:32:03,179 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:32:02" (1/1) ... [2023-11-23 21:32:03,183 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-23 21:32:03,200 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-23 21:32:03,200 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-23 21:32:03,201 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-23 21:32:03,201 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:32:02" (1/1) ... [2023-11-23 21:32:03,208 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-23 21:32:03,220 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:32:03,234 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-23 21:32:03,256 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-23 21:32:03,280 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2023-11-23 21:32:03,281 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2023-11-23 21:32:03,281 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-23 21:32:03,281 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2023-11-23 21:32:03,281 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2023-11-23 21:32:03,281 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2023-11-23 21:32:03,283 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2023-11-23 21:32:03,284 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2023-11-23 21:32:03,284 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2023-11-23 21:32:03,284 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2023-11-23 21:32:03,284 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2023-11-23 21:32:03,284 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-23 21:32:03,285 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-23 21:32:03,441 INFO L241 CfgBuilder]: Building ICFG [2023-11-23 21:32:03,444 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-23 21:32:04,051 INFO L282 CfgBuilder]: Performing block encoding [2023-11-23 21:32:04,124 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-23 21:32:04,125 INFO L309 CfgBuilder]: Removed 0 assume(true) statements. [2023-11-23 21:32:04,125 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 09:32:04 BoogieIcfgContainer [2023-11-23 21:32:04,126 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-23 21:32:04,128 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-23 21:32:04,128 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-23 21:32:04,132 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-23 21:32:04,132 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 09:32:02" (1/3) ... [2023-11-23 21:32:04,133 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5c99bc83 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 09:32:04, skipping insertion in model container [2023-11-23 21:32:04,133 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 09:32:02" (2/3) ... [2023-11-23 21:32:04,136 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5c99bc83 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 09:32:04, skipping insertion in model container [2023-11-23 21:32:04,136 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 09:32:04" (3/3) ... [2023-11-23 21:32:04,137 INFO L112 eAbstractionObserver]: Analyzing ICFG memleaks_test15-1.i [2023-11-23 21:32:04,161 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-23 21:32:04,162 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 50 error locations. [2023-11-23 21:32:04,220 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-23 21:32:04,227 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@399879ea, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-23 21:32:04,228 INFO L358 AbstractCegarLoop]: Starting to check reachability of 50 error locations. [2023-11-23 21:32:04,232 INFO L276 IsEmpty]: Start isEmpty. Operand has 109 states, 53 states have (on average 2.1320754716981134) internal successors, (113), 103 states have internal predecessors, (113), 4 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2023-11-23 21:32:04,246 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2023-11-23 21:32:04,246 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:32:04,248 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:32:04,251 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr49ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 47 more)] === [2023-11-23 21:32:04,257 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:32:04,257 INFO L85 PathProgramCache]: Analyzing trace with hash -1765571447, now seen corresponding path program 1 times [2023-11-23 21:32:04,268 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2023-11-23 21:32:04,268 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1442567228] [2023-11-23 21:32:04,269 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:32:04,269 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2023-11-23 21:32:04,269 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat [2023-11-23 21:32:04,272 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2023-11-23 21:32:04,284 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2023-11-23 21:32:04,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:32:04,422 INFO L262 TraceCheckSpWp]: Trace formula consists of 42 conjuncts, 5 conjunts are in the unsatisfiable core [2023-11-23 21:32:04,427 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:32:04,500 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-23 21:32:04,500 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-23 21:32:04,501 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2023-11-23 21:32:04,501 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1442567228] [2023-11-23 21:32:04,502 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1442567228] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:32:04,503 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:32:04,504 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-23 21:32:04,506 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [187404793] [2023-11-23 21:32:04,516 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:32:04,523 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-23 21:32:04,523 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2023-11-23 21:32:04,556 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-23 21:32:04,556 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-23 21:32:04,559 INFO L87 Difference]: Start difference. First operand has 109 states, 53 states have (on average 2.1320754716981134) internal successors, (113), 103 states have internal predecessors, (113), 4 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) Second operand has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 1 states have call successors, (1), 1 states have call predecessors, (1), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 21:32:04,828 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:32:04,828 INFO L93 Difference]: Finished difference Result 109 states and 120 transitions. [2023-11-23 21:32:04,830 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-23 21:32:04,831 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 1 states have call successors, (1), 1 states have call predecessors, (1), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 8 [2023-11-23 21:32:04,832 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:32:04,840 INFO L225 Difference]: With dead ends: 109 [2023-11-23 21:32:04,840 INFO L226 Difference]: Without dead ends: 108 [2023-11-23 21:32:04,842 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-23 21:32:04,846 INFO L413 NwaCegarLoop]: 94 mSDtfsCounter, 106 mSDsluCounter, 192 mSDsCounter, 0 mSdLazyCounter, 82 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 109 SdHoareTripleChecker+Valid, 286 SdHoareTripleChecker+Invalid, 82 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 82 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-23 21:32:04,847 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [109 Valid, 286 Invalid, 82 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 82 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-23 21:32:04,864 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 108 states. [2023-11-23 21:32:04,885 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 108 to 108. [2023-11-23 21:32:04,887 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 108 states, 53 states have (on average 2.0943396226415096) internal successors, (111), 102 states have internal predecessors, (111), 4 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2023-11-23 21:32:04,889 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 108 states to 108 states and 119 transitions. [2023-11-23 21:32:04,891 INFO L78 Accepts]: Start accepts. Automaton has 108 states and 119 transitions. Word has length 8 [2023-11-23 21:32:04,892 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:32:04,892 INFO L495 AbstractCegarLoop]: Abstraction has 108 states and 119 transitions. [2023-11-23 21:32:04,892 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 1 states have call successors, (1), 1 states have call predecessors, (1), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-23 21:32:04,893 INFO L276 IsEmpty]: Start isEmpty. Operand 108 states and 119 transitions. [2023-11-23 21:32:04,894 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2023-11-23 21:32:04,894 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:32:04,894 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:32:04,912 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2023-11-23 21:32:05,096 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2023-11-23 21:32:05,097 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr46ASSERT_VIOLATIONMEMORY_FREE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 47 more)] === [2023-11-23 21:32:05,097 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:32:05,098 INFO L85 PathProgramCache]: Analyzing trace with hash 1068147453, now seen corresponding path program 1 times [2023-11-23 21:32:05,098 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2023-11-23 21:32:05,098 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1024131198] [2023-11-23 21:32:05,099 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:32:05,099 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2023-11-23 21:32:05,099 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat [2023-11-23 21:32:05,100 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2023-11-23 21:32:05,103 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2023-11-23 21:32:05,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:32:05,196 INFO L262 TraceCheckSpWp]: Trace formula consists of 66 conjuncts, 5 conjunts are in the unsatisfiable core [2023-11-23 21:32:05,197 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:32:05,231 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-23 21:32:05,231 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-23 21:32:05,231 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2023-11-23 21:32:05,232 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1024131198] [2023-11-23 21:32:05,232 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1024131198] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:32:05,232 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:32:05,232 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-23 21:32:05,233 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [413052122] [2023-11-23 21:32:05,233 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:32:05,234 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-23 21:32:05,234 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2023-11-23 21:32:05,235 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-23 21:32:05,236 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-23 21:32:05,236 INFO L87 Difference]: Start difference. First operand 108 states and 119 transitions. Second operand has 5 states, 4 states have (on average 2.0) internal successors, (8), 4 states have internal predecessors, (8), 1 states have call successors, (2), 1 states have call predecessors, (2), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-23 21:32:05,522 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:32:05,522 INFO L93 Difference]: Finished difference Result 108 states and 118 transitions. [2023-11-23 21:32:05,523 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-23 21:32:05,523 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 2.0) internal successors, (8), 4 states have internal predecessors, (8), 1 states have call successors, (2), 1 states have call predecessors, (2), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 12 [2023-11-23 21:32:05,523 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:32:05,525 INFO L225 Difference]: With dead ends: 108 [2023-11-23 21:32:05,525 INFO L226 Difference]: Without dead ends: 108 [2023-11-23 21:32:05,525 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-23 21:32:05,527 INFO L413 NwaCegarLoop]: 86 mSDtfsCounter, 103 mSDsluCounter, 179 mSDsCounter, 0 mSdLazyCounter, 99 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 105 SdHoareTripleChecker+Valid, 265 SdHoareTripleChecker+Invalid, 99 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 99 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-23 21:32:05,527 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [105 Valid, 265 Invalid, 99 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 99 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-23 21:32:05,529 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 108 states. [2023-11-23 21:32:05,537 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 108 to 108. [2023-11-23 21:32:05,537 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 108 states, 53 states have (on average 2.0754716981132075) internal successors, (110), 102 states have internal predecessors, (110), 4 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2023-11-23 21:32:05,540 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 108 states to 108 states and 118 transitions. [2023-11-23 21:32:05,540 INFO L78 Accepts]: Start accepts. Automaton has 108 states and 118 transitions. Word has length 12 [2023-11-23 21:32:05,541 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:32:05,541 INFO L495 AbstractCegarLoop]: Abstraction has 108 states and 118 transitions. [2023-11-23 21:32:05,541 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 2.0) internal successors, (8), 4 states have internal predecessors, (8), 1 states have call successors, (2), 1 states have call predecessors, (2), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-23 21:32:05,541 INFO L276 IsEmpty]: Start isEmpty. Operand 108 states and 118 transitions. [2023-11-23 21:32:05,542 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2023-11-23 21:32:05,542 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:32:05,543 INFO L195 NwaCegarLoop]: trace histogram [3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:32:05,552 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (3)] Ended with exit code 0 [2023-11-23 21:32:05,745 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2023-11-23 21:32:05,745 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 47 more)] === [2023-11-23 21:32:05,746 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:32:05,746 INFO L85 PathProgramCache]: Analyzing trace with hash -229374929, now seen corresponding path program 1 times [2023-11-23 21:32:05,746 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2023-11-23 21:32:05,747 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [50954712] [2023-11-23 21:32:05,747 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:32:05,747 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2023-11-23 21:32:05,747 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat [2023-11-23 21:32:05,749 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2023-11-23 21:32:05,777 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2023-11-23 21:32:05,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:32:05,871 INFO L262 TraceCheckSpWp]: Trace formula consists of 87 conjuncts, 10 conjunts are in the unsatisfiable core [2023-11-23 21:32:05,875 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:32:05,912 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2023-11-23 21:32:05,967 WARN L876 $PredicateComparison]: unable to prove that (exists ((|ldv_zalloc_#t~malloc13#1.base| (_ BitVec 32))) (= |c_#valid| (store |c_old(#valid)| |ldv_zalloc_#t~malloc13#1.base| (_ bv1 1)))) is different from true [2023-11-23 21:32:05,995 INFO L349 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2023-11-23 21:32:05,996 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 14 treesize of output 20 [2023-11-23 21:32:06,014 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 1 not checked. [2023-11-23 21:32:06,014 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:32:06,208 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 4 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-23 21:32:06,209 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2023-11-23 21:32:06,209 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [50954712] [2023-11-23 21:32:06,209 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleMathsat [50954712] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-23 21:32:06,210 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [492451011] [2023-11-23 21:32:06,210 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:32:06,210 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2023-11-23 21:32:06,211 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/cvc4 [2023-11-23 21:32:06,228 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2023-11-23 21:32:06,247 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/cvc4 --incremental --print-success --lang smt (5)] Waiting until timeout for monitored process [2023-11-23 21:32:06,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:32:06,403 INFO L262 TraceCheckSpWp]: Trace formula consists of 87 conjuncts, 11 conjunts are in the unsatisfiable core [2023-11-23 21:32:06,406 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:32:06,415 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2023-11-23 21:32:06,446 WARN L876 $PredicateComparison]: unable to prove that (exists ((|ldv_zalloc_#t~malloc13#1.base| (_ BitVec 32))) (and (= (store |c_old(#valid)| |ldv_zalloc_#t~malloc13#1.base| (select |c_#valid| |ldv_zalloc_#t~malloc13#1.base|)) |c_#valid|) (= (select |c_old(#valid)| |ldv_zalloc_#t~malloc13#1.base|) (_ bv0 1)))) is different from true [2023-11-23 21:32:06,477 INFO L349 Elim1Store]: treesize reduction 24, result has 33.3 percent of original size [2023-11-23 21:32:06,478 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 21 treesize of output 20 [2023-11-23 21:32:06,486 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 1 not checked. [2023-11-23 21:32:06,486 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:32:08,692 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 4 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-23 21:32:08,692 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [492451011] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-23 21:32:08,692 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2068194055] [2023-11-23 21:32:08,692 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:32:08,693 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:32:08,693 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:32:08,695 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:32:08,730 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2023-11-23 21:32:08,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:32:08,815 INFO L262 TraceCheckSpWp]: Trace formula consists of 87 conjuncts, 10 conjunts are in the unsatisfiable core [2023-11-23 21:32:08,832 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:32:08,838 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2023-11-23 21:32:08,897 INFO L349 Elim1Store]: treesize reduction 24, result has 33.3 percent of original size [2023-11-23 21:32:08,898 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 21 treesize of output 20 [2023-11-23 21:32:08,903 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 1 not checked. [2023-11-23 21:32:08,903 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:32:09,125 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 4 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-23 21:32:09,125 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2068194055] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-23 21:32:09,126 INFO L185 FreeRefinementEngine]: Found 0 perfect and 6 imperfect interpolant sequences. [2023-11-23 21:32:09,126 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 6, 6, 6, 5] total 9 [2023-11-23 21:32:09,126 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1448938734] [2023-11-23 21:32:09,126 INFO L85 oduleStraightlineAll]: Using 6 imperfect interpolants to construct interpolant automaton [2023-11-23 21:32:09,127 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2023-11-23 21:32:09,127 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2023-11-23 21:32:09,128 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2023-11-23 21:32:09,128 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=41, Unknown=3, NotChecked=26, Total=90 [2023-11-23 21:32:09,129 INFO L87 Difference]: Start difference. First operand 108 states and 118 transitions. Second operand has 10 states, 6 states have (on average 2.0) internal successors, (12), 7 states have internal predecessors, (12), 2 states have call successors, (5), 4 states have call predecessors, (5), 5 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-23 21:32:09,885 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:32:09,885 INFO L93 Difference]: Finished difference Result 136 states and 149 transitions. [2023-11-23 21:32:09,886 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-23 21:32:09,886 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 6 states have (on average 2.0) internal successors, (12), 7 states have internal predecessors, (12), 2 states have call successors, (5), 4 states have call predecessors, (5), 5 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) Word has length 15 [2023-11-23 21:32:09,886 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:32:09,887 INFO L225 Difference]: With dead ends: 136 [2023-11-23 21:32:09,888 INFO L226 Difference]: Without dead ends: 136 [2023-11-23 21:32:09,888 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 85 GetRequests, 68 SyntacticMatches, 8 SemanticMatches, 9 ConstructedPredicates, 2 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 2.3s TimeCoverageRelationStatistics Valid=25, Invalid=52, Unknown=3, NotChecked=30, Total=110 [2023-11-23 21:32:09,889 INFO L413 NwaCegarLoop]: 63 mSDtfsCounter, 87 mSDsluCounter, 236 mSDsCounter, 0 mSdLazyCounter, 320 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 87 SdHoareTripleChecker+Valid, 299 SdHoareTripleChecker+Invalid, 628 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 320 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 296 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2023-11-23 21:32:09,889 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [87 Valid, 299 Invalid, 628 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 320 Invalid, 0 Unknown, 296 Unchecked, 0.7s Time] [2023-11-23 21:32:09,890 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 136 states. [2023-11-23 21:32:09,920 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 136 to 118. [2023-11-23 21:32:09,922 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 118 states, 66 states have (on average 2.0) internal successors, (132), 112 states have internal predecessors, (132), 4 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2023-11-23 21:32:09,925 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 118 states to 118 states and 140 transitions. [2023-11-23 21:32:09,927 INFO L78 Accepts]: Start accepts. Automaton has 118 states and 140 transitions. Word has length 15 [2023-11-23 21:32:09,929 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:32:09,929 INFO L495 AbstractCegarLoop]: Abstraction has 118 states and 140 transitions. [2023-11-23 21:32:09,929 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 6 states have (on average 2.0) internal successors, (12), 7 states have internal predecessors, (12), 2 states have call successors, (5), 4 states have call predecessors, (5), 5 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-23 21:32:09,930 INFO L276 IsEmpty]: Start isEmpty. Operand 118 states and 140 transitions. [2023-11-23 21:32:09,931 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2023-11-23 21:32:09,931 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:32:09,931 INFO L195 NwaCegarLoop]: trace histogram [3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:32:09,939 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2023-11-23 21:32:10,148 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2023-11-23 21:32:10,336 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/cvc4 --incremental --print-success --lang smt (5)] Forceful destruction successful, exit code 0 [2023-11-23 21:32:10,534 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/cvc4 --incremental --print-success --lang smt [2023-11-23 21:32:10,535 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 47 more)] === [2023-11-23 21:32:10,535 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:32:10,536 INFO L85 PathProgramCache]: Analyzing trace with hash -229374928, now seen corresponding path program 1 times [2023-11-23 21:32:10,536 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2023-11-23 21:32:10,536 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1862050195] [2023-11-23 21:32:10,536 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:32:10,536 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2023-11-23 21:32:10,536 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat [2023-11-23 21:32:10,541 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2023-11-23 21:32:10,547 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2023-11-23 21:32:10,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:32:10,651 INFO L262 TraceCheckSpWp]: Trace formula consists of 87 conjuncts, 20 conjunts are in the unsatisfiable core [2023-11-23 21:32:10,655 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:32:10,670 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2023-11-23 21:32:10,677 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2023-11-23 21:32:10,809 WARN L876 $PredicateComparison]: unable to prove that (exists ((|ldv_zalloc_#t~malloc13#1.base| (_ BitVec 32))) (and (= (select |c_old(#valid)| |ldv_zalloc_#t~malloc13#1.base|) (_ bv0 1)) (= |c_#length| (store |c_old(#length)| |ldv_zalloc_#t~malloc13#1.base| (select |c_#length| |ldv_zalloc_#t~malloc13#1.base|))))) is different from true [2023-11-23 21:32:10,834 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-11-23 21:32:10,836 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 9 [2023-11-23 21:32:10,851 INFO L349 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2023-11-23 21:32:10,852 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2023-11-23 21:32:10,872 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 1 not checked. [2023-11-23 21:32:10,872 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:32:11,119 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2023-11-23 21:32:11,119 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1862050195] [2023-11-23 21:32:11,120 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1862050195] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:32:11,120 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [209477134] [2023-11-23 21:32:11,120 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:32:11,120 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2023-11-23 21:32:11,120 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/cvc4 [2023-11-23 21:32:11,123 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2023-11-23 21:32:11,129 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/cvc4 --incremental --print-success --lang smt (8)] Waiting until timeout for monitored process [2023-11-23 21:32:11,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:32:11,315 INFO L262 TraceCheckSpWp]: Trace formula consists of 87 conjuncts, 20 conjunts are in the unsatisfiable core [2023-11-23 21:32:11,318 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:32:11,335 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2023-11-23 21:32:11,343 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2023-11-23 21:32:11,439 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-11-23 21:32:11,440 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 9 [2023-11-23 21:32:11,453 INFO L349 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2023-11-23 21:32:11,453 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2023-11-23 21:32:11,458 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 1 not checked. [2023-11-23 21:32:11,458 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:32:13,641 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [209477134] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:32:13,642 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [186002302] [2023-11-23 21:32:13,642 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:32:13,642 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:32:13,642 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:32:13,648 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:32:13,652 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2023-11-23 21:32:13,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:32:13,741 INFO L262 TraceCheckSpWp]: Trace formula consists of 87 conjuncts, 20 conjunts are in the unsatisfiable core [2023-11-23 21:32:13,744 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:32:13,755 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2023-11-23 21:32:13,761 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2023-11-23 21:32:13,869 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-11-23 21:32:13,870 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 9 [2023-11-23 21:32:13,883 INFO L349 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2023-11-23 21:32:13,883 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2023-11-23 21:32:13,888 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 1 not checked. [2023-11-23 21:32:13,888 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:32:16,046 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [186002302] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:32:16,046 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-23 21:32:16,046 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7, 7] total 7 [2023-11-23 21:32:16,046 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [73190959] [2023-11-23 21:32:16,046 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-23 21:32:16,047 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-23 21:32:16,047 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2023-11-23 21:32:16,048 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-23 21:32:16,048 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=54, Unknown=1, NotChecked=14, Total=90 [2023-11-23 21:32:16,048 INFO L87 Difference]: Start difference. First operand 118 states and 140 transitions. Second operand has 8 states, 5 states have (on average 1.8) internal successors, (9), 5 states have internal predecessors, (9), 2 states have call successors, (3), 2 states have call predecessors, (3), 3 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-23 21:32:16,912 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:32:16,912 INFO L93 Difference]: Finished difference Result 139 states and 161 transitions. [2023-11-23 21:32:16,916 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-23 21:32:16,917 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 5 states have (on average 1.8) internal successors, (9), 5 states have internal predecessors, (9), 2 states have call successors, (3), 2 states have call predecessors, (3), 3 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) Word has length 15 [2023-11-23 21:32:16,917 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:32:16,919 INFO L225 Difference]: With dead ends: 139 [2023-11-23 21:32:16,919 INFO L226 Difference]: Without dead ends: 139 [2023-11-23 21:32:16,919 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 38 SyntacticMatches, 2 SemanticMatches, 9 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 4.4s TimeCoverageRelationStatistics Valid=24, Invalid=69, Unknown=1, NotChecked=16, Total=110 [2023-11-23 21:32:16,920 INFO L413 NwaCegarLoop]: 49 mSDtfsCounter, 124 mSDsluCounter, 147 mSDsCounter, 0 mSdLazyCounter, 327 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 124 SdHoareTripleChecker+Valid, 196 SdHoareTripleChecker+Invalid, 480 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 327 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 141 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2023-11-23 21:32:16,921 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [124 Valid, 196 Invalid, 480 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 327 Invalid, 0 Unknown, 141 Unchecked, 0.8s Time] [2023-11-23 21:32:16,922 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 139 states. [2023-11-23 21:32:16,929 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 139 to 113. [2023-11-23 21:32:16,930 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 113 states, 66 states have (on average 1.893939393939394) internal successors, (125), 107 states have internal predecessors, (125), 4 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2023-11-23 21:32:16,931 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 113 states to 113 states and 133 transitions. [2023-11-23 21:32:16,931 INFO L78 Accepts]: Start accepts. Automaton has 113 states and 133 transitions. Word has length 15 [2023-11-23 21:32:16,931 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:32:16,932 INFO L495 AbstractCegarLoop]: Abstraction has 113 states and 133 transitions. [2023-11-23 21:32:16,932 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 5 states have (on average 1.8) internal successors, (9), 5 states have internal predecessors, (9), 2 states have call successors, (3), 2 states have call predecessors, (3), 3 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-23 21:32:16,932 INFO L276 IsEmpty]: Start isEmpty. Operand 113 states and 133 transitions. [2023-11-23 21:32:16,933 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2023-11-23 21:32:16,933 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:32:16,933 INFO L195 NwaCegarLoop]: trace histogram [3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:32:16,946 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (7)] Forceful destruction successful, exit code 0 [2023-11-23 21:32:17,153 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2023-11-23 21:32:17,342 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/cvc4 --incremental --print-success --lang smt (8)] Forceful destruction successful, exit code 0 [2023-11-23 21:32:17,540 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true,8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/cvc4 --incremental --print-success --lang smt [2023-11-23 21:32:17,541 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr6REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 47 more)] === [2023-11-23 21:32:17,542 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:32:17,542 INFO L85 PathProgramCache]: Analyzing trace with hash -308287614, now seen corresponding path program 1 times [2023-11-23 21:32:17,542 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2023-11-23 21:32:17,542 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1417531198] [2023-11-23 21:32:17,542 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:32:17,542 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2023-11-23 21:32:17,543 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat [2023-11-23 21:32:17,544 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2023-11-23 21:32:17,550 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (10)] Waiting until timeout for monitored process [2023-11-23 21:32:17,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:32:17,671 INFO L262 TraceCheckSpWp]: Trace formula consists of 113 conjuncts, 8 conjunts are in the unsatisfiable core [2023-11-23 21:32:17,675 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:32:17,683 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2023-11-23 21:32:17,715 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 1 [2023-11-23 21:32:17,759 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 11 [2023-11-23 21:32:17,774 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-11-23 21:32:17,775 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-23 21:32:17,775 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2023-11-23 21:32:17,775 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1417531198] [2023-11-23 21:32:17,775 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1417531198] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:32:17,776 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:32:17,776 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-23 21:32:17,776 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1685628917] [2023-11-23 21:32:17,776 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:32:17,777 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-23 21:32:17,777 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2023-11-23 21:32:17,778 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-23 21:32:17,778 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-23 21:32:17,778 INFO L87 Difference]: Start difference. First operand 113 states and 133 transitions. Second operand has 6 states, 4 states have (on average 3.0) internal successors, (12), 5 states have internal predecessors, (12), 1 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-23 21:32:18,370 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:32:18,371 INFO L93 Difference]: Finished difference Result 113 states and 132 transitions. [2023-11-23 21:32:18,371 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-23 21:32:18,371 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 4 states have (on average 3.0) internal successors, (12), 5 states have internal predecessors, (12), 1 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 19 [2023-11-23 21:32:18,372 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:32:18,373 INFO L225 Difference]: With dead ends: 113 [2023-11-23 21:32:18,373 INFO L226 Difference]: Without dead ends: 113 [2023-11-23 21:32:18,373 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2023-11-23 21:32:18,374 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 7 mSDsluCounter, 213 mSDsCounter, 0 mSdLazyCounter, 235 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7 SdHoareTripleChecker+Valid, 300 SdHoareTripleChecker+Invalid, 235 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 235 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2023-11-23 21:32:18,375 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [7 Valid, 300 Invalid, 235 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 235 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2023-11-23 21:32:18,376 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 113 states. [2023-11-23 21:32:18,382 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 113 to 112. [2023-11-23 21:32:18,383 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 112 states, 66 states have (on average 1.878787878787879) internal successors, (124), 106 states have internal predecessors, (124), 4 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2023-11-23 21:32:18,384 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 112 states to 112 states and 132 transitions. [2023-11-23 21:32:18,384 INFO L78 Accepts]: Start accepts. Automaton has 112 states and 132 transitions. Word has length 19 [2023-11-23 21:32:18,384 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:32:18,385 INFO L495 AbstractCegarLoop]: Abstraction has 112 states and 132 transitions. [2023-11-23 21:32:18,385 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 4 states have (on average 3.0) internal successors, (12), 5 states have internal predecessors, (12), 1 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-23 21:32:18,385 INFO L276 IsEmpty]: Start isEmpty. Operand 112 states and 132 transitions. [2023-11-23 21:32:18,386 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2023-11-23 21:32:18,386 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:32:18,386 INFO L195 NwaCegarLoop]: trace histogram [3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:32:18,394 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (10)] Forceful destruction successful, exit code 0 [2023-11-23 21:32:18,589 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2023-11-23 21:32:18,589 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 47 more)] === [2023-11-23 21:32:18,589 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:32:18,590 INFO L85 PathProgramCache]: Analyzing trace with hash -308287613, now seen corresponding path program 1 times [2023-11-23 21:32:18,590 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2023-11-23 21:32:18,590 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [501286492] [2023-11-23 21:32:18,590 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:32:18,590 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2023-11-23 21:32:18,591 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat [2023-11-23 21:32:18,592 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2023-11-23 21:32:18,595 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (11)] Waiting until timeout for monitored process [2023-11-23 21:32:18,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:32:18,690 INFO L262 TraceCheckSpWp]: Trace formula consists of 113 conjuncts, 17 conjunts are in the unsatisfiable core [2023-11-23 21:32:18,692 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:32:18,708 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2023-11-23 21:32:18,755 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2023-11-23 21:32:18,769 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 1 [2023-11-23 21:32:18,825 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 9 [2023-11-23 21:32:18,853 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-11-23 21:32:18,853 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-23 21:32:18,853 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2023-11-23 21:32:18,853 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [501286492] [2023-11-23 21:32:18,854 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleMathsat [501286492] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:32:18,854 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:32:18,854 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-23 21:32:18,854 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1610662869] [2023-11-23 21:32:18,854 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:32:18,855 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-23 21:32:18,855 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2023-11-23 21:32:18,855 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-23 21:32:18,856 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-23 21:32:18,856 INFO L87 Difference]: Start difference. First operand 112 states and 132 transitions. Second operand has 6 states, 4 states have (on average 3.0) internal successors, (12), 5 states have internal predecessors, (12), 1 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-23 21:32:19,514 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:32:19,514 INFO L93 Difference]: Finished difference Result 119 states and 138 transitions. [2023-11-23 21:32:19,519 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-23 21:32:19,520 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 4 states have (on average 3.0) internal successors, (12), 5 states have internal predecessors, (12), 1 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 19 [2023-11-23 21:32:19,520 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:32:19,521 INFO L225 Difference]: With dead ends: 119 [2023-11-23 21:32:19,521 INFO L226 Difference]: Without dead ends: 119 [2023-11-23 21:32:19,521 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2023-11-23 21:32:19,522 INFO L413 NwaCegarLoop]: 83 mSDtfsCounter, 12 mSDsluCounter, 251 mSDsCounter, 0 mSdLazyCounter, 198 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 12 SdHoareTripleChecker+Valid, 334 SdHoareTripleChecker+Invalid, 198 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 198 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2023-11-23 21:32:19,523 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [12 Valid, 334 Invalid, 198 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 198 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2023-11-23 21:32:19,524 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 119 states. [2023-11-23 21:32:19,529 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 119 to 111. [2023-11-23 21:32:19,530 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 111 states, 66 states have (on average 1.8636363636363635) internal successors, (123), 105 states have internal predecessors, (123), 4 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2023-11-23 21:32:19,531 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 111 states to 111 states and 131 transitions. [2023-11-23 21:32:19,531 INFO L78 Accepts]: Start accepts. Automaton has 111 states and 131 transitions. Word has length 19 [2023-11-23 21:32:19,532 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:32:19,532 INFO L495 AbstractCegarLoop]: Abstraction has 111 states and 131 transitions. [2023-11-23 21:32:19,532 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 4 states have (on average 3.0) internal successors, (12), 5 states have internal predecessors, (12), 1 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-23 21:32:19,532 INFO L276 IsEmpty]: Start isEmpty. Operand 111 states and 131 transitions. [2023-11-23 21:32:19,533 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2023-11-23 21:32:19,533 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:32:19,533 INFO L195 NwaCegarLoop]: trace histogram [3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:32:19,537 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (11)] Forceful destruction successful, exit code 0 [2023-11-23 21:32:19,736 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2023-11-23 21:32:19,736 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr44ASSERT_VIOLATIONMEMORY_FREE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 47 more)] === [2023-11-23 21:32:19,737 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:32:19,737 INFO L85 PathProgramCache]: Analyzing trace with hash -308290800, now seen corresponding path program 1 times [2023-11-23 21:32:19,737 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2023-11-23 21:32:19,737 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1220072662] [2023-11-23 21:32:19,737 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:32:19,738 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2023-11-23 21:32:19,738 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat [2023-11-23 21:32:19,738 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2023-11-23 21:32:19,740 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (12)] Waiting until timeout for monitored process [2023-11-23 21:32:19,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:32:19,829 INFO L262 TraceCheckSpWp]: Trace formula consists of 109 conjuncts, 7 conjunts are in the unsatisfiable core [2023-11-23 21:32:19,838 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:32:19,863 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 1 [2023-11-23 21:32:19,889 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 8 [2023-11-23 21:32:19,908 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-11-23 21:32:19,909 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-23 21:32:19,909 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2023-11-23 21:32:19,909 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1220072662] [2023-11-23 21:32:19,909 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1220072662] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:32:19,909 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:32:19,910 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-23 21:32:19,910 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [938342004] [2023-11-23 21:32:19,910 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:32:19,911 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-23 21:32:19,911 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2023-11-23 21:32:19,911 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-23 21:32:19,912 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-23 21:32:19,912 INFO L87 Difference]: Start difference. First operand 111 states and 131 transitions. Second operand has 6 states, 5 states have (on average 2.4) internal successors, (12), 5 states have internal predecessors, (12), 1 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-23 21:32:20,272 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:32:20,272 INFO L93 Difference]: Finished difference Result 108 states and 126 transitions. [2023-11-23 21:32:20,272 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-23 21:32:20,273 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 2.4) internal successors, (12), 5 states have internal predecessors, (12), 1 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 19 [2023-11-23 21:32:20,273 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:32:20,274 INFO L225 Difference]: With dead ends: 108 [2023-11-23 21:32:20,274 INFO L226 Difference]: Without dead ends: 108 [2023-11-23 21:32:20,274 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2023-11-23 21:32:20,275 INFO L413 NwaCegarLoop]: 89 mSDtfsCounter, 3 mSDsluCounter, 341 mSDsCounter, 0 mSdLazyCounter, 98 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3 SdHoareTripleChecker+Valid, 430 SdHoareTripleChecker+Invalid, 98 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 98 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-23 21:32:20,275 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3 Valid, 430 Invalid, 98 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 98 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-23 21:32:20,276 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 108 states. [2023-11-23 21:32:20,281 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 108 to 108. [2023-11-23 21:32:20,281 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 108 states, 63 states have (on average 1.873015873015873) internal successors, (118), 102 states have internal predecessors, (118), 4 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2023-11-23 21:32:20,282 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 108 states to 108 states and 126 transitions. [2023-11-23 21:32:20,282 INFO L78 Accepts]: Start accepts. Automaton has 108 states and 126 transitions. Word has length 19 [2023-11-23 21:32:20,283 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:32:20,283 INFO L495 AbstractCegarLoop]: Abstraction has 108 states and 126 transitions. [2023-11-23 21:32:20,283 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 2.4) internal successors, (12), 5 states have internal predecessors, (12), 1 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-23 21:32:20,283 INFO L276 IsEmpty]: Start isEmpty. Operand 108 states and 126 transitions. [2023-11-23 21:32:20,284 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2023-11-23 21:32:20,284 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:32:20,284 INFO L195 NwaCegarLoop]: trace histogram [3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:32:20,297 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (12)] Ended with exit code 0 [2023-11-23 21:32:20,487 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2023-11-23 21:32:20,487 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr8REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 47 more)] === [2023-11-23 21:32:20,487 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:32:20,488 INFO L85 PathProgramCache]: Analyzing trace with hash -966975943, now seen corresponding path program 1 times [2023-11-23 21:32:20,488 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2023-11-23 21:32:20,488 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1401849614] [2023-11-23 21:32:20,488 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:32:20,488 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2023-11-23 21:32:20,489 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat [2023-11-23 21:32:20,489 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2023-11-23 21:32:20,491 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (13)] Waiting until timeout for monitored process [2023-11-23 21:32:20,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:32:20,615 INFO L262 TraceCheckSpWp]: Trace formula consists of 126 conjuncts, 19 conjunts are in the unsatisfiable core [2023-11-23 21:32:20,622 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:32:20,629 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2023-11-23 21:32:20,690 WARN L876 $PredicateComparison]: unable to prove that (exists ((|ldv_zalloc_#t~malloc13#1.base| (_ BitVec 32))) (and (= (store |c_old(#valid)| |ldv_zalloc_#t~malloc13#1.base| (select |c_#valid| |ldv_zalloc_#t~malloc13#1.base|)) |c_#valid|) (= (select |c_old(#valid)| |ldv_zalloc_#t~malloc13#1.base|) (_ bv0 1)))) is different from true [2023-11-23 21:32:20,726 INFO L349 Elim1Store]: treesize reduction 24, result has 33.3 percent of original size [2023-11-23 21:32:20,727 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 21 treesize of output 20 [2023-11-23 21:32:20,799 INFO L349 Elim1Store]: treesize reduction 17, result has 29.2 percent of original size [2023-11-23 21:32:20,800 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 14 treesize of output 20 [2023-11-23 21:32:20,868 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 1 [2023-11-23 21:32:20,939 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 7 [2023-11-23 21:32:20,960 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 2 not checked. [2023-11-23 21:32:20,960 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:32:21,370 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 2 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-23 21:32:21,371 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2023-11-23 21:32:21,372 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1401849614] [2023-11-23 21:32:21,372 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1401849614] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-23 21:32:21,372 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1156203212] [2023-11-23 21:32:21,372 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:32:21,373 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2023-11-23 21:32:21,373 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/cvc4 [2023-11-23 21:32:21,374 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2023-11-23 21:32:21,391 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/cvc4 --incremental --print-success --lang smt (14)] Waiting until timeout for monitored process [2023-11-23 21:32:21,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:32:21,622 INFO L262 TraceCheckSpWp]: Trace formula consists of 126 conjuncts, 19 conjunts are in the unsatisfiable core [2023-11-23 21:32:21,624 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:32:21,637 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2023-11-23 21:32:21,709 INFO L349 Elim1Store]: treesize reduction 15, result has 42.3 percent of original size [2023-11-23 21:32:21,709 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 16 treesize of output 17 [2023-11-23 21:32:21,793 WARN L876 $PredicateComparison]: unable to prove that (exists ((|ldv_zalloc_#t~malloc13#1.base| (_ BitVec 32))) (= |c_#valid| (store |c_old(#valid)| |ldv_zalloc_#t~malloc13#1.base| (_ bv1 1)))) is different from true [2023-11-23 21:32:21,820 INFO L349 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2023-11-23 21:32:21,820 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 28 [2023-11-23 21:32:21,985 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 2 not checked. [2023-11-23 21:32:21,985 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:32:22,536 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 3 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-23 21:32:22,537 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [1156203212] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-23 21:32:22,537 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1129851207] [2023-11-23 21:32:22,537 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:32:22,537 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:32:22,537 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:32:22,538 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:32:22,558 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2023-11-23 21:32:22,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:32:22,665 INFO L262 TraceCheckSpWp]: Trace formula consists of 126 conjuncts, 18 conjunts are in the unsatisfiable core [2023-11-23 21:32:22,669 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:32:22,674 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2023-11-23 21:32:22,762 INFO L349 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2023-11-23 21:32:22,762 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2023-11-23 21:32:22,997 INFO L349 Elim1Store]: treesize reduction 48, result has 32.4 percent of original size [2023-11-23 21:32:22,998 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 28 treesize of output 36 [2023-11-23 21:32:23,092 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 2 not checked. [2023-11-23 21:32:23,093 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:32:41,801 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1129851207] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:32:41,801 INFO L185 FreeRefinementEngine]: Found 0 perfect and 5 imperfect interpolant sequences. [2023-11-23 21:32:41,802 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 5, 11, 10, 9] total 22 [2023-11-23 21:32:41,802 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [766096340] [2023-11-23 21:32:41,802 INFO L85 oduleStraightlineAll]: Using 5 imperfect interpolants to construct interpolant automaton [2023-11-23 21:32:41,803 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2023-11-23 21:32:41,803 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2023-11-23 21:32:41,804 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2023-11-23 21:32:41,804 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=110, Invalid=393, Unknown=11, NotChecked=86, Total=600 [2023-11-23 21:32:41,804 INFO L87 Difference]: Start difference. First operand 108 states and 126 transitions. Second operand has 23 states, 14 states have (on average 3.0) internal successors, (42), 17 states have internal predecessors, (42), 4 states have call successors, (8), 3 states have call predecessors, (8), 9 states have return successors, (11), 8 states have call predecessors, (11), 4 states have call successors, (11) [2023-11-23 21:32:43,349 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:32:43,349 INFO L93 Difference]: Finished difference Result 128 states and 140 transitions. [2023-11-23 21:32:43,349 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-11-23 21:32:43,350 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 14 states have (on average 3.0) internal successors, (42), 17 states have internal predecessors, (42), 4 states have call successors, (8), 3 states have call predecessors, (8), 9 states have return successors, (11), 8 states have call predecessors, (11), 4 states have call successors, (11) Word has length 20 [2023-11-23 21:32:43,350 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:32:43,351 INFO L225 Difference]: With dead ends: 128 [2023-11-23 21:32:43,351 INFO L226 Difference]: Without dead ends: 128 [2023-11-23 21:32:43,352 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 111 GetRequests, 71 SyntacticMatches, 14 SemanticMatches, 26 ConstructedPredicates, 2 IntricatePredicates, 0 DeprecatedPredicates, 251 ImplicationChecksByTransitivity, 19.5s TimeCoverageRelationStatistics Valid=144, Invalid=503, Unknown=11, NotChecked=98, Total=756 [2023-11-23 21:32:43,353 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 359 mSDsluCounter, 352 mSDsCounter, 0 mSdLazyCounter, 518 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 359 SdHoareTripleChecker+Valid, 406 SdHoareTripleChecker+Invalid, 810 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 518 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 278 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2023-11-23 21:32:43,353 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [359 Valid, 406 Invalid, 810 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 518 Invalid, 0 Unknown, 278 Unchecked, 1.3s Time] [2023-11-23 21:32:43,355 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 128 states. [2023-11-23 21:32:43,359 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 128 to 107. [2023-11-23 21:32:43,359 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 107 states, 63 states have (on average 1.8571428571428572) internal successors, (117), 101 states have internal predecessors, (117), 4 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2023-11-23 21:32:43,360 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 107 states to 107 states and 125 transitions. [2023-11-23 21:32:43,363 INFO L78 Accepts]: Start accepts. Automaton has 107 states and 125 transitions. Word has length 20 [2023-11-23 21:32:43,364 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:32:43,364 INFO L495 AbstractCegarLoop]: Abstraction has 107 states and 125 transitions. [2023-11-23 21:32:43,365 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 14 states have (on average 3.0) internal successors, (42), 17 states have internal predecessors, (42), 4 states have call successors, (8), 3 states have call predecessors, (8), 9 states have return successors, (11), 8 states have call predecessors, (11), 4 states have call successors, (11) [2023-11-23 21:32:43,365 INFO L276 IsEmpty]: Start isEmpty. Operand 107 states and 125 transitions. [2023-11-23 21:32:43,366 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2023-11-23 21:32:43,366 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:32:43,367 INFO L195 NwaCegarLoop]: trace histogram [3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:32:43,394 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Forceful destruction successful, exit code 0 [2023-11-23 21:32:43,580 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/cvc4 --incremental --print-success --lang smt (14)] Forceful destruction successful, exit code 0 [2023-11-23 21:32:43,781 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (13)] Ended with exit code 0 [2023-11-23 21:32:43,973 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true,14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/cvc4 --incremental --print-success --lang smt,13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2023-11-23 21:32:43,973 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 47 more)] === [2023-11-23 21:32:43,973 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:32:43,974 INFO L85 PathProgramCache]: Analyzing trace with hash -966975942, now seen corresponding path program 1 times [2023-11-23 21:32:43,974 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2023-11-23 21:32:43,974 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [442297667] [2023-11-23 21:32:43,974 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:32:43,974 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2023-11-23 21:32:43,974 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat [2023-11-23 21:32:43,975 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2023-11-23 21:32:43,976 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (16)] Waiting until timeout for monitored process [2023-11-23 21:32:44,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:32:44,097 INFO L262 TraceCheckSpWp]: Trace formula consists of 126 conjuncts, 27 conjunts are in the unsatisfiable core [2023-11-23 21:32:44,099 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:32:44,112 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2023-11-23 21:32:44,128 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2023-11-23 21:32:44,247 WARN L876 $PredicateComparison]: unable to prove that (exists ((|ldv_zalloc_#t~malloc13#1.base| (_ BitVec 32))) (and (= (store |c_old(#valid)| |ldv_zalloc_#t~malloc13#1.base| (select |c_#valid| |ldv_zalloc_#t~malloc13#1.base|)) |c_#valid|) (= (select |c_old(#valid)| |ldv_zalloc_#t~malloc13#1.base|) (_ bv0 1)) (= |c_#length| (store |c_old(#length)| |ldv_zalloc_#t~malloc13#1.base| (select |c_#length| |ldv_zalloc_#t~malloc13#1.base|))))) is different from true [2023-11-23 21:32:44,306 INFO L349 Elim1Store]: treesize reduction 24, result has 33.3 percent of original size [2023-11-23 21:32:44,307 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 21 treesize of output 20 [2023-11-23 21:32:44,316 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 9 [2023-11-23 21:32:44,379 WARN L876 $PredicateComparison]: unable to prove that (exists ((|ldv_zalloc_#t~malloc13#1.base| (_ BitVec 32))) (and (= (select |c_old(#valid)| |ldv_zalloc_#t~malloc13#1.base|) (_ bv0 1)) (= |c_#length| (store |c_old(#length)| |ldv_zalloc_#t~malloc13#1.base| (select |c_#length| |ldv_zalloc_#t~malloc13#1.base|))))) is different from true [2023-11-23 21:32:44,396 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-11-23 21:32:44,397 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 9 [2023-11-23 21:32:44,411 INFO L349 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2023-11-23 21:32:44,412 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2023-11-23 21:32:44,472 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 3 not checked. [2023-11-23 21:32:44,473 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:32:44,821 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2023-11-23 21:32:44,821 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [442297667] [2023-11-23 21:32:44,821 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleMathsat [442297667] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:32:44,821 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1967684762] [2023-11-23 21:32:44,821 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:32:44,821 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2023-11-23 21:32:44,822 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/cvc4 [2023-11-23 21:32:44,823 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2023-11-23 21:32:44,836 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/cvc4 --incremental --print-success --lang smt (17)] Waiting until timeout for monitored process [2023-11-23 21:32:45,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:32:45,122 INFO L262 TraceCheckSpWp]: Trace formula consists of 126 conjuncts, 27 conjunts are in the unsatisfiable core [2023-11-23 21:32:45,124 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:32:45,135 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2023-11-23 21:32:45,144 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2023-11-23 21:32:45,283 INFO L349 Elim1Store]: treesize reduction 24, result has 33.3 percent of original size [2023-11-23 21:32:45,283 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 21 treesize of output 20 [2023-11-23 21:32:45,298 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 9 [2023-11-23 21:32:45,373 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-11-23 21:32:45,375 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 9 [2023-11-23 21:32:45,390 INFO L349 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2023-11-23 21:32:45,390 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 13 treesize of output 13 [2023-11-23 21:32:45,425 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 3 not checked. [2023-11-23 21:32:45,425 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:32:45,639 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [1967684762] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:32:45,639 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [172739086] [2023-11-23 21:32:45,639 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:32:45,639 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:32:45,640 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:32:45,641 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:32:45,642 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2023-11-23 21:32:45,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:32:45,761 INFO L262 TraceCheckSpWp]: Trace formula consists of 126 conjuncts, 31 conjunts are in the unsatisfiable core [2023-11-23 21:32:45,766 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:32:45,777 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2023-11-23 21:32:45,784 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 7 [2023-11-23 21:32:45,915 INFO L349 Elim1Store]: treesize reduction 22, result has 35.3 percent of original size [2023-11-23 21:32:45,916 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 27 [2023-11-23 21:32:45,932 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 9 [2023-11-23 21:32:46,120 INFO L190 IndexEqualityManager]: detected not equals via solver [2023-11-23 21:32:46,121 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 9 [2023-11-23 21:32:46,143 INFO L349 Elim1Store]: treesize reduction 12, result has 42.9 percent of original size [2023-11-23 21:32:46,144 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 20 treesize of output 22 [2023-11-23 21:32:46,170 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 2 not checked. [2023-11-23 21:32:46,170 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:32:46,359 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [172739086] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-23 21:32:46,359 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-23 21:32:46,359 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 8, 10] total 11 [2023-11-23 21:32:46,359 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [803379071] [2023-11-23 21:32:46,360 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-23 21:32:46,360 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2023-11-23 21:32:46,360 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2023-11-23 21:32:46,361 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2023-11-23 21:32:46,361 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=100, Unknown=2, NotChecked=42, Total=182 [2023-11-23 21:32:46,361 INFO L87 Difference]: Start difference. First operand 107 states and 125 transitions. Second operand has 12 states, 7 states have (on average 2.4285714285714284) internal successors, (17), 9 states have internal predecessors, (17), 3 states have call successors, (4), 2 states have call predecessors, (4), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2023-11-23 21:32:47,407 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:32:47,407 INFO L93 Difference]: Finished difference Result 126 states and 138 transitions. [2023-11-23 21:32:47,407 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-23 21:32:47,408 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 7 states have (on average 2.4285714285714284) internal successors, (17), 9 states have internal predecessors, (17), 3 states have call successors, (4), 2 states have call predecessors, (4), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 20 [2023-11-23 21:32:47,408 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:32:47,409 INFO L225 Difference]: With dead ends: 126 [2023-11-23 21:32:47,409 INFO L226 Difference]: Without dead ends: 126 [2023-11-23 21:32:47,409 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 79 GetRequests, 64 SyntacticMatches, 2 SemanticMatches, 13 ConstructedPredicates, 2 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=42, Invalid=120, Unknown=2, NotChecked=46, Total=210 [2023-11-23 21:32:47,410 INFO L413 NwaCegarLoop]: 41 mSDtfsCounter, 196 mSDsluCounter, 181 mSDsCounter, 0 mSdLazyCounter, 437 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 196 SdHoareTripleChecker+Valid, 222 SdHoareTripleChecker+Invalid, 718 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 437 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 274 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2023-11-23 21:32:47,410 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [196 Valid, 222 Invalid, 718 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 437 Invalid, 0 Unknown, 274 Unchecked, 0.9s Time] [2023-11-23 21:32:47,411 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 126 states. [2023-11-23 21:32:47,415 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 126 to 105. [2023-11-23 21:32:47,415 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 105 states, 63 states have (on average 1.8253968253968254) internal successors, (115), 99 states have internal predecessors, (115), 4 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2023-11-23 21:32:47,416 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 105 states to 105 states and 123 transitions. [2023-11-23 21:32:47,416 INFO L78 Accepts]: Start accepts. Automaton has 105 states and 123 transitions. Word has length 20 [2023-11-23 21:32:47,416 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:32:47,417 INFO L495 AbstractCegarLoop]: Abstraction has 105 states and 123 transitions. [2023-11-23 21:32:47,417 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 7 states have (on average 2.4285714285714284) internal successors, (17), 9 states have internal predecessors, (17), 3 states have call successors, (4), 2 states have call predecessors, (4), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2023-11-23 21:32:47,417 INFO L276 IsEmpty]: Start isEmpty. Operand 105 states and 123 transitions. [2023-11-23 21:32:47,418 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2023-11-23 21:32:47,418 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:32:47,418 INFO L195 NwaCegarLoop]: trace histogram [3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:32:47,433 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (16)] Forceful destruction successful, exit code 0 [2023-11-23 21:32:47,634 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Forceful destruction successful, exit code 0 [2023-11-23 21:32:47,823 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/cvc4 --incremental --print-success --lang smt (17)] Forceful destruction successful, exit code 0 [2023-11-23 21:32:48,021 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true,17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/cvc4 --incremental --print-success --lang smt [2023-11-23 21:32:48,021 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 47 more)] === [2023-11-23 21:32:48,022 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:32:48,022 INFO L85 PathProgramCache]: Analyzing trace with hash 88521692, now seen corresponding path program 1 times [2023-11-23 21:32:48,022 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2023-11-23 21:32:48,022 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2137368065] [2023-11-23 21:32:48,022 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:32:48,022 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2023-11-23 21:32:48,022 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat [2023-11-23 21:32:48,023 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2023-11-23 21:32:48,024 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (19)] Waiting until timeout for monitored process [2023-11-23 21:32:48,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:32:48,174 INFO L262 TraceCheckSpWp]: Trace formula consists of 147 conjuncts, 14 conjunts are in the unsatisfiable core [2023-11-23 21:32:48,176 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:32:48,239 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-11-23 21:32:48,239 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:32:48,304 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 6 [2023-11-23 21:32:48,509 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-11-23 21:32:48,509 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2023-11-23 21:32:48,509 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2137368065] [2023-11-23 21:32:48,509 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2137368065] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-23 21:32:48,509 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [212117828] [2023-11-23 21:32:48,509 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:32:48,509 INFO L173 SolverBuilder]: Constructing external solver with command: cvc4 --incremental --print-success --lang smt [2023-11-23 21:32:48,510 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/cvc4 [2023-11-23 21:32:48,511 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/cvc4 --incremental --print-success --lang smt (exit command is (exit), workingDir is null) [2023-11-23 21:32:48,522 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/cvc4 --incremental --print-success --lang smt (20)] Waiting until timeout for monitored process [2023-11-23 21:32:48,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:32:48,742 INFO L262 TraceCheckSpWp]: Trace formula consists of 147 conjuncts, 17 conjunts are in the unsatisfiable core [2023-11-23 21:32:48,743 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:32:48,781 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-11-23 21:32:48,781 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:32:48,804 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 6 [2023-11-23 21:32:48,913 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-11-23 21:32:48,914 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleCvc4 [212117828] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-23 21:32:48,914 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [597350428] [2023-11-23 21:32:48,914 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:32:48,914 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:32:48,914 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/z3 [2023-11-23 21:32:48,915 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-23 21:32:48,916 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2023-11-23 21:32:49,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:32:49,035 INFO L262 TraceCheckSpWp]: Trace formula consists of 147 conjuncts, 14 conjunts are in the unsatisfiable core [2023-11-23 21:32:49,037 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:32:49,096 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-11-23 21:32:49,097 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-23 21:32:49,125 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 6 [2023-11-23 21:32:49,225 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2023-11-23 21:32:49,225 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [597350428] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-23 21:32:49,226 INFO L185 FreeRefinementEngine]: Found 0 perfect and 6 imperfect interpolant sequences. [2023-11-23 21:32:49,226 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5, 5, 5, 5] total 9 [2023-11-23 21:32:49,226 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1684646910] [2023-11-23 21:32:49,226 INFO L85 oduleStraightlineAll]: Using 6 imperfect interpolants to construct interpolant automaton [2023-11-23 21:32:49,227 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2023-11-23 21:32:49,227 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2023-11-23 21:32:49,227 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2023-11-23 21:32:49,227 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=69, Unknown=0, NotChecked=0, Total=90 [2023-11-23 21:32:49,228 INFO L87 Difference]: Start difference. First operand 105 states and 123 transitions. Second operand has 10 states, 7 states have (on average 3.7142857142857144) internal successors, (26), 8 states have internal predecessors, (26), 3 states have call successors, (5), 1 states have call predecessors, (5), 3 states have return successors, (6), 4 states have call predecessors, (6), 3 states have call successors, (6) [2023-11-23 21:32:49,971 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:32:49,971 INFO L93 Difference]: Finished difference Result 105 states and 123 transitions. [2023-11-23 21:32:49,972 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-23 21:32:49,972 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 7 states have (on average 3.7142857142857144) internal successors, (26), 8 states have internal predecessors, (26), 3 states have call successors, (5), 1 states have call predecessors, (5), 3 states have return successors, (6), 4 states have call predecessors, (6), 3 states have call successors, (6) Word has length 21 [2023-11-23 21:32:49,972 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:32:49,973 INFO L225 Difference]: With dead ends: 105 [2023-11-23 21:32:49,973 INFO L226 Difference]: Without dead ends: 105 [2023-11-23 21:32:49,973 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 121 GetRequests, 112 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=27, Invalid=83, Unknown=0, NotChecked=0, Total=110 [2023-11-23 21:32:49,974 INFO L413 NwaCegarLoop]: 76 mSDtfsCounter, 192 mSDsluCounter, 290 mSDsCounter, 0 mSdLazyCounter, 141 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 192 SdHoareTripleChecker+Valid, 366 SdHoareTripleChecker+Invalid, 143 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 141 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2023-11-23 21:32:49,974 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [192 Valid, 366 Invalid, 143 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 141 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2023-11-23 21:32:49,975 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 105 states. [2023-11-23 21:32:49,978 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 105 to 104. [2023-11-23 21:32:49,978 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 104 states, 63 states have (on average 1.8095238095238095) internal successors, (114), 98 states have internal predecessors, (114), 4 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2023-11-23 21:32:49,979 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 104 states to 104 states and 122 transitions. [2023-11-23 21:32:49,979 INFO L78 Accepts]: Start accepts. Automaton has 104 states and 122 transitions. Word has length 21 [2023-11-23 21:32:49,980 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:32:49,980 INFO L495 AbstractCegarLoop]: Abstraction has 104 states and 122 transitions. [2023-11-23 21:32:49,980 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 7 states have (on average 3.7142857142857144) internal successors, (26), 8 states have internal predecessors, (26), 3 states have call successors, (5), 1 states have call predecessors, (5), 3 states have return successors, (6), 4 states have call predecessors, (6), 3 states have call successors, (6) [2023-11-23 21:32:49,981 INFO L276 IsEmpty]: Start isEmpty. Operand 104 states and 122 transitions. [2023-11-23 21:32:49,981 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2023-11-23 21:32:49,981 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:32:49,982 INFO L195 NwaCegarLoop]: trace histogram [3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:32:49,989 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (19)] Ended with exit code 0 [2023-11-23 21:32:50,187 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/cvc4 --incremental --print-success --lang smt (20)] Forceful destruction successful, exit code 0 [2023-11-23 21:32:50,400 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Forceful destruction successful, exit code 0 [2023-11-23 21:32:50,585 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3,20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/cvc4 --incremental --print-success --lang smt,21 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-23 21:32:50,585 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr10REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 47 more)] === [2023-11-23 21:32:50,585 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:32:50,586 INFO L85 PathProgramCache]: Analyzing trace with hash 88521691, now seen corresponding path program 1 times [2023-11-23 21:32:50,586 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2023-11-23 21:32:50,586 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [648344906] [2023-11-23 21:32:50,586 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:32:50,586 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2023-11-23 21:32:50,586 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat [2023-11-23 21:32:50,588 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2023-11-23 21:32:50,591 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (22)] Waiting until timeout for monitored process [2023-11-23 21:32:50,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-23 21:32:50,710 INFO L262 TraceCheckSpWp]: Trace formula consists of 147 conjuncts, 6 conjunts are in the unsatisfiable core [2023-11-23 21:32:50,711 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-23 21:32:50,720 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-11-23 21:32:50,720 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-23 21:32:50,720 INFO L136 FreeRefinementEngine]: Strategy WALRUS found an infeasible trace [2023-11-23 21:32:50,720 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [648344906] [2023-11-23 21:32:50,720 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleMathsat [648344906] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-23 21:32:50,720 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-23 21:32:50,720 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-23 21:32:50,720 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [520290594] [2023-11-23 21:32:50,721 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-23 21:32:50,721 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-23 21:32:50,721 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2023-11-23 21:32:50,722 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-23 21:32:50,722 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 21:32:50,722 INFO L87 Difference]: Start difference. First operand 104 states and 122 transitions. Second operand has 3 states, 2 states have (on average 6.5) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-23 21:32:50,919 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-23 21:32:50,919 INFO L93 Difference]: Finished difference Result 104 states and 122 transitions. [2023-11-23 21:32:50,920 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-23 21:32:50,920 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 6.5) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 21 [2023-11-23 21:32:50,920 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-23 21:32:50,921 INFO L225 Difference]: With dead ends: 104 [2023-11-23 21:32:50,921 INFO L226 Difference]: Without dead ends: 104 [2023-11-23 21:32:50,921 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-23 21:32:50,922 INFO L413 NwaCegarLoop]: 80 mSDtfsCounter, 12 mSDsluCounter, 50 mSDsCounter, 0 mSdLazyCounter, 61 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 12 SdHoareTripleChecker+Valid, 130 SdHoareTripleChecker+Invalid, 61 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 61 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-23 21:32:50,923 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [12 Valid, 130 Invalid, 61 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 61 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-23 21:32:50,923 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 104 states. [2023-11-23 21:32:50,926 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 104 to 103. [2023-11-23 21:32:50,926 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 103 states, 63 states have (on average 1.7936507936507937) internal successors, (113), 97 states have internal predecessors, (113), 4 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2023-11-23 21:32:50,927 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 103 states to 103 states and 121 transitions. [2023-11-23 21:32:50,927 INFO L78 Accepts]: Start accepts. Automaton has 103 states and 121 transitions. Word has length 21 [2023-11-23 21:32:50,928 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-23 21:32:50,928 INFO L495 AbstractCegarLoop]: Abstraction has 103 states and 121 transitions. [2023-11-23 21:32:50,928 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 6.5) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-23 21:32:50,928 INFO L276 IsEmpty]: Start isEmpty. Operand 103 states and 121 transitions. [2023-11-23 21:32:50,929 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2023-11-23 21:32:50,929 INFO L187 NwaCegarLoop]: Found error trace [2023-11-23 21:32:50,929 INFO L195 NwaCegarLoop]: trace histogram [3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-23 21:32:50,937 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (22)] Forceful destruction successful, exit code 0 [2023-11-23 21:32:51,129 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 22 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2023-11-23 21:32:51,130 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr12REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 47 more)] === [2023-11-23 21:32:51,130 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-23 21:32:51,130 INFO L85 PathProgramCache]: Analyzing trace with hash -1550790019, now seen corresponding path program 1 times [2023-11-23 21:32:51,130 INFO L118 FreeRefinementEngine]: Executing refinement strategy WALRUS [2023-11-23 21:32:51,130 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [136804046] [2023-11-23 21:32:51,131 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-23 21:32:51,131 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 [2023-11-23 21:32:51,131 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat [2023-11-23 21:32:51,132 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2023-11-23 21:32:51,134 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c68984e4-805e-47a9-85e9-ec8514300082/bin/utaipan-verify-mE87zJ7Ire/mathsat -theory.fp.to_bv_overflow_mode=1 -theory.fp.minmax_zero_mode=4 -theory.bv.div_by_zero_mode=1 -unsat_core_generation=3 (23)] Waiting until timeout for monitored process