./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/memsafety/test-0236.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version a0165632 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/memsafety/test-0236.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 9284cc089e563ce2bdd0201592786c36b8d718b3efb8766c887a82d2ff3babc3 --- Real Ultimate output --- This is Ultimate 0.2.5-dev-a016563 [2024-11-09 06:22:41,188 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-11-09 06:22:41,284 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf [2024-11-09 06:22:41,290 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-11-09 06:22:41,291 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-11-09 06:22:41,347 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-11-09 06:22:41,348 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-11-09 06:22:41,349 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-11-09 06:22:41,350 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-11-09 06:22:41,351 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-11-09 06:22:41,352 INFO L153 SettingsManager]: * User list type=DISABLED [2024-11-09 06:22:41,353 INFO L151 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2024-11-09 06:22:41,354 INFO L153 SettingsManager]: * Explicit value domain=true [2024-11-09 06:22:41,354 INFO L153 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2024-11-09 06:22:41,357 INFO L153 SettingsManager]: * Octagon Domain=false [2024-11-09 06:22:41,358 INFO L153 SettingsManager]: * Abstract domain=CompoundDomain [2024-11-09 06:22:41,358 INFO L153 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2024-11-09 06:22:41,359 INFO L153 SettingsManager]: * Use the RCFG-of-the-future interface=true [2024-11-09 06:22:41,359 INFO L153 SettingsManager]: * Interval Domain=false [2024-11-09 06:22:41,359 INFO L151 SettingsManager]: Preferences of Sifa differ from their defaults: [2024-11-09 06:22:41,360 INFO L153 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2024-11-09 06:22:41,376 INFO L153 SettingsManager]: * Simplification Technique=POLY_PAC [2024-11-09 06:22:41,377 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-11-09 06:22:41,378 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-11-09 06:22:41,378 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-11-09 06:22:41,379 INFO L153 SettingsManager]: * sizeof long=4 [2024-11-09 06:22:41,379 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-11-09 06:22:41,379 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-11-09 06:22:41,380 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-11-09 06:22:41,380 INFO L153 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2024-11-09 06:22:41,380 INFO L153 SettingsManager]: * Bitprecise bitfields=true [2024-11-09 06:22:41,381 INFO L153 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2024-11-09 06:22:41,381 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-11-09 06:22:41,382 INFO L153 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2024-11-09 06:22:41,382 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-11-09 06:22:41,382 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2024-11-09 06:22:41,383 INFO L153 SettingsManager]: * sizeof long double=12 [2024-11-09 06:22:41,383 INFO L153 SettingsManager]: * Use constant arrays=true [2024-11-09 06:22:41,384 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-11-09 06:22:41,384 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-11-09 06:22:41,384 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-11-09 06:22:41,385 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2024-11-09 06:22:41,385 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-11-09 06:22:41,385 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-11-09 06:22:41,386 INFO L153 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2024-11-09 06:22:41,386 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-11-09 06:22:41,386 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-11-09 06:22:41,387 INFO L153 SettingsManager]: * Trace refinement exception blacklist=NONE [2024-11-09 06:22:41,387 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-11-09 06:22:41,387 INFO L153 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9284cc089e563ce2bdd0201592786c36b8d718b3efb8766c887a82d2ff3babc3 [2024-11-09 06:22:41,760 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-11-09 06:22:41,792 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-11-09 06:22:41,795 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-11-09 06:22:41,797 INFO L270 PluginConnector]: Initializing CDTParser... [2024-11-09 06:22:41,798 INFO L274 PluginConnector]: CDTParser initialized [2024-11-09 06:22:41,799 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/../../sv-benchmarks/c/memsafety/test-0236.i Unable to find full path for "g++" [2024-11-09 06:22:44,365 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-11-09 06:22:44,670 INFO L384 CDTParser]: Found 1 translation units. [2024-11-09 06:22:44,675 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/sv-benchmarks/c/memsafety/test-0236.i [2024-11-09 06:22:44,700 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/data/63afba07a/8f5d6002d25a4ece9ef5bc414f2ff4ea/FLAG4300c8536 [2024-11-09 06:22:44,721 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/data/63afba07a/8f5d6002d25a4ece9ef5bc414f2ff4ea [2024-11-09 06:22:44,724 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-11-09 06:22:44,726 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-11-09 06:22:44,727 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-11-09 06:22:44,727 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-11-09 06:22:44,753 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-11-09 06:22:44,754 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 09.11 06:22:44" (1/1) ... [2024-11-09 06:22:44,755 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2a5f1071 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 06:22:44, skipping insertion in model container [2024-11-09 06:22:44,755 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 09.11 06:22:44" (1/1) ... [2024-11-09 06:22:44,834 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-11-09 06:22:45,458 WARN L1072 CHandler]: saw a pointer cast to a type that we could not get a type size for, not adapting memory model [2024-11-09 06:22:45,496 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-09 06:22:45,510 INFO L200 MainTranslator]: Completed pre-run [2024-11-09 06:22:45,570 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-11-09 06:22:45,639 INFO L204 MainTranslator]: Completed translation [2024-11-09 06:22:45,640 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 06:22:45 WrapperNode [2024-11-09 06:22:45,640 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-11-09 06:22:45,642 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-11-09 06:22:45,642 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-11-09 06:22:45,642 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-11-09 06:22:45,653 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 06:22:45" (1/1) ... [2024-11-09 06:22:45,676 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 06:22:45" (1/1) ... [2024-11-09 06:22:45,743 INFO L138 Inliner]: procedures = 188, calls = 67, calls flagged for inlining = 14, calls inlined = 14, statements flattened = 211 [2024-11-09 06:22:45,747 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-11-09 06:22:45,749 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-11-09 06:22:45,749 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-11-09 06:22:45,749 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-11-09 06:22:45,768 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 06:22:45" (1/1) ... [2024-11-09 06:22:45,768 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 06:22:45" (1/1) ... [2024-11-09 06:22:45,776 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 06:22:45" (1/1) ... [2024-11-09 06:22:45,780 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 06:22:45" (1/1) ... [2024-11-09 06:22:45,806 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 06:22:45" (1/1) ... [2024-11-09 06:22:45,815 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 06:22:45" (1/1) ... [2024-11-09 06:22:45,821 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 06:22:45" (1/1) ... [2024-11-09 06:22:45,827 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 06:22:45" (1/1) ... [2024-11-09 06:22:45,836 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-11-09 06:22:45,840 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-11-09 06:22:45,840 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-11-09 06:22:45,840 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-11-09 06:22:45,842 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 06:22:45" (1/1) ... [2024-11-09 06:22:45,850 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2024-11-09 06:22:45,869 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 [2024-11-09 06:22:45,885 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2024-11-09 06:22:45,891 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2024-11-09 06:22:45,973 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2024-11-09 06:22:45,986 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-11-09 06:22:45,987 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2024-11-09 06:22:45,989 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2024-11-09 06:22:45,990 INFO L130 BoogieDeclarations]: Found specification of procedure zalloc_or_die [2024-11-09 06:22:45,990 INFO L138 BoogieDeclarations]: Found implementation of procedure zalloc_or_die [2024-11-09 06:22:45,990 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2024-11-09 06:22:45,991 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2024-11-09 06:22:45,991 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2024-11-09 06:22:45,992 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-11-09 06:22:45,992 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-11-09 06:22:46,174 INFO L238 CfgBuilder]: Building ICFG [2024-11-09 06:22:46,176 INFO L264 CfgBuilder]: Building CFG for each procedure with an implementation [2024-11-09 06:22:46,931 INFO L? ?]: Removed 220 outVars from TransFormulas that were not future-live. [2024-11-09 06:22:46,932 INFO L287 CfgBuilder]: Performing block encoding [2024-11-09 06:22:47,062 INFO L311 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-11-09 06:22:47,063 INFO L316 CfgBuilder]: Removed 10 assume(true) statements. [2024-11-09 06:22:47,063 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 09.11 06:22:47 BoogieIcfgContainer [2024-11-09 06:22:47,064 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-11-09 06:22:47,066 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-11-09 06:22:47,067 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-11-09 06:22:47,071 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-11-09 06:22:47,071 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 09.11 06:22:44" (1/3) ... [2024-11-09 06:22:47,072 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5a43f419 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 09.11 06:22:47, skipping insertion in model container [2024-11-09 06:22:47,072 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.11 06:22:45" (2/3) ... [2024-11-09 06:22:47,072 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5a43f419 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 09.11 06:22:47, skipping insertion in model container [2024-11-09 06:22:47,073 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 09.11 06:22:47" (3/3) ... [2024-11-09 06:22:47,074 INFO L112 eAbstractionObserver]: Analyzing ICFG test-0236.i [2024-11-09 06:22:47,096 INFO L214 ceAbstractionStarter]: Automizer settings: Hoare:None NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-11-09 06:22:47,096 INFO L154 ceAbstractionStarter]: Applying trace abstraction to program that has 89 error locations. [2024-11-09 06:22:47,153 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-11-09 06:22:47,160 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=None, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@554d5634, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-11-09 06:22:47,161 INFO L334 AbstractCegarLoop]: Starting to check reachability of 89 error locations. [2024-11-09 06:22:47,166 INFO L276 IsEmpty]: Start isEmpty. Operand has 180 states, 83 states have (on average 2.325301204819277) internal successors, (193), 172 states have internal predecessors, (193), 6 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2024-11-09 06:22:47,174 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2024-11-09 06:22:47,174 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 06:22:47,175 INFO L215 NwaCegarLoop]: trace histogram [1, 1, 1] [2024-11-09 06:22:47,176 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr46REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 86 more)] === [2024-11-09 06:22:47,182 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 06:22:47,183 INFO L85 PathProgramCache]: Analyzing trace with hash 375044, now seen corresponding path program 1 times [2024-11-09 06:22:47,195 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 06:22:47,196 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1529494581] [2024-11-09 06:22:47,196 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 06:22:47,197 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 06:22:47,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 06:22:47,371 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 06:22:47,372 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-09 06:22:47,372 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1529494581] [2024-11-09 06:22:47,374 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1529494581] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 06:22:47,374 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 06:22:47,375 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-11-09 06:22:47,377 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2018332954] [2024-11-09 06:22:47,378 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 06:22:47,384 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2024-11-09 06:22:47,385 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-09 06:22:47,423 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2024-11-09 06:22:47,424 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-11-09 06:22:47,426 INFO L87 Difference]: Start difference. First operand has 180 states, 83 states have (on average 2.325301204819277) internal successors, (193), 172 states have internal predecessors, (193), 6 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) Second operand has 2 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 06:22:47,535 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 06:22:47,536 INFO L93 Difference]: Finished difference Result 180 states and 195 transitions. [2024-11-09 06:22:47,537 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2024-11-09 06:22:47,539 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2024-11-09 06:22:47,540 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 06:22:47,550 INFO L225 Difference]: With dead ends: 180 [2024-11-09 06:22:47,551 INFO L226 Difference]: Without dead ends: 179 [2024-11-09 06:22:47,553 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-11-09 06:22:47,557 INFO L432 NwaCegarLoop]: 170 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 170 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-11-09 06:22:47,559 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 170 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-11-09 06:22:47,582 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 179 states. [2024-11-09 06:22:47,621 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 179 to 179. [2024-11-09 06:22:47,625 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 179 states, 83 states have (on average 2.1927710843373496) internal successors, (182), 171 states have internal predecessors, (182), 6 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2024-11-09 06:22:47,630 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 179 states to 179 states and 194 transitions. [2024-11-09 06:22:47,634 INFO L78 Accepts]: Start accepts. Automaton has 179 states and 194 transitions. Word has length 3 [2024-11-09 06:22:47,635 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 06:22:47,635 INFO L471 AbstractCegarLoop]: Abstraction has 179 states and 194 transitions. [2024-11-09 06:22:47,635 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 06:22:47,636 INFO L276 IsEmpty]: Start isEmpty. Operand 179 states and 194 transitions. [2024-11-09 06:22:47,636 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2024-11-09 06:22:47,636 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 06:22:47,637 INFO L215 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2024-11-09 06:22:47,637 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-11-09 06:22:47,638 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting zalloc_or_dieErr0ASSERT_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 86 more)] === [2024-11-09 06:22:47,639 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 06:22:47,640 INFO L85 PathProgramCache]: Analyzing trace with hash 356054431, now seen corresponding path program 1 times [2024-11-09 06:22:47,640 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 06:22:47,642 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2058607508] [2024-11-09 06:22:47,642 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 06:22:47,642 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 06:22:47,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 06:22:47,958 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 06:22:47,958 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-09 06:22:47,959 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2058607508] [2024-11-09 06:22:47,959 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2058607508] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 06:22:47,959 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 06:22:47,960 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-11-09 06:22:47,960 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1866070152] [2024-11-09 06:22:47,960 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 06:22:47,962 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-11-09 06:22:47,963 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-09 06:22:47,964 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-11-09 06:22:47,964 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-09 06:22:47,964 INFO L87 Difference]: Start difference. First operand 179 states and 194 transitions. Second operand has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 06:22:48,236 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 06:22:48,237 INFO L93 Difference]: Finished difference Result 178 states and 193 transitions. [2024-11-09 06:22:48,237 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-11-09 06:22:48,238 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2024-11-09 06:22:48,238 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 06:22:48,240 INFO L225 Difference]: With dead ends: 178 [2024-11-09 06:22:48,240 INFO L226 Difference]: Without dead ends: 178 [2024-11-09 06:22:48,240 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-11-09 06:22:48,242 INFO L432 NwaCegarLoop]: 165 mSDtfsCounter, 3 mSDsluCounter, 105 mSDsCounter, 0 mSdLazyCounter, 112 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3 SdHoareTripleChecker+Valid, 270 SdHoareTripleChecker+Invalid, 112 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 112 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-11-09 06:22:48,243 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [3 Valid, 270 Invalid, 112 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 112 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-11-09 06:22:48,245 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 178 states. [2024-11-09 06:22:48,256 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 178 to 178. [2024-11-09 06:22:48,257 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 178 states, 83 states have (on average 2.180722891566265) internal successors, (181), 170 states have internal predecessors, (181), 6 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2024-11-09 06:22:48,260 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 178 states to 178 states and 193 transitions. [2024-11-09 06:22:48,260 INFO L78 Accepts]: Start accepts. Automaton has 178 states and 193 transitions. Word has length 5 [2024-11-09 06:22:48,261 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 06:22:48,261 INFO L471 AbstractCegarLoop]: Abstraction has 178 states and 193 transitions. [2024-11-09 06:22:48,262 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 06:22:48,262 INFO L276 IsEmpty]: Start isEmpty. Operand 178 states and 193 transitions. [2024-11-09 06:22:48,263 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2024-11-09 06:22:48,263 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 06:22:48,263 INFO L215 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1] [2024-11-09 06:22:48,263 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2024-11-09 06:22:48,264 INFO L396 AbstractCegarLoop]: === Iteration 3 === Targeting zalloc_or_dieErr1ASSERT_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 86 more)] === [2024-11-09 06:22:48,265 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 06:22:48,265 INFO L85 PathProgramCache]: Analyzing trace with hash -1847214190, now seen corresponding path program 1 times [2024-11-09 06:22:48,265 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 06:22:48,266 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [497325869] [2024-11-09 06:22:48,266 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 06:22:48,266 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 06:22:48,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-11-09 06:22:48,301 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [238545115] [2024-11-09 06:22:48,301 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 06:22:48,302 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-09 06:22:48,302 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 [2024-11-09 06:22:48,305 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-09 06:22:48,315 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-11-09 06:22:48,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 06:22:48,451 INFO L255 TraceCheckSpWp]: Trace formula consists of 83 conjuncts, 24 conjuncts are in the unsatisfiable core [2024-11-09 06:22:48,459 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-09 06:22:48,592 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2024-11-09 06:22:48,633 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-11-09 06:22:48,634 INFO L307 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-11-09 06:22:48,634 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-09 06:22:48,634 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [497325869] [2024-11-09 06:22:48,635 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-11-09 06:22:48,636 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [238545115] [2024-11-09 06:22:48,636 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [238545115] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 06:22:48,637 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 06:22:48,637 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-11-09 06:22:48,637 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2094829096] [2024-11-09 06:22:48,638 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 06:22:48,638 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-11-09 06:22:48,639 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-09 06:22:48,639 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-11-09 06:22:48,640 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-11-09 06:22:48,640 INFO L87 Difference]: Start difference. First operand 178 states and 193 transitions. Second operand has 4 states, 3 states have (on average 1.6666666666666667) internal successors, (5), 3 states have internal predecessors, (5), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 06:22:49,018 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 06:22:49,019 INFO L93 Difference]: Finished difference Result 183 states and 198 transitions. [2024-11-09 06:22:49,019 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-11-09 06:22:49,020 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 1.6666666666666667) internal successors, (5), 3 states have internal predecessors, (5), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2024-11-09 06:22:49,020 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 06:22:49,021 INFO L225 Difference]: With dead ends: 183 [2024-11-09 06:22:49,022 INFO L226 Difference]: Without dead ends: 183 [2024-11-09 06:22:49,022 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2024-11-09 06:22:49,026 INFO L432 NwaCegarLoop]: 160 mSDtfsCounter, 7 mSDsluCounter, 270 mSDsCounter, 0 mSdLazyCounter, 144 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7 SdHoareTripleChecker+Valid, 430 SdHoareTripleChecker+Invalid, 148 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 144 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2024-11-09 06:22:49,027 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [7 Valid, 430 Invalid, 148 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 144 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2024-11-09 06:22:49,029 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 183 states. [2024-11-09 06:22:49,046 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 183 to 183. [2024-11-09 06:22:49,047 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 183 states, 87 states have (on average 2.1379310344827585) internal successors, (186), 174 states have internal predecessors, (186), 6 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2024-11-09 06:22:49,049 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 183 states to 183 states and 198 transitions. [2024-11-09 06:22:49,049 INFO L78 Accepts]: Start accepts. Automaton has 183 states and 198 transitions. Word has length 6 [2024-11-09 06:22:49,050 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 06:22:49,050 INFO L471 AbstractCegarLoop]: Abstraction has 183 states and 198 transitions. [2024-11-09 06:22:49,050 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 1.6666666666666667) internal successors, (5), 3 states have internal predecessors, (5), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-11-09 06:22:49,051 INFO L276 IsEmpty]: Start isEmpty. Operand 183 states and 198 transitions. [2024-11-09 06:22:49,052 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2024-11-09 06:22:49,052 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 06:22:49,053 INFO L215 NwaCegarLoop]: trace histogram [6, 6, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 06:22:49,079 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2024-11-09 06:22:49,253 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-09 06:22:49,254 INFO L396 AbstractCegarLoop]: === Iteration 4 === Targeting zalloc_or_dieErr1ASSERT_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 86 more)] === [2024-11-09 06:22:49,254 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 06:22:49,255 INFO L85 PathProgramCache]: Analyzing trace with hash -2860405, now seen corresponding path program 1 times [2024-11-09 06:22:49,255 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 06:22:49,255 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1756783752] [2024-11-09 06:22:49,256 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 06:22:49,256 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 06:22:49,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-11-09 06:22:49,392 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1333347684] [2024-11-09 06:22:49,392 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 06:22:49,393 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-09 06:22:49,393 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 [2024-11-09 06:22:49,395 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-09 06:22:49,397 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-11-09 06:22:49,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 06:22:49,669 INFO L255 TraceCheckSpWp]: Trace formula consists of 455 conjuncts, 29 conjuncts are in the unsatisfiable core [2024-11-09 06:22:49,675 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-09 06:22:49,723 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2024-11-09 06:22:49,802 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2024-11-09 06:22:49,864 INFO L134 CoverageAnalysis]: Checked inductivity of 65 backedges. 40 proven. 0 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2024-11-09 06:22:49,864 INFO L307 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-11-09 06:22:49,865 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-09 06:22:49,865 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1756783752] [2024-11-09 06:22:49,865 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-11-09 06:22:49,866 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1333347684] [2024-11-09 06:22:49,866 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1333347684] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 06:22:49,866 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 06:22:49,866 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-11-09 06:22:49,867 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [565345023] [2024-11-09 06:22:49,867 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 06:22:49,867 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-11-09 06:22:49,868 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-09 06:22:49,869 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-11-09 06:22:49,872 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-11-09 06:22:49,873 INFO L87 Difference]: Start difference. First operand 183 states and 198 transitions. Second operand has 5 states, 4 states have (on average 6.0) internal successors, (24), 5 states have internal predecessors, (24), 2 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2024-11-09 06:22:50,247 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 06:22:50,247 INFO L93 Difference]: Finished difference Result 187 states and 202 transitions. [2024-11-09 06:22:50,247 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-11-09 06:22:50,248 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 6.0) internal successors, (24), 5 states have internal predecessors, (24), 2 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 45 [2024-11-09 06:22:50,248 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 06:22:50,250 INFO L225 Difference]: With dead ends: 187 [2024-11-09 06:22:50,251 INFO L226 Difference]: Without dead ends: 185 [2024-11-09 06:22:50,251 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 45 GetRequests, 41 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2024-11-09 06:22:50,252 INFO L432 NwaCegarLoop]: 165 mSDtfsCounter, 3 mSDsluCounter, 428 mSDsCounter, 0 mSdLazyCounter, 174 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3 SdHoareTripleChecker+Valid, 593 SdHoareTripleChecker+Invalid, 179 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 174 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2024-11-09 06:22:50,253 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [3 Valid, 593 Invalid, 179 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 174 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2024-11-09 06:22:50,254 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185 states. [2024-11-09 06:22:50,269 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185 to 185. [2024-11-09 06:22:50,269 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 185 states, 89 states have (on average 2.1123595505617976) internal successors, (188), 176 states have internal predecessors, (188), 6 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2024-11-09 06:22:50,274 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 185 states to 185 states and 200 transitions. [2024-11-09 06:22:50,274 INFO L78 Accepts]: Start accepts. Automaton has 185 states and 200 transitions. Word has length 45 [2024-11-09 06:22:50,274 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 06:22:50,275 INFO L471 AbstractCegarLoop]: Abstraction has 185 states and 200 transitions. [2024-11-09 06:22:50,275 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 6.0) internal successors, (24), 5 states have internal predecessors, (24), 2 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2024-11-09 06:22:50,275 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 200 transitions. [2024-11-09 06:22:50,276 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2024-11-09 06:22:50,276 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 06:22:50,277 INFO L215 NwaCegarLoop]: trace histogram [6, 6, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 06:22:50,307 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2024-11-09 06:22:50,477 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-09 06:22:50,477 INFO L396 AbstractCegarLoop]: === Iteration 5 === Targeting zalloc_or_dieErr1ASSERT_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 86 more)] === [2024-11-09 06:22:50,478 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 06:22:50,478 INFO L85 PathProgramCache]: Analyzing trace with hash -11795298, now seen corresponding path program 1 times [2024-11-09 06:22:50,478 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 06:22:50,479 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [606725361] [2024-11-09 06:22:50,479 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 06:22:50,479 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 06:22:50,729 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-11-09 06:22:50,737 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [816284471] [2024-11-09 06:22:50,738 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 06:22:50,738 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-09 06:22:50,738 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 [2024-11-09 06:22:50,740 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-09 06:22:50,742 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2024-11-09 06:22:51,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 06:22:51,085 INFO L255 TraceCheckSpWp]: Trace formula consists of 530 conjuncts, 35 conjuncts are in the unsatisfiable core [2024-11-09 06:22:51,091 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-09 06:22:51,141 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2024-11-09 06:22:51,194 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2024-11-09 06:22:51,283 INFO L134 CoverageAnalysis]: Checked inductivity of 100 backedges. 44 proven. 12 refuted. 0 times theorem prover too weak. 44 trivial. 0 not checked. [2024-11-09 06:22:51,283 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-11-09 06:22:51,642 INFO L134 CoverageAnalysis]: Checked inductivity of 100 backedges. 43 proven. 1 refuted. 0 times theorem prover too weak. 56 trivial. 0 not checked. [2024-11-09 06:22:51,643 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-09 06:22:51,643 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [606725361] [2024-11-09 06:22:51,643 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-11-09 06:22:51,643 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [816284471] [2024-11-09 06:22:51,643 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [816284471] provided 0 perfect and 2 imperfect interpolant sequences [2024-11-09 06:22:51,644 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1699888938] [2024-11-09 06:22:51,674 INFO L159 IcfgInterpreter]: Started Sifa with 23 locations of interest [2024-11-09 06:22:51,675 INFO L166 IcfgInterpreter]: Building call graph [2024-11-09 06:22:51,685 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2024-11-09 06:22:51,694 INFO L176 IcfgInterpreter]: Starting interpretation [2024-11-09 06:22:51,694 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2024-11-09 06:22:55,288 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 64 for LOIs [2024-11-09 06:22:55,653 INFO L180 IcfgInterpreter]: Interpretation finished [2024-11-09 06:23:02,071 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSifa [1699888938] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 06:23:02,072 INFO L185 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2024-11-09 06:23:02,072 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [20] imperfect sequences [7, 6] total 31 [2024-11-09 06:23:02,073 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [594615159] [2024-11-09 06:23:02,073 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 06:23:02,073 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2024-11-09 06:23:02,074 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-09 06:23:02,075 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2024-11-09 06:23:02,076 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=137, Invalid=793, Unknown=0, NotChecked=0, Total=930 [2024-11-09 06:23:02,076 INFO L87 Difference]: Start difference. First operand 185 states and 200 transitions. Second operand has 22 states, 14 states have (on average 1.2142857142857142) internal successors, (17), 15 states have internal predecessors, (17), 6 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) [2024-11-09 06:23:05,675 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 06:23:05,676 INFO L93 Difference]: Finished difference Result 278 states and 311 transitions. [2024-11-09 06:23:05,676 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2024-11-09 06:23:05,677 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 14 states have (on average 1.2142857142857142) internal successors, (17), 15 states have internal predecessors, (17), 6 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) Word has length 50 [2024-11-09 06:23:05,677 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 06:23:05,679 INFO L225 Difference]: With dead ends: 278 [2024-11-09 06:23:05,679 INFO L226 Difference]: Without dead ends: 278 [2024-11-09 06:23:05,680 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 149 GetRequests, 112 SyntacticMatches, 7 SemanticMatches, 30 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 226 ImplicationChecksByTransitivity, 6.7s TimeCoverageRelationStatistics Valid=144, Invalid=848, Unknown=0, NotChecked=0, Total=992 [2024-11-09 06:23:05,681 INFO L432 NwaCegarLoop]: 94 mSDtfsCounter, 196 mSDsluCounter, 591 mSDsCounter, 0 mSdLazyCounter, 1487 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 197 SdHoareTripleChecker+Valid, 685 SdHoareTripleChecker+Invalid, 1488 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1487 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.4s IncrementalHoareTripleChecker+Time [2024-11-09 06:23:05,682 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [197 Valid, 685 Invalid, 1488 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1487 Invalid, 0 Unknown, 0 Unchecked, 3.4s Time] [2024-11-09 06:23:05,683 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 278 states. [2024-11-09 06:23:05,693 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 278 to 236. [2024-11-09 06:23:05,694 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 236 states, 132 states have (on average 2.0833333333333335) internal successors, (275), 219 states have internal predecessors, (275), 12 states have call successors, (12), 4 states have call predecessors, (12), 4 states have return successors, (12), 12 states have call predecessors, (12), 12 states have call successors, (12) [2024-11-09 06:23:05,695 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 236 states to 236 states and 299 transitions. [2024-11-09 06:23:05,695 INFO L78 Accepts]: Start accepts. Automaton has 236 states and 299 transitions. Word has length 50 [2024-11-09 06:23:05,696 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 06:23:05,696 INFO L471 AbstractCegarLoop]: Abstraction has 236 states and 299 transitions. [2024-11-09 06:23:05,696 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 14 states have (on average 1.2142857142857142) internal successors, (17), 15 states have internal predecessors, (17), 6 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) [2024-11-09 06:23:05,697 INFO L276 IsEmpty]: Start isEmpty. Operand 236 states and 299 transitions. [2024-11-09 06:23:05,698 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2024-11-09 06:23:05,698 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 06:23:05,698 INFO L215 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 06:23:05,723 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2024-11-09 06:23:05,902 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-09 06:23:05,903 INFO L396 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 86 more)] === [2024-11-09 06:23:05,904 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 06:23:05,904 INFO L85 PathProgramCache]: Analyzing trace with hash -1157793848, now seen corresponding path program 1 times [2024-11-09 06:23:05,904 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 06:23:05,904 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [256713975] [2024-11-09 06:23:05,905 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 06:23:05,905 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 06:23:06,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 06:23:06,806 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 61 proven. 7 refuted. 0 times theorem prover too weak. 58 trivial. 0 not checked. [2024-11-09 06:23:06,807 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-09 06:23:06,808 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [256713975] [2024-11-09 06:23:06,808 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [256713975] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-09 06:23:06,808 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1484540690] [2024-11-09 06:23:06,809 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 06:23:06,809 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-09 06:23:06,809 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 [2024-11-09 06:23:06,811 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-09 06:23:06,813 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2024-11-09 06:23:07,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 06:23:07,084 INFO L255 TraceCheckSpWp]: Trace formula consists of 565 conjuncts, 18 conjuncts are in the unsatisfiable core [2024-11-09 06:23:07,092 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-09 06:23:07,167 WARN L873 $PredicateComparison]: unable to prove that (exists ((|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (= (store |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| 1) |c_#valid|)) is different from true [2024-11-09 06:23:07,200 INFO L349 Elim1Store]: treesize reduction 15, result has 25.0 percent of original size [2024-11-09 06:23:07,200 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 14 [2024-11-09 06:23:07,214 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 61 proven. 1 refuted. 0 times theorem prover too weak. 58 trivial. 6 not checked. [2024-11-09 06:23:07,215 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-11-09 06:23:07,474 INFO L349 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2024-11-09 06:23:07,475 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 11 [2024-11-09 06:23:07,514 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 61 proven. 7 refuted. 0 times theorem prover too weak. 58 trivial. 0 not checked. [2024-11-09 06:23:07,515 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1484540690] provided 0 perfect and 2 imperfect interpolant sequences [2024-11-09 06:23:07,515 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1153845511] [2024-11-09 06:23:07,520 INFO L159 IcfgInterpreter]: Started Sifa with 24 locations of interest [2024-11-09 06:23:07,520 INFO L166 IcfgInterpreter]: Building call graph [2024-11-09 06:23:07,521 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2024-11-09 06:23:07,521 INFO L176 IcfgInterpreter]: Starting interpretation [2024-11-09 06:23:07,521 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2024-11-09 06:23:08,828 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 64 for LOIs [2024-11-09 06:23:09,112 INFO L180 IcfgInterpreter]: Interpretation finished [2024-11-09 06:23:11,567 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2974#(and (<= 1 |#StackHeapBarrier|) (= |~#list~0.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= 3 |~#list~0.base|) (exists ((|v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_89| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#amount#1_66| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#value#1_65| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#res#1.offset_57| Int)) (and (<= 0 |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_89|) (= |v_zalloc_or_die_#Ultimate.C_memset_#value#1_65| 0) (= |ULTIMATE.start_l4_insert_#t~ret7#1.offset| 0) (= 0 |v_zalloc_or_die_#Ultimate.C_memset_#res#1.offset_57|) (<= (mod |v_zalloc_or_die_#Ultimate.C_memset_#amount#1_66| 4294967296) (mod |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_89| 4294967296)))) (= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (not (= |ULTIMATE.start_l4_insert_#t~ret7#1.base| 0)) (exists ((|v_ULTIMATE.start_l4_insert_~item~0#1.base_30| Int)) (not (= (select |#valid| |v_ULTIMATE.start_l4_insert_~item~0#1.base_30|) 1))))' at error location [2024-11-09 06:23:11,568 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2024-11-09 06:23:11,568 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-11-09 06:23:11,568 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 9, 8] total 13 [2024-11-09 06:23:11,568 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2134644069] [2024-11-09 06:23:11,569 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-11-09 06:23:11,569 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2024-11-09 06:23:11,570 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-09 06:23:11,570 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2024-11-09 06:23:11,571 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=96, Invalid=777, Unknown=1, NotChecked=56, Total=930 [2024-11-09 06:23:11,571 INFO L87 Difference]: Start difference. First operand 236 states and 299 transitions. Second operand has 14 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 12 states have internal predecessors, (39), 2 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) [2024-11-09 06:23:12,310 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 06:23:12,311 INFO L93 Difference]: Finished difference Result 232 states and 291 transitions. [2024-11-09 06:23:12,311 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-11-09 06:23:12,311 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 12 states have internal predecessors, (39), 2 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) Word has length 54 [2024-11-09 06:23:12,312 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 06:23:12,313 INFO L225 Difference]: With dead ends: 232 [2024-11-09 06:23:12,313 INFO L226 Difference]: Without dead ends: 232 [2024-11-09 06:23:12,314 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 173 GetRequests, 131 SyntacticMatches, 10 SemanticMatches, 32 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 235 ImplicationChecksByTransitivity, 2.8s TimeCoverageRelationStatistics Valid=119, Invalid=940, Unknown=1, NotChecked=62, Total=1122 [2024-11-09 06:23:12,315 INFO L432 NwaCegarLoop]: 148 mSDtfsCounter, 20 mSDsluCounter, 691 mSDsCounter, 0 mSdLazyCounter, 637 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 839 SdHoareTripleChecker+Invalid, 836 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 637 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 185 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2024-11-09 06:23:12,316 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 839 Invalid, 836 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 637 Invalid, 0 Unknown, 185 Unchecked, 0.6s Time] [2024-11-09 06:23:12,317 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 232 states. [2024-11-09 06:23:12,325 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 232 to 232. [2024-11-09 06:23:12,326 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 232 states, 132 states have (on average 2.022727272727273) internal successors, (267), 215 states have internal predecessors, (267), 12 states have call successors, (12), 4 states have call predecessors, (12), 4 states have return successors, (12), 12 states have call predecessors, (12), 12 states have call successors, (12) [2024-11-09 06:23:12,328 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 232 states to 232 states and 291 transitions. [2024-11-09 06:23:12,328 INFO L78 Accepts]: Start accepts. Automaton has 232 states and 291 transitions. Word has length 54 [2024-11-09 06:23:12,329 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 06:23:12,329 INFO L471 AbstractCegarLoop]: Abstraction has 232 states and 291 transitions. [2024-11-09 06:23:12,329 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 11 states have (on average 3.5454545454545454) internal successors, (39), 12 states have internal predecessors, (39), 2 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) [2024-11-09 06:23:12,329 INFO L276 IsEmpty]: Start isEmpty. Operand 232 states and 291 transitions. [2024-11-09 06:23:12,331 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2024-11-09 06:23:12,331 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 06:23:12,331 INFO L215 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 06:23:12,358 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2024-11-09 06:23:12,535 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-09 06:23:12,536 INFO L396 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 86 more)] === [2024-11-09 06:23:12,537 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 06:23:12,537 INFO L85 PathProgramCache]: Analyzing trace with hash -1157793847, now seen corresponding path program 1 times [2024-11-09 06:23:12,537 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 06:23:12,537 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1172960064] [2024-11-09 06:23:12,538 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 06:23:12,538 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 06:23:12,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-11-09 06:23:12,707 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [171060415] [2024-11-09 06:23:12,707 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 06:23:12,708 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-09 06:23:12,708 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 [2024-11-09 06:23:12,711 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-09 06:23:12,713 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2024-11-09 06:23:13,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 06:23:13,074 INFO L255 TraceCheckSpWp]: Trace formula consists of 565 conjuncts, 45 conjuncts are in the unsatisfiable core [2024-11-09 06:23:13,080 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-09 06:23:13,288 WARN L873 $PredicateComparison]: unable to prove that (exists ((|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (and (= (store |c_old(#length)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| (select |c_#length| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|)) |c_#length|) (= (select |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 0))) is different from true [2024-11-09 06:23:13,326 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-11-09 06:23:13,327 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 9 [2024-11-09 06:23:13,337 INFO L349 Elim1Store]: treesize reduction 4, result has 50.0 percent of original size [2024-11-09 06:23:13,338 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 11 [2024-11-09 06:23:13,361 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 61 proven. 0 refuted. 0 times theorem prover too weak. 58 trivial. 7 not checked. [2024-11-09 06:23:13,362 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-11-09 06:23:13,508 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-09 06:23:13,508 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1172960064] [2024-11-09 06:23:13,508 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-11-09 06:23:13,509 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [171060415] [2024-11-09 06:23:13,509 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [171060415] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-09 06:23:13,509 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [338637288] [2024-11-09 06:23:13,512 INFO L159 IcfgInterpreter]: Started Sifa with 24 locations of interest [2024-11-09 06:23:13,512 INFO L166 IcfgInterpreter]: Building call graph [2024-11-09 06:23:13,513 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2024-11-09 06:23:13,513 INFO L176 IcfgInterpreter]: Starting interpretation [2024-11-09 06:23:13,513 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2024-11-09 06:23:14,720 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 64 for LOIs [2024-11-09 06:23:14,956 INFO L180 IcfgInterpreter]: Interpretation finished [2024-11-09 06:23:16,988 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3640#(and (<= 1 |#StackHeapBarrier|) (= |~#list~0.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= 3 |~#list~0.base|) (= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (not (= |ULTIMATE.start_l4_insert_#t~ret7#1.base| 0)) (exists ((|v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_105| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#value#1_75| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#amount#1_75| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#res#1.offset_66| Int)) (and (<= (mod |v_zalloc_or_die_#Ultimate.C_memset_#amount#1_75| 4294967296) (mod |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_105| 4294967296)) (= |ULTIMATE.start_l4_insert_#t~ret7#1.offset| 0) (= |v_zalloc_or_die_#Ultimate.C_memset_#value#1_75| 0) (= 0 |v_zalloc_or_die_#Ultimate.C_memset_#res#1.offset_66|) (<= 0 |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_105|))))' at error location [2024-11-09 06:23:16,989 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2024-11-09 06:23:16,989 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-11-09 06:23:16,989 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10] total 10 [2024-11-09 06:23:16,989 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [48839484] [2024-11-09 06:23:16,989 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-11-09 06:23:16,989 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2024-11-09 06:23:16,990 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-09 06:23:16,990 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2024-11-09 06:23:16,991 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=85, Invalid=674, Unknown=1, NotChecked=52, Total=812 [2024-11-09 06:23:16,991 INFO L87 Difference]: Start difference. First operand 232 states and 291 transitions. Second operand has 11 states, 8 states have (on average 3.375) internal successors, (27), 8 states have internal predecessors, (27), 2 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2024-11-09 06:23:17,764 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 06:23:17,764 INFO L93 Difference]: Finished difference Result 228 states and 283 transitions. [2024-11-09 06:23:17,765 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2024-11-09 06:23:17,765 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 8 states have (on average 3.375) internal successors, (27), 8 states have internal predecessors, (27), 2 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 54 [2024-11-09 06:23:17,765 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 06:23:17,766 INFO L225 Difference]: With dead ends: 228 [2024-11-09 06:23:17,767 INFO L226 Difference]: Without dead ends: 228 [2024-11-09 06:23:17,767 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 112 GetRequests, 76 SyntacticMatches, 6 SemanticMatches, 30 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 202 ImplicationChecksByTransitivity, 2.3s TimeCoverageRelationStatistics Valid=98, Invalid=835, Unknown=1, NotChecked=58, Total=992 [2024-11-09 06:23:17,768 INFO L432 NwaCegarLoop]: 140 mSDtfsCounter, 27 mSDsluCounter, 472 mSDsCounter, 0 mSdLazyCounter, 656 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 27 SdHoareTripleChecker+Valid, 612 SdHoareTripleChecker+Invalid, 846 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 656 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 180 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2024-11-09 06:23:17,769 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [27 Valid, 612 Invalid, 846 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 656 Invalid, 0 Unknown, 180 Unchecked, 0.6s Time] [2024-11-09 06:23:17,770 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 228 states. [2024-11-09 06:23:17,777 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 228 to 228. [2024-11-09 06:23:17,778 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 228 states, 132 states have (on average 1.9621212121212122) internal successors, (259), 211 states have internal predecessors, (259), 12 states have call successors, (12), 4 states have call predecessors, (12), 4 states have return successors, (12), 12 states have call predecessors, (12), 12 states have call successors, (12) [2024-11-09 06:23:17,779 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 228 states to 228 states and 283 transitions. [2024-11-09 06:23:17,780 INFO L78 Accepts]: Start accepts. Automaton has 228 states and 283 transitions. Word has length 54 [2024-11-09 06:23:17,780 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 06:23:17,780 INFO L471 AbstractCegarLoop]: Abstraction has 228 states and 283 transitions. [2024-11-09 06:23:17,781 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 8 states have (on average 3.375) internal successors, (27), 8 states have internal predecessors, (27), 2 states have call successors, (6), 2 states have call predecessors, (6), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2024-11-09 06:23:17,781 INFO L276 IsEmpty]: Start isEmpty. Operand 228 states and 283 transitions. [2024-11-09 06:23:17,782 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2024-11-09 06:23:17,783 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 06:23:17,783 INFO L215 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 06:23:17,805 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2024-11-09 06:23:17,986 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-09 06:23:17,987 INFO L396 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr4REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 86 more)] === [2024-11-09 06:23:17,987 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 06:23:17,987 INFO L85 PathProgramCache]: Analyzing trace with hash -243067783, now seen corresponding path program 1 times [2024-11-09 06:23:17,987 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 06:23:17,987 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [28074111] [2024-11-09 06:23:17,988 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 06:23:17,988 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 06:23:18,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 06:23:18,490 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 35 proven. 0 refuted. 0 times theorem prover too weak. 91 trivial. 0 not checked. [2024-11-09 06:23:18,490 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-09 06:23:18,491 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [28074111] [2024-11-09 06:23:18,491 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [28074111] provided 1 perfect and 0 imperfect interpolant sequences [2024-11-09 06:23:18,491 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-11-09 06:23:18,491 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-11-09 06:23:18,491 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1933223897] [2024-11-09 06:23:18,491 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-11-09 06:23:18,492 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2024-11-09 06:23:18,492 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-09 06:23:18,492 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-11-09 06:23:18,493 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-11-09 06:23:18,493 INFO L87 Difference]: Start difference. First operand 228 states and 283 transitions. Second operand has 7 states, 5 states have (on average 4.8) internal successors, (24), 6 states have internal predecessors, (24), 1 states have call successors, (6), 1 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2024-11-09 06:23:18,957 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 06:23:18,958 INFO L93 Difference]: Finished difference Result 227 states and 281 transitions. [2024-11-09 06:23:18,958 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-11-09 06:23:18,959 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 5 states have (on average 4.8) internal successors, (24), 6 states have internal predecessors, (24), 1 states have call successors, (6), 1 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) Word has length 56 [2024-11-09 06:23:18,959 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 06:23:18,960 INFO L225 Difference]: With dead ends: 227 [2024-11-09 06:23:18,961 INFO L226 Difference]: Without dead ends: 227 [2024-11-09 06:23:18,961 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2024-11-09 06:23:18,962 INFO L432 NwaCegarLoop]: 152 mSDtfsCounter, 8 mSDsluCounter, 471 mSDsCounter, 0 mSdLazyCounter, 462 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 623 SdHoareTripleChecker+Invalid, 465 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 462 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2024-11-09 06:23:18,962 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [8 Valid, 623 Invalid, 465 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 462 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2024-11-09 06:23:18,964 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 227 states. [2024-11-09 06:23:18,969 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 227 to 227. [2024-11-09 06:23:18,970 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 227 states, 132 states have (on average 1.946969696969697) internal successors, (257), 210 states have internal predecessors, (257), 12 states have call successors, (12), 4 states have call predecessors, (12), 4 states have return successors, (12), 12 states have call predecessors, (12), 12 states have call successors, (12) [2024-11-09 06:23:18,971 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 227 states to 227 states and 281 transitions. [2024-11-09 06:23:18,972 INFO L78 Accepts]: Start accepts. Automaton has 227 states and 281 transitions. Word has length 56 [2024-11-09 06:23:18,972 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 06:23:18,973 INFO L471 AbstractCegarLoop]: Abstraction has 227 states and 281 transitions. [2024-11-09 06:23:18,973 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 5 states have (on average 4.8) internal successors, (24), 6 states have internal predecessors, (24), 1 states have call successors, (6), 1 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 1 states have call successors, (6) [2024-11-09 06:23:18,973 INFO L276 IsEmpty]: Start isEmpty. Operand 227 states and 281 transitions. [2024-11-09 06:23:18,974 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2024-11-09 06:23:18,974 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 06:23:18,991 INFO L215 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 06:23:18,993 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2024-11-09 06:23:18,993 INFO L396 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 86 more)] === [2024-11-09 06:23:18,994 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 06:23:18,994 INFO L85 PathProgramCache]: Analyzing trace with hash -243067782, now seen corresponding path program 1 times [2024-11-09 06:23:18,994 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 06:23:18,994 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2138241592] [2024-11-09 06:23:18,995 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 06:23:18,995 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 06:23:19,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 06:23:20,414 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 61 proven. 8 refuted. 0 times theorem prover too weak. 57 trivial. 0 not checked. [2024-11-09 06:23:20,414 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-09 06:23:20,414 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2138241592] [2024-11-09 06:23:20,414 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2138241592] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-09 06:23:20,415 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [635871394] [2024-11-09 06:23:20,415 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 06:23:20,415 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-09 06:23:20,415 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 [2024-11-09 06:23:20,417 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-09 06:23:20,419 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2024-11-09 06:23:20,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 06:23:20,857 INFO L255 TraceCheckSpWp]: Trace formula consists of 589 conjuncts, 42 conjuncts are in the unsatisfiable core [2024-11-09 06:23:20,867 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-09 06:23:20,920 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2024-11-09 06:23:23,664 WARN L873 $PredicateComparison]: unable to prove that (exists ((|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (and (= (store |c_old(#length)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| (select |c_#length| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|)) |c_#length|) (= (select |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 0))) is different from true [2024-11-09 06:23:23,738 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-11-09 06:23:23,740 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2024-11-09 06:23:23,772 INFO L349 Elim1Store]: treesize reduction 4, result has 50.0 percent of original size [2024-11-09 06:23:23,773 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 11 [2024-11-09 06:23:23,844 INFO L134 CoverageAnalysis]: Checked inductivity of 126 backedges. 58 proven. 9 refuted. 0 times theorem prover too weak. 50 trivial. 9 not checked. [2024-11-09 06:23:23,844 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-11-09 06:23:23,988 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [635871394] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-09 06:23:23,988 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1464050691] [2024-11-09 06:23:23,991 INFO L159 IcfgInterpreter]: Started Sifa with 26 locations of interest [2024-11-09 06:23:23,991 INFO L166 IcfgInterpreter]: Building call graph [2024-11-09 06:23:23,992 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2024-11-09 06:23:23,992 INFO L176 IcfgInterpreter]: Starting interpretation [2024-11-09 06:23:23,992 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2024-11-09 06:23:25,059 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 64 for LOIs [2024-11-09 06:23:25,291 INFO L180 IcfgInterpreter]: Interpretation finished [2024-11-09 06:23:50,872 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4782#(and (exists ((|v_#memory_$Pointer$.base_205| (Array Int (Array Int Int)))) (= |#memory_$Pointer$.base| (store |v_#memory_$Pointer$.base_205| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_$Pointer$.base_205| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)))))) (<= 1 |#StackHeapBarrier|) (= |~#list~0.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= (select |#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1) (<= (select |#length| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|))) (+ 3 (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)))) (= 3 |~#list~0.base|) (not (= 0 (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)))) (<= (+ 12 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (exists ((|v_#memory_int_168| (Array Int (Array Int Int)))) (= |#memory_int| (store |v_#memory_int_168| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_int_168| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select (select |#memory_int| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)))))) (<= 0 (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) (exists ((|v_#memory_$Pointer$.offset_205| (Array Int (Array Int Int)))) (= |#memory_$Pointer$.offset| (store |v_#memory_$Pointer$.offset_205| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_$Pointer$.offset_205| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)))))) (exists ((|v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_124| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#value#1_85| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#res#1.offset_75| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#amount#1_85| Int)) (and (<= (mod |v_zalloc_or_die_#Ultimate.C_memset_#amount#1_85| 4294967296) (mod |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_124| 4294967296)) (= 0 |v_zalloc_or_die_#Ultimate.C_memset_#res#1.offset_75|) (<= 0 |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_124|) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0) (= |v_zalloc_or_die_#Ultimate.C_memset_#value#1_85| 0))))' at error location [2024-11-09 06:23:50,872 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2024-11-09 06:23:50,872 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-11-09 06:23:50,872 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 13] total 22 [2024-11-09 06:23:50,872 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1853994117] [2024-11-09 06:23:50,872 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-11-09 06:23:50,873 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2024-11-09 06:23:50,873 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-09 06:23:50,873 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2024-11-09 06:23:50,874 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=138, Invalid=1584, Unknown=4, NotChecked=80, Total=1806 [2024-11-09 06:23:50,874 INFO L87 Difference]: Start difference. First operand 227 states and 281 transitions. Second operand has 22 states, 17 states have (on average 2.5294117647058822) internal successors, (43), 17 states have internal predecessors, (43), 3 states have call successors, (7), 2 states have call predecessors, (7), 5 states have return successors, (8), 5 states have call predecessors, (8), 3 states have call successors, (8) [2024-11-09 06:23:52,901 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2024-11-09 06:23:54,727 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 06:23:54,727 INFO L93 Difference]: Finished difference Result 241 states and 309 transitions. [2024-11-09 06:23:54,728 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2024-11-09 06:23:54,728 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 17 states have (on average 2.5294117647058822) internal successors, (43), 17 states have internal predecessors, (43), 3 states have call successors, (7), 2 states have call predecessors, (7), 5 states have return successors, (8), 5 states have call predecessors, (8), 3 states have call successors, (8) Word has length 56 [2024-11-09 06:23:54,729 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 06:23:54,732 INFO L225 Difference]: With dead ends: 241 [2024-11-09 06:23:54,732 INFO L226 Difference]: Without dead ends: 237 [2024-11-09 06:23:54,733 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 134 GetRequests, 81 SyntacticMatches, 7 SemanticMatches, 46 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 708 ImplicationChecksByTransitivity, 28.7s TimeCoverageRelationStatistics Valid=180, Invalid=1982, Unknown=4, NotChecked=90, Total=2256 [2024-11-09 06:23:54,733 INFO L432 NwaCegarLoop]: 153 mSDtfsCounter, 8 mSDsluCounter, 939 mSDsCounter, 0 mSdLazyCounter, 1100 mSolverCounterSat, 12 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 1092 SdHoareTripleChecker+Invalid, 1302 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 1100 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 189 IncrementalHoareTripleChecker+Unchecked, 3.5s IncrementalHoareTripleChecker+Time [2024-11-09 06:23:54,734 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [8 Valid, 1092 Invalid, 1302 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 1100 Invalid, 1 Unknown, 189 Unchecked, 3.5s Time] [2024-11-09 06:23:54,735 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 237 states. [2024-11-09 06:23:54,742 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 237 to 233. [2024-11-09 06:23:54,743 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 233 states, 135 states have (on average 1.9407407407407407) internal successors, (262), 215 states have internal predecessors, (262), 13 states have call successors, (13), 4 states have call predecessors, (13), 6 states have return successors, (21), 13 states have call predecessors, (21), 12 states have call successors, (21) [2024-11-09 06:23:54,747 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 233 states to 233 states and 296 transitions. [2024-11-09 06:23:54,747 INFO L78 Accepts]: Start accepts. Automaton has 233 states and 296 transitions. Word has length 56 [2024-11-09 06:23:54,748 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 06:23:54,748 INFO L471 AbstractCegarLoop]: Abstraction has 233 states and 296 transitions. [2024-11-09 06:23:54,748 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 17 states have (on average 2.5294117647058822) internal successors, (43), 17 states have internal predecessors, (43), 3 states have call successors, (7), 2 states have call predecessors, (7), 5 states have return successors, (8), 5 states have call predecessors, (8), 3 states have call successors, (8) [2024-11-09 06:23:54,749 INFO L276 IsEmpty]: Start isEmpty. Operand 233 states and 296 transitions. [2024-11-09 06:23:54,750 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2024-11-09 06:23:54,750 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 06:23:54,750 INFO L215 NwaCegarLoop]: trace histogram [7, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 06:23:54,776 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2024-11-09 06:23:54,951 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-09 06:23:54,951 INFO L396 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 86 more)] === [2024-11-09 06:23:54,951 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 06:23:54,952 INFO L85 PathProgramCache]: Analyzing trace with hash -1332794837, now seen corresponding path program 2 times [2024-11-09 06:23:54,952 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 06:23:54,952 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1144308584] [2024-11-09 06:23:54,952 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 06:23:54,952 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 06:23:55,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 06:23:56,337 INFO L134 CoverageAnalysis]: Checked inductivity of 138 backedges. 69 proven. 12 refuted. 0 times theorem prover too weak. 57 trivial. 0 not checked. [2024-11-09 06:23:56,337 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-09 06:23:56,338 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1144308584] [2024-11-09 06:23:56,338 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1144308584] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-09 06:23:56,338 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [151406967] [2024-11-09 06:23:56,338 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-11-09 06:23:56,338 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-09 06:23:56,338 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 [2024-11-09 06:23:56,340 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-09 06:23:56,342 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2024-11-09 06:23:56,583 INFO L227 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2024-11-09 06:23:56,583 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-09 06:23:56,585 INFO L255 TraceCheckSpWp]: Trace formula consists of 210 conjuncts, 19 conjuncts are in the unsatisfiable core [2024-11-09 06:23:56,588 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-09 06:23:56,622 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2024-11-09 06:23:56,714 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-11-09 06:23:56,989 INFO L134 CoverageAnalysis]: Checked inductivity of 138 backedges. 37 proven. 1 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2024-11-09 06:23:56,989 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-11-09 06:23:57,441 INFO L134 CoverageAnalysis]: Checked inductivity of 138 backedges. 37 proven. 1 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2024-11-09 06:23:57,442 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [151406967] provided 0 perfect and 2 imperfect interpolant sequences [2024-11-09 06:23:57,442 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1900242489] [2024-11-09 06:23:57,444 INFO L159 IcfgInterpreter]: Started Sifa with 26 locations of interest [2024-11-09 06:23:57,444 INFO L166 IcfgInterpreter]: Building call graph [2024-11-09 06:23:57,445 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2024-11-09 06:23:57,445 INFO L176 IcfgInterpreter]: Starting interpretation [2024-11-09 06:23:57,445 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2024-11-09 06:23:59,869 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 64 for LOIs [2024-11-09 06:24:00,073 INFO L180 IcfgInterpreter]: Interpretation finished [2024-11-09 06:24:08,814 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5643#(and (= 8 |ULTIMATE.start_l3_insert_~list#1.offset|) (<= 1 |#StackHeapBarrier|) (= |~#list~0.offset| 0) (= |ULTIMATE.start_l4_insert_~item~0#1.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.base| 3) (<= 12 (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (exists ((|v_#memory_int_197| (Array Int (Array Int Int)))) (= |#memory_int| (store |v_#memory_int_197| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_int_197| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8 (select (select |#memory_int| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8))))) (= (select |#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1) (= 3 |~#list~0.base|) (exists ((|v_#memory_$Pointer$.offset_234| (Array Int (Array Int Int)))) (= |#memory_$Pointer$.offset| (store |v_#memory_$Pointer$.offset_234| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_$Pointer$.offset_234| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8 0)))) (= |ULTIMATE.start_l1_insert_~list#1.offset| 8) (<= (select |#length| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8)) (+ 3 (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8))) (= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (= 0 |ULTIMATE.start_l4_insert_~list#1.offset|) (= |ULTIMATE.start_l0_insert_~item~4#1.offset| 0) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| 0) (= |ULTIMATE.start_l2_insert_~item~2#1.offset| 0) (= |ULTIMATE.start_l2_insert_~list#1.offset| 0) (or (and (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (exists ((|v_#length_BEFORE_CALL_122| (Array Int Int))) (and (= 12 (select |v_#length_BEFORE_CALL_122| 2)) (= 4 (select |v_#length_BEFORE_CALL_122| 3)) (= 2 (select |v_#length_BEFORE_CALL_122| 1)))) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (exists ((|v_#memory_int_BEFORE_CALL_118| (Array Int (Array Int Int)))) (and (= (select (select |v_#memory_int_BEFORE_CALL_118| 1) 1) 0) (= (select (select |v_#memory_int_BEFORE_CALL_118| 1) 0) 48))) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l2_insert_~item~2#1.base|) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (= |ULTIMATE.start_l4_insert_~list#1.base| |ULTIMATE.start_l3_insert_~item~1#1.base|) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l1_insert_~item~3#1.base|) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l0_insert_~item~4#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (exists ((|v_old(#memory_$Pointer$.base)_AFTER_CALL_82| (Array Int (Array Int Int)))) (= (select (select |v_old(#memory_$Pointer$.base)_AFTER_CALL_82| 3) 0) 0)) (exists ((|v_zalloc_or_die_#Ultimate.C_memset_#amount#1_112| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_166| Int)) (and (<= (mod |v_zalloc_or_die_#Ultimate.C_memset_#amount#1_112| 4294967296) (mod |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_166| 4294967296)) (or (= |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_166| 0) (< 0 |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_166|)))) (exists ((|v_#memory_$Pointer$.offset_BEFORE_CALL_118| (Array Int (Array Int Int)))) (= (select (select |v_#memory_$Pointer$.offset_BEFORE_CALL_118| 3) 0) 0)) (not (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8) 0))) (and (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l2_insert_~item~2#1.base|) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (= |ULTIMATE.start_l4_insert_~list#1.base| |ULTIMATE.start_l3_insert_~item~1#1.base|) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l1_insert_~item~3#1.base|) (exists ((|v_#memory_int_BEFORE_CALL_120| (Array Int (Array Int Int)))) (and (= (select (select |v_#memory_int_BEFORE_CALL_120| 1) 1) 0) (= (select (select |v_#memory_int_BEFORE_CALL_120| 1) 0) 48))) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l0_insert_~item~4#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (exists ((|v_zalloc_or_die_#Ultimate.C_memset_#amount#1_112| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_166| Int)) (and (<= (mod |v_zalloc_or_die_#Ultimate.C_memset_#amount#1_112| 4294967296) (mod |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_166| 4294967296)) (or (= |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_166| 0) (< 0 |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_166|)))) (exists ((|v_#memory_$Pointer$.offset_BEFORE_CALL_120| (Array Int (Array Int Int)))) (= (select (select |v_#memory_$Pointer$.offset_BEFORE_CALL_120| 3) 0) 0)) (exists ((|v_old(#memory_$Pointer$.base)_AFTER_CALL_83| (Array Int (Array Int Int)))) (= (select (select |v_old(#memory_$Pointer$.base)_AFTER_CALL_83| 3) 0) 0)) (not (= (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8) 0)) (exists ((|v_#length_BEFORE_CALL_124| (Array Int Int))) (and (= 12 (select |v_#length_BEFORE_CALL_124| 2)) (= (select |v_#length_BEFORE_CALL_124| 1) 2) (= (select |v_#length_BEFORE_CALL_124| 3) 4))))) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| 0) (exists ((|v_#memory_$Pointer$.base_234| (Array Int (Array Int Int)))) (= (store |v_#memory_$Pointer$.base_234| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_$Pointer$.base_234| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8 (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8))) |#memory_$Pointer$.base|)))' at error location [2024-11-09 06:24:08,814 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2024-11-09 06:24:08,814 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-11-09 06:24:08,814 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 6, 6] total 21 [2024-11-09 06:24:08,815 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1656486802] [2024-11-09 06:24:08,815 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-11-09 06:24:08,815 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 21 states [2024-11-09 06:24:08,815 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-09 06:24:08,816 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2024-11-09 06:24:08,817 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=208, Invalid=1772, Unknown=0, NotChecked=0, Total=1980 [2024-11-09 06:24:08,817 INFO L87 Difference]: Start difference. First operand 233 states and 296 transitions. Second operand has 21 states, 16 states have (on average 2.625) internal successors, (42), 18 states have internal predecessors, (42), 2 states have call successors, (7), 2 states have call predecessors, (7), 5 states have return successors, (9), 4 states have call predecessors, (9), 2 states have call successors, (9) [2024-11-09 06:24:18,864 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 06:24:18,865 INFO L93 Difference]: Finished difference Result 253 states and 317 transitions. [2024-11-09 06:24:18,865 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2024-11-09 06:24:18,866 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 16 states have (on average 2.625) internal successors, (42), 18 states have internal predecessors, (42), 2 states have call successors, (7), 2 states have call predecessors, (7), 5 states have return successors, (9), 4 states have call predecessors, (9), 2 states have call successors, (9) Word has length 57 [2024-11-09 06:24:18,866 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 06:24:18,868 INFO L225 Difference]: With dead ends: 253 [2024-11-09 06:24:18,868 INFO L226 Difference]: Without dead ends: 241 [2024-11-09 06:24:18,869 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 196 GetRequests, 134 SyntacticMatches, 6 SemanticMatches, 56 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 769 ImplicationChecksByTransitivity, 17.2s TimeCoverageRelationStatistics Valid=368, Invalid=2935, Unknown=3, NotChecked=0, Total=3306 [2024-11-09 06:24:18,870 INFO L432 NwaCegarLoop]: 148 mSDtfsCounter, 30 mSDsluCounter, 1306 mSDsCounter, 0 mSdLazyCounter, 1302 mSolverCounterSat, 38 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 30 SdHoareTripleChecker+Valid, 1454 SdHoareTripleChecker+Invalid, 1340 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 38 IncrementalHoareTripleChecker+Valid, 1302 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.3s IncrementalHoareTripleChecker+Time [2024-11-09 06:24:18,870 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [30 Valid, 1454 Invalid, 1340 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [38 Valid, 1302 Invalid, 0 Unknown, 0 Unchecked, 2.3s Time] [2024-11-09 06:24:18,871 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 241 states. [2024-11-09 06:24:18,884 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 241 to 241. [2024-11-09 06:24:18,885 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 241 states, 143 states have (on average 1.8881118881118881) internal successors, (270), 223 states have internal predecessors, (270), 13 states have call successors, (13), 4 states have call predecessors, (13), 6 states have return successors, (21), 13 states have call predecessors, (21), 12 states have call successors, (21) [2024-11-09 06:24:18,890 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 241 states to 241 states and 304 transitions. [2024-11-09 06:24:18,894 INFO L78 Accepts]: Start accepts. Automaton has 241 states and 304 transitions. Word has length 57 [2024-11-09 06:24:18,894 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 06:24:18,895 INFO L471 AbstractCegarLoop]: Abstraction has 241 states and 304 transitions. [2024-11-09 06:24:18,895 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 21 states, 16 states have (on average 2.625) internal successors, (42), 18 states have internal predecessors, (42), 2 states have call successors, (7), 2 states have call predecessors, (7), 5 states have return successors, (9), 4 states have call predecessors, (9), 2 states have call successors, (9) [2024-11-09 06:24:18,895 INFO L276 IsEmpty]: Start isEmpty. Operand 241 states and 304 transitions. [2024-11-09 06:24:18,896 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2024-11-09 06:24:18,896 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 06:24:18,896 INFO L215 NwaCegarLoop]: trace histogram [15, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 06:24:18,916 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2024-11-09 06:24:19,097 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2024-11-09 06:24:19,098 INFO L396 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 86 more)] === [2024-11-09 06:24:19,098 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 06:24:19,098 INFO L85 PathProgramCache]: Analyzing trace with hash 2137839791, now seen corresponding path program 3 times [2024-11-09 06:24:19,099 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 06:24:19,099 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [779725500] [2024-11-09 06:24:19,099 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 06:24:19,099 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 06:24:19,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 06:24:21,032 INFO L134 CoverageAnalysis]: Checked inductivity of 270 backedges. 137 proven. 29 refuted. 0 times theorem prover too weak. 104 trivial. 0 not checked. [2024-11-09 06:24:21,033 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-09 06:24:21,033 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [779725500] [2024-11-09 06:24:21,033 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [779725500] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-09 06:24:21,033 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2089068770] [2024-11-09 06:24:21,034 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2024-11-09 06:24:21,034 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-09 06:24:21,034 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 [2024-11-09 06:24:21,036 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-09 06:24:21,037 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2024-11-09 06:24:21,529 INFO L227 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2024-11-09 06:24:21,529 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-09 06:24:21,535 INFO L255 TraceCheckSpWp]: Trace formula consists of 724 conjuncts, 45 conjuncts are in the unsatisfiable core [2024-11-09 06:24:21,540 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-09 06:24:21,554 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2024-11-09 06:24:21,560 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2024-11-09 06:24:30,415 WARN L873 $PredicateComparison]: unable to prove that (exists ((|zalloc_or_die_calloc_model_~ptr~0#1.base| Int)) (and (= (store |c_old(#length)| |zalloc_or_die_calloc_model_~ptr~0#1.base| (select |c_#length| |zalloc_or_die_calloc_model_~ptr~0#1.base|)) |c_#length|) (= (select |c_old(#valid)| |zalloc_or_die_calloc_model_~ptr~0#1.base|) 0))) is different from true [2024-11-09 06:24:30,640 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-11-09 06:24:30,641 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2024-11-09 06:24:30,652 INFO L349 Elim1Store]: treesize reduction 4, result has 50.0 percent of original size [2024-11-09 06:24:30,652 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 11 [2024-11-09 06:24:30,771 INFO L134 CoverageAnalysis]: Checked inductivity of 270 backedges. 137 proven. 28 refuted. 0 times theorem prover too weak. 94 trivial. 11 not checked. [2024-11-09 06:24:30,771 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-11-09 06:24:30,942 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2089068770] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-09 06:24:30,942 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [517818209] [2024-11-09 06:24:30,945 INFO L159 IcfgInterpreter]: Started Sifa with 26 locations of interest [2024-11-09 06:24:30,945 INFO L166 IcfgInterpreter]: Building call graph [2024-11-09 06:24:30,945 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2024-11-09 06:24:30,946 INFO L176 IcfgInterpreter]: Starting interpretation [2024-11-09 06:24:30,946 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2024-11-09 06:24:31,689 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 64 for LOIs [2024-11-09 06:24:31,904 INFO L180 IcfgInterpreter]: Interpretation finished [2024-11-09 06:24:45,801 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6421#(and (<= 1 |#StackHeapBarrier|) (exists ((|v_#memory_$Pointer$.base_249| (Array Int (Array Int Int)))) (= |#memory_$Pointer$.base| (store |v_#memory_$Pointer$.base_249| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_$Pointer$.base_249| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)))))) (= |~#list~0.offset| 0) (exists ((|v_zalloc_or_die_#Ultimate.C_memset_#res#1.offset_105| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#value#1_123| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#amount#1_118| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_189| Int)) (and (= |v_zalloc_or_die_#Ultimate.C_memset_#res#1.offset_105| 0) (= |v_zalloc_or_die_#Ultimate.C_memset_#value#1_123| 0) (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0) (<= 0 |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_189|) (<= (mod |v_zalloc_or_die_#Ultimate.C_memset_#amount#1_118| 4294967296) (mod |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_189| 4294967296)))) (= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= (select |#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1) (<= (select |#length| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|))) (+ 3 (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)))) (= 3 |~#list~0.base|) (exists ((|v_#memory_int_212| (Array Int (Array Int Int)))) (= |#memory_int| (store |v_#memory_int_212| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_int_212| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select (select |#memory_int| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)))))) (not (= 0 (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)))) (<= (+ 12 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (<= 0 (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) (exists ((|v_#memory_$Pointer$.offset_249| (Array Int (Array Int Int)))) (= |#memory_$Pointer$.offset| (store |v_#memory_$Pointer$.offset_249| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_$Pointer$.offset_249| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)))))))' at error location [2024-11-09 06:24:45,801 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2024-11-09 06:24:45,801 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-11-09 06:24:45,801 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 17] total 28 [2024-11-09 06:24:45,801 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [749357539] [2024-11-09 06:24:45,801 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-11-09 06:24:45,802 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2024-11-09 06:24:45,802 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-09 06:24:45,803 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2024-11-09 06:24:45,803 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=151, Invalid=2103, Unknown=6, NotChecked=92, Total=2352 [2024-11-09 06:24:45,804 INFO L87 Difference]: Start difference. First operand 241 states and 304 transitions. Second operand has 28 states, 23 states have (on average 2.0869565217391304) internal successors, (48), 23 states have internal predecessors, (48), 3 states have call successors, (7), 2 states have call predecessors, (7), 5 states have return successors, (8), 5 states have call predecessors, (8), 3 states have call successors, (8) [2024-11-09 06:24:49,793 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 06:24:49,793 INFO L93 Difference]: Finished difference Result 251 states and 324 transitions. [2024-11-09 06:24:49,794 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2024-11-09 06:24:49,794 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 23 states have (on average 2.0869565217391304) internal successors, (48), 23 states have internal predecessors, (48), 3 states have call successors, (7), 2 states have call predecessors, (7), 5 states have return successors, (8), 5 states have call predecessors, (8), 3 states have call successors, (8) Word has length 65 [2024-11-09 06:24:49,795 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 06:24:49,796 INFO L225 Difference]: With dead ends: 251 [2024-11-09 06:24:49,797 INFO L226 Difference]: Without dead ends: 247 [2024-11-09 06:24:49,798 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 156 GetRequests, 95 SyntacticMatches, 7 SemanticMatches, 54 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 913 ImplicationChecksByTransitivity, 24.0s TimeCoverageRelationStatistics Valid=218, Invalid=2750, Unknown=6, NotChecked=106, Total=3080 [2024-11-09 06:24:49,799 INFO L432 NwaCegarLoop]: 158 mSDtfsCounter, 7 mSDsluCounter, 1227 mSDsCounter, 0 mSdLazyCounter, 1886 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7 SdHoareTripleChecker+Valid, 1385 SdHoareTripleChecker+Invalid, 2087 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 1886 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 194 IncrementalHoareTripleChecker+Unchecked, 3.1s IncrementalHoareTripleChecker+Time [2024-11-09 06:24:49,799 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [7 Valid, 1385 Invalid, 2087 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 1886 Invalid, 0 Unknown, 194 Unchecked, 3.1s Time] [2024-11-09 06:24:49,800 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 247 states. [2024-11-09 06:24:49,808 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 247 to 243. [2024-11-09 06:24:49,809 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 243 states, 145 states have (on average 1.889655172413793) internal successors, (274), 225 states have internal predecessors, (274), 13 states have call successors, (13), 4 states have call predecessors, (13), 6 states have return successors, (21), 13 states have call predecessors, (21), 12 states have call successors, (21) [2024-11-09 06:24:49,811 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 243 states to 243 states and 308 transitions. [2024-11-09 06:24:49,811 INFO L78 Accepts]: Start accepts. Automaton has 243 states and 308 transitions. Word has length 65 [2024-11-09 06:24:49,811 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 06:24:49,812 INFO L471 AbstractCegarLoop]: Abstraction has 243 states and 308 transitions. [2024-11-09 06:24:49,812 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 23 states have (on average 2.0869565217391304) internal successors, (48), 23 states have internal predecessors, (48), 3 states have call successors, (7), 2 states have call predecessors, (7), 5 states have return successors, (8), 5 states have call predecessors, (8), 3 states have call successors, (8) [2024-11-09 06:24:49,812 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 308 transitions. [2024-11-09 06:24:49,813 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2024-11-09 06:24:49,813 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 06:24:49,813 INFO L215 NwaCegarLoop]: trace histogram [16, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 06:24:49,838 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2024-11-09 06:24:50,013 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-09 06:24:50,014 INFO L396 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 86 more)] === [2024-11-09 06:24:50,014 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 06:24:50,015 INFO L85 PathProgramCache]: Analyzing trace with hash -1449532314, now seen corresponding path program 4 times [2024-11-09 06:24:50,015 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 06:24:50,015 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [33219182] [2024-11-09 06:24:50,015 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 06:24:50,015 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 06:24:50,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 06:24:52,050 INFO L134 CoverageAnalysis]: Checked inductivity of 291 backedges. 149 proven. 38 refuted. 0 times theorem prover too weak. 104 trivial. 0 not checked. [2024-11-09 06:24:52,051 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-09 06:24:52,051 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [33219182] [2024-11-09 06:24:52,051 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [33219182] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-09 06:24:52,051 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [671562725] [2024-11-09 06:24:52,051 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2024-11-09 06:24:52,052 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-09 06:24:52,052 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 [2024-11-09 06:24:52,054 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-09 06:24:52,056 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2024-11-09 06:24:52,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 06:24:52,688 INFO L255 TraceCheckSpWp]: Trace formula consists of 739 conjuncts, 50 conjuncts are in the unsatisfiable core [2024-11-09 06:24:52,693 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-09 06:24:52,847 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2024-11-09 06:24:56,025 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 1 [2024-11-09 06:24:56,029 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2024-11-09 06:24:56,092 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 9 [2024-11-09 06:24:56,218 INFO L134 CoverageAnalysis]: Checked inductivity of 291 backedges. 132 proven. 36 refuted. 0 times theorem prover too weak. 123 trivial. 0 not checked. [2024-11-09 06:24:56,218 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-11-09 06:24:57,738 INFO L134 CoverageAnalysis]: Checked inductivity of 291 backedges. 100 proven. 10 refuted. 0 times theorem prover too weak. 181 trivial. 0 not checked. [2024-11-09 06:24:57,739 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [671562725] provided 0 perfect and 2 imperfect interpolant sequences [2024-11-09 06:24:57,739 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2142361213] [2024-11-09 06:24:57,741 INFO L159 IcfgInterpreter]: Started Sifa with 26 locations of interest [2024-11-09 06:24:57,741 INFO L166 IcfgInterpreter]: Building call graph [2024-11-09 06:24:57,742 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2024-11-09 06:24:57,742 INFO L176 IcfgInterpreter]: Starting interpretation [2024-11-09 06:24:57,742 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2024-11-09 06:24:58,788 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 64 for LOIs [2024-11-09 06:24:58,954 INFO L180 IcfgInterpreter]: Interpretation finished [2024-11-09 06:25:15,877 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7378#(and (<= 1 |#StackHeapBarrier|) (= |~#list~0.offset| 0) (exists ((|v_#memory_int_252| (Array Int (Array Int Int)))) (= |#memory_int| (store |v_#memory_int_252| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_int_252| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select (select |#memory_int| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)))))) (= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= (select |#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1) (<= (select |#length| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|))) (+ 3 (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)))) (= 3 |~#list~0.base|) (not (= 0 (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)))) (<= (+ 12 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (exists ((|v_#memory_$Pointer$.base_290| (Array Int (Array Int Int)))) (= |#memory_$Pointer$.base| (store |v_#memory_$Pointer$.base_290| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_$Pointer$.base_290| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)))))) (= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (<= 0 (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) (exists ((|v_zalloc_or_die_#Ultimate.C_memset_#value#1_155| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#amount#1_145| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_249| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#res#1.offset_130| Int)) (and (= (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0) (<= (mod |v_zalloc_or_die_#Ultimate.C_memset_#amount#1_145| 4294967296) (mod |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_249| 4294967296)) (= |v_zalloc_or_die_#Ultimate.C_memset_#res#1.offset_130| 0) (<= 0 |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_249|) (= |v_zalloc_or_die_#Ultimate.C_memset_#value#1_155| 0))) (exists ((|v_#memory_$Pointer$.offset_290| (Array Int (Array Int Int)))) (= |#memory_$Pointer$.offset| (store |v_#memory_$Pointer$.offset_290| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_$Pointer$.offset_290| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)))))))' at error location [2024-11-09 06:25:15,877 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2024-11-09 06:25:15,877 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-11-09 06:25:15,877 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 15, 11] total 39 [2024-11-09 06:25:15,878 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1389130198] [2024-11-09 06:25:15,878 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-11-09 06:25:15,878 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 39 states [2024-11-09 06:25:15,878 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-09 06:25:15,879 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 39 interpolants. [2024-11-09 06:25:15,880 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=192, Invalid=3112, Unknown=2, NotChecked=0, Total=3306 [2024-11-09 06:25:15,881 INFO L87 Difference]: Start difference. First operand 243 states and 308 transitions. Second operand has 39 states, 34 states have (on average 1.7647058823529411) internal successors, (60), 34 states have internal predecessors, (60), 2 states have call successors, (7), 2 states have call predecessors, (7), 5 states have return successors, (9), 5 states have call predecessors, (9), 2 states have call successors, (9) [2024-11-09 06:25:20,465 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 06:25:20,465 INFO L93 Difference]: Finished difference Result 264 states and 340 transitions. [2024-11-09 06:25:20,466 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2024-11-09 06:25:20,466 INFO L78 Accepts]: Start accepts. Automaton has has 39 states, 34 states have (on average 1.7647058823529411) internal successors, (60), 34 states have internal predecessors, (60), 2 states have call successors, (7), 2 states have call predecessors, (7), 5 states have return successors, (9), 5 states have call predecessors, (9), 2 states have call successors, (9) Word has length 66 [2024-11-09 06:25:20,467 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 06:25:20,469 INFO L225 Difference]: With dead ends: 264 [2024-11-09 06:25:20,469 INFO L226 Difference]: Without dead ends: 258 [2024-11-09 06:25:20,471 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 226 GetRequests, 150 SyntacticMatches, 6 SemanticMatches, 70 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1321 ImplicationChecksByTransitivity, 23.3s TimeCoverageRelationStatistics Valid=323, Invalid=4787, Unknown=2, NotChecked=0, Total=5112 [2024-11-09 06:25:20,471 INFO L432 NwaCegarLoop]: 155 mSDtfsCounter, 13 mSDsluCounter, 2499 mSDsCounter, 0 mSdLazyCounter, 2144 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 13 SdHoareTripleChecker+Valid, 2654 SdHoareTripleChecker+Invalid, 2158 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 2144 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.7s IncrementalHoareTripleChecker+Time [2024-11-09 06:25:20,472 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [13 Valid, 2654 Invalid, 2158 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 2144 Invalid, 0 Unknown, 0 Unchecked, 2.7s Time] [2024-11-09 06:25:20,473 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 258 states. [2024-11-09 06:25:20,486 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 258 to 244. [2024-11-09 06:25:20,487 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 244 states, 147 states have (on average 1.8775510204081634) internal successors, (276), 226 states have internal predecessors, (276), 13 states have call successors, (13), 4 states have call predecessors, (13), 6 states have return successors, (21), 13 states have call predecessors, (21), 12 states have call successors, (21) [2024-11-09 06:25:20,488 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 244 states to 244 states and 310 transitions. [2024-11-09 06:25:20,489 INFO L78 Accepts]: Start accepts. Automaton has 244 states and 310 transitions. Word has length 66 [2024-11-09 06:25:20,489 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 06:25:20,489 INFO L471 AbstractCegarLoop]: Abstraction has 244 states and 310 transitions. [2024-11-09 06:25:20,489 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 39 states, 34 states have (on average 1.7647058823529411) internal successors, (60), 34 states have internal predecessors, (60), 2 states have call successors, (7), 2 states have call predecessors, (7), 5 states have return successors, (9), 5 states have call predecessors, (9), 2 states have call successors, (9) [2024-11-09 06:25:20,489 INFO L276 IsEmpty]: Start isEmpty. Operand 244 states and 310 transitions. [2024-11-09 06:25:20,491 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2024-11-09 06:25:20,491 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 06:25:20,491 INFO L215 NwaCegarLoop]: trace histogram [17, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 06:25:20,521 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2024-11-09 06:25:20,695 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-09 06:25:20,696 INFO L396 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr8REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 86 more)] === [2024-11-09 06:25:20,696 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 06:25:20,696 INFO L85 PathProgramCache]: Analyzing trace with hash -1162017637, now seen corresponding path program 1 times [2024-11-09 06:25:20,696 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 06:25:20,697 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1642848090] [2024-11-09 06:25:20,697 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 06:25:20,697 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 06:25:20,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 06:25:21,713 INFO L134 CoverageAnalysis]: Checked inductivity of 313 backedges. 178 proven. 55 refuted. 0 times theorem prover too weak. 80 trivial. 0 not checked. [2024-11-09 06:25:21,713 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-09 06:25:21,713 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1642848090] [2024-11-09 06:25:21,714 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1642848090] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-09 06:25:21,714 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1231498149] [2024-11-09 06:25:21,714 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 06:25:21,714 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-09 06:25:21,714 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 [2024-11-09 06:25:21,716 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-09 06:25:21,721 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2024-11-09 06:25:22,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 06:25:22,146 INFO L255 TraceCheckSpWp]: Trace formula consists of 786 conjuncts, 31 conjuncts are in the unsatisfiable core [2024-11-09 06:25:22,151 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-09 06:25:22,252 WARN L873 $PredicateComparison]: unable to prove that (exists ((|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (and (= |c_#valid| (store |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| (select |c_#valid| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|))) (= (select |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 0))) is different from true [2024-11-09 06:25:22,329 INFO L349 Elim1Store]: treesize reduction 20, result has 33.3 percent of original size [2024-11-09 06:25:22,330 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 16 [2024-11-09 06:25:22,377 WARN L873 $PredicateComparison]: unable to prove that (exists ((|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (= (store |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| 1) |c_#valid|)) is different from true [2024-11-09 06:25:22,406 INFO L349 Elim1Store]: treesize reduction 15, result has 25.0 percent of original size [2024-11-09 06:25:22,407 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 14 [2024-11-09 06:25:22,431 INFO L134 CoverageAnalysis]: Checked inductivity of 313 backedges. 161 proven. 1 refuted. 0 times theorem prover too weak. 80 trivial. 71 not checked. [2024-11-09 06:25:22,431 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-11-09 06:25:22,791 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1231498149] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-09 06:25:22,791 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [49980047] [2024-11-09 06:25:22,793 INFO L159 IcfgInterpreter]: Started Sifa with 28 locations of interest [2024-11-09 06:25:22,794 INFO L166 IcfgInterpreter]: Building call graph [2024-11-09 06:25:22,794 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2024-11-09 06:25:22,794 INFO L176 IcfgInterpreter]: Starting interpretation [2024-11-09 06:25:22,794 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2024-11-09 06:25:23,627 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 64 for LOIs [2024-11-09 06:25:23,846 INFO L180 IcfgInterpreter]: Interpretation finished [2024-11-09 06:25:30,227 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8208#(and (<= 1 |#StackHeapBarrier|) (= |~#list~0.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= (select |#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1) (= 3 |~#list~0.base|) (<= (+ 12 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (not (= (select |#valid| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 1)) (<= 0 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (exists ((|v_zalloc_or_die_#Ultimate.C_memset_#amount#1_158| Int) (|v_#memory_int_280| (Array Int (Array Int Int))) (|v_#memory_$Pointer$.base_319| (Array Int (Array Int Int))) (|v_#memory_int_281| (Array Int (Array Int Int))) (|v_#memory_$Pointer$.base_318| (Array Int (Array Int Int))) (|v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_280| Int) (|v_#memory_$Pointer$.offset_318| (Array Int (Array Int Int))) (|v_#memory_$Pointer$.offset_319| (Array Int (Array Int Int))) (|v_zalloc_or_die_#Ultimate.C_memset_#res#1.offset_143| Int) (|v_#memory_int_282| (Array Int (Array Int Int))) (|v_zalloc_or_die_#Ultimate.C_memset_#value#1_171| Int)) (and (= (select |#valid| (select (select |v_#memory_$Pointer$.base_319| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|))) 1) (= (store |v_#memory_int_280| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_int_280| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select (select |v_#memory_int_281| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)))) |v_#memory_int_281|) (<= (mod |v_zalloc_or_die_#Ultimate.C_memset_#amount#1_158| 4294967296) (mod |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_280| 4294967296)) (= (store |v_#memory_$Pointer$.offset_318| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_$Pointer$.offset_318| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) 0)) |v_#memory_$Pointer$.offset_319|) (= (store (store |v_#memory_$Pointer$.base_319| (select (select |v_#memory_$Pointer$.base_319| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) (store (select |v_#memory_$Pointer$.base_319| (select (select |v_#memory_$Pointer$.base_319| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|))) 0 |ULTIMATE.start_l4_insert_~item~0#1.base|)) |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select (store |v_#memory_$Pointer$.base_319| (select (select |v_#memory_$Pointer$.base_319| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) (store (select |v_#memory_$Pointer$.base_319| (select (select |v_#memory_$Pointer$.base_319| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|))) 0 |ULTIMATE.start_l4_insert_~item~0#1.base|)) |ULTIMATE.start_l4_insert_~item~0#1.base|) |ULTIMATE.start_l4_insert_~item~0#1.offset| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) |ULTIMATE.start_l4_insert_~item~0#1.offset|))) |#memory_$Pointer$.base|) (= |v_#memory_$Pointer$.base_319| (store |v_#memory_$Pointer$.base_318| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_$Pointer$.base_318| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select (select |v_#memory_$Pointer$.base_319| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|))))) (= (store |v_#memory_int_282| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_int_282| |ULTIMATE.start_l4_insert_~item~0#1.base|) |ULTIMATE.start_l4_insert_~item~0#1.offset| (select (select |#memory_int| |ULTIMATE.start_l4_insert_~item~0#1.base|) |ULTIMATE.start_l4_insert_~item~0#1.offset|))) |#memory_int|) (<= 4 (select |#length| (select (select |v_#memory_$Pointer$.base_319| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)))) (= |#memory_$Pointer$.offset| (store (store |v_#memory_$Pointer$.offset_319| (select (select |v_#memory_$Pointer$.base_319| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) (store (select |v_#memory_$Pointer$.offset_319| (select (select |v_#memory_$Pointer$.base_319| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|))) 0 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select (store |v_#memory_$Pointer$.offset_319| (select (select |v_#memory_$Pointer$.base_319| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) (store (select |v_#memory_$Pointer$.offset_319| (select (select |v_#memory_$Pointer$.base_319| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|))) 0 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) |ULTIMATE.start_l4_insert_~item~0#1.base|) |ULTIMATE.start_l4_insert_~item~0#1.offset| |ULTIMATE.start_l4_insert_~list#1.offset|))) (not (= (select (select |v_#memory_$Pointer$.base_319| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0)) (<= 0 |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_280|) (= |v_zalloc_or_die_#Ultimate.C_memset_#res#1.offset_143| 0) (= |v_zalloc_or_die_#Ultimate.C_memset_#value#1_171| 0) (= (store |v_#memory_int_281| (select (select |v_#memory_$Pointer$.base_319| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) (store (select |v_#memory_int_281| (select (select |v_#memory_$Pointer$.base_319| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|))) 0 (select (select |v_#memory_int_282| (select (select |v_#memory_$Pointer$.base_319| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|))) 0))) |v_#memory_int_282|))))' at error location [2024-11-09 06:25:30,227 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2024-11-09 06:25:30,227 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-11-09 06:25:30,227 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 11] total 16 [2024-11-09 06:25:30,227 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1162495501] [2024-11-09 06:25:30,228 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-11-09 06:25:30,228 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2024-11-09 06:25:30,228 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-09 06:25:30,229 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2024-11-09 06:25:30,229 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=133, Invalid=1355, Unknown=2, NotChecked=150, Total=1640 [2024-11-09 06:25:30,229 INFO L87 Difference]: Start difference. First operand 244 states and 310 transitions. Second operand has 17 states, 13 states have (on average 3.923076923076923) internal successors, (51), 15 states have internal predecessors, (51), 2 states have call successors, (6), 2 states have call predecessors, (6), 6 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) [2024-11-09 06:25:31,083 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 06:25:31,084 INFO L93 Difference]: Finished difference Result 240 states and 302 transitions. [2024-11-09 06:25:31,084 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2024-11-09 06:25:31,084 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 13 states have (on average 3.923076923076923) internal successors, (51), 15 states have internal predecessors, (51), 2 states have call successors, (6), 2 states have call predecessors, (6), 6 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) Word has length 69 [2024-11-09 06:25:31,084 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 06:25:31,086 INFO L225 Difference]: With dead ends: 240 [2024-11-09 06:25:31,086 INFO L226 Difference]: Without dead ends: 240 [2024-11-09 06:25:31,087 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 173 GetRequests, 120 SyntacticMatches, 10 SemanticMatches, 43 ConstructedPredicates, 2 IntricatePredicates, 0 DeprecatedPredicates, 461 ImplicationChecksByTransitivity, 6.9s TimeCoverageRelationStatistics Valid=167, Invalid=1645, Unknown=2, NotChecked=166, Total=1980 [2024-11-09 06:25:31,087 INFO L432 NwaCegarLoop]: 135 mSDtfsCounter, 27 mSDsluCounter, 967 mSDsCounter, 0 mSdLazyCounter, 962 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 27 SdHoareTripleChecker+Valid, 1102 SdHoareTripleChecker+Invalid, 1329 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 962 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 349 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2024-11-09 06:25:31,088 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [27 Valid, 1102 Invalid, 1329 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 962 Invalid, 0 Unknown, 349 Unchecked, 0.7s Time] [2024-11-09 06:25:31,088 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 240 states. [2024-11-09 06:25:31,094 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 240 to 240. [2024-11-09 06:25:31,095 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 240 states, 147 states have (on average 1.8231292517006803) internal successors, (268), 222 states have internal predecessors, (268), 13 states have call successors, (13), 4 states have call predecessors, (13), 6 states have return successors, (21), 13 states have call predecessors, (21), 12 states have call successors, (21) [2024-11-09 06:25:31,096 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 240 states to 240 states and 302 transitions. [2024-11-09 06:25:31,096 INFO L78 Accepts]: Start accepts. Automaton has 240 states and 302 transitions. Word has length 69 [2024-11-09 06:25:31,097 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 06:25:31,097 INFO L471 AbstractCegarLoop]: Abstraction has 240 states and 302 transitions. [2024-11-09 06:25:31,097 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 13 states have (on average 3.923076923076923) internal successors, (51), 15 states have internal predecessors, (51), 2 states have call successors, (6), 2 states have call predecessors, (6), 6 states have return successors, (8), 3 states have call predecessors, (8), 2 states have call successors, (8) [2024-11-09 06:25:31,097 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 302 transitions. [2024-11-09 06:25:31,098 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2024-11-09 06:25:31,098 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 06:25:31,099 INFO L215 NwaCegarLoop]: trace histogram [17, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 06:25:31,121 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2024-11-09 06:25:31,302 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-09 06:25:31,303 INFO L396 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 86 more)] === [2024-11-09 06:25:31,303 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 06:25:31,303 INFO L85 PathProgramCache]: Analyzing trace with hash -1162017636, now seen corresponding path program 1 times [2024-11-09 06:25:31,303 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 06:25:31,303 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [214339314] [2024-11-09 06:25:31,303 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 06:25:31,303 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 06:25:31,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 06:25:33,019 INFO L134 CoverageAnalysis]: Checked inductivity of 313 backedges. 161 proven. 48 refuted. 0 times theorem prover too weak. 104 trivial. 0 not checked. [2024-11-09 06:25:33,020 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-09 06:25:33,020 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [214339314] [2024-11-09 06:25:33,020 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [214339314] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-09 06:25:33,020 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [545727466] [2024-11-09 06:25:33,020 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 06:25:33,021 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-09 06:25:33,021 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 [2024-11-09 06:25:33,022 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-09 06:25:33,023 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2024-11-09 06:25:33,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 06:25:33,596 INFO L255 TraceCheckSpWp]: Trace formula consists of 786 conjuncts, 75 conjuncts are in the unsatisfiable core [2024-11-09 06:25:33,600 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-09 06:25:33,731 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2024-11-09 06:25:41,120 WARN L873 $PredicateComparison]: unable to prove that (exists ((|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (and (= (store |c_old(#length)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| (select |c_#length| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|)) |c_#length|) (= (select |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 0))) is different from true [2024-11-09 06:25:41,579 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-11-09 06:25:41,580 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 9 [2024-11-09 06:25:41,590 INFO L349 Elim1Store]: treesize reduction 4, result has 50.0 percent of original size [2024-11-09 06:25:41,590 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 11 [2024-11-09 06:25:41,646 INFO L134 CoverageAnalysis]: Checked inductivity of 313 backedges. 119 proven. 139 refuted. 0 times theorem prover too weak. 52 trivial. 3 not checked. [2024-11-09 06:25:41,646 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-11-09 06:25:41,924 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [545727466] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-09 06:25:41,924 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [566509934] [2024-11-09 06:25:41,926 INFO L159 IcfgInterpreter]: Started Sifa with 28 locations of interest [2024-11-09 06:25:41,926 INFO L166 IcfgInterpreter]: Building call graph [2024-11-09 06:25:41,927 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2024-11-09 06:25:41,927 INFO L176 IcfgInterpreter]: Starting interpretation [2024-11-09 06:25:41,927 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2024-11-09 06:25:44,671 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 64 for LOIs [2024-11-09 06:25:44,863 INFO L180 IcfgInterpreter]: Interpretation finished [2024-11-09 06:26:29,536 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8979#(and (= 8 |ULTIMATE.start_l3_insert_~list#1.offset|) (<= 1 |#StackHeapBarrier|) (= |~#list~0.offset| 0) (= |ULTIMATE.start_l4_insert_~item~0#1.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.base| 3) (<= 12 (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (= (select |#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1) (= 3 |~#list~0.base|) (= |ULTIMATE.start_l1_insert_~list#1.offset| 8) (= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (exists ((|v_#memory_$Pointer$.offset_336| (Array Int (Array Int Int))) (|v_#memory_$Pointer$.base_337| (Array Int (Array Int Int))) (|v_#memory_$Pointer$.base_336| (Array Int (Array Int Int))) (|v_#memory_int_298| (Array Int (Array Int Int))) (|v_#memory_int_299| (Array Int (Array Int Int))) (|v_#memory_int_300| (Array Int (Array Int Int)))) (and (= (select |#valid| (select (select |v_#memory_$Pointer$.base_337| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8)) 1) (or (and (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (exists ((|v_#memory_$Pointer$.offset_BEFORE_CALL_238| (Array Int (Array Int Int)))) (= (select (select |v_#memory_$Pointer$.offset_BEFORE_CALL_238| 3) 0) 0)) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (exists ((|v_#length_BEFORE_CALL_246| (Array Int Int))) (and (= (select |v_#length_BEFORE_CALL_246| 3) 4) (= 12 (select |v_#length_BEFORE_CALL_246| 2)) (= (select |v_#length_BEFORE_CALL_246| 1) 2))) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l2_insert_~item~2#1.base|) (exists ((|v_old(#memory_int)_AFTER_CALL_154| (Array Int (Array Int Int)))) (and (= (select (select |v_old(#memory_int)_AFTER_CALL_154| 1) 1) 0) (= (select (select |v_old(#memory_int)_AFTER_CALL_154| 1) 0) 48))) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (exists ((|v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_315| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#amount#1_173| Int)) (and (or (< 0 |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_315|) (= |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_315| 0)) (<= (mod |v_zalloc_or_die_#Ultimate.C_memset_#amount#1_173| 4294967296) (mod |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_315| 4294967296)))) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l1_insert_~item~3#1.base|) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l0_insert_~item~4#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (not (= 0 (select (select |v_#memory_$Pointer$.base_337| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8))) (= |ULTIMATE.start_l3_insert_~item~1#1.base| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) 0)) (exists ((|v_#memory_$Pointer$.base_BEFORE_CALL_238| (Array Int (Array Int Int)))) (= (select (select |v_#memory_$Pointer$.base_BEFORE_CALL_238| 3) 0) 0))) (and (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (exists ((|v_#length_BEFORE_CALL_248| (Array Int Int))) (and (= (select |v_#length_BEFORE_CALL_248| 3) 4) (= 12 (select |v_#length_BEFORE_CALL_248| 2)) (= (select |v_#length_BEFORE_CALL_248| 1) 2))) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (exists ((|v_#memory_$Pointer$.offset_BEFORE_CALL_240| (Array Int (Array Int Int)))) (= (select (select |v_#memory_$Pointer$.offset_BEFORE_CALL_240| 3) 0) 0)) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l2_insert_~item~2#1.base|) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (exists ((|v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_315| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#amount#1_173| Int)) (and (or (< 0 |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_315|) (= |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_315| 0)) (<= (mod |v_zalloc_or_die_#Ultimate.C_memset_#amount#1_173| 4294967296) (mod |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_315| 4294967296)))) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l1_insert_~item~3#1.base|) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l0_insert_~item~4#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (not (= 0 (select (select |v_#memory_$Pointer$.base_337| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8))) (exists ((|v_#memory_$Pointer$.base_BEFORE_CALL_240| (Array Int (Array Int Int)))) (= (select (select |v_#memory_$Pointer$.base_BEFORE_CALL_240| 3) 0) 0)) (exists ((|v_old(#memory_int)_AFTER_CALL_155| (Array Int (Array Int Int)))) (and (= 48 (select (select |v_old(#memory_int)_AFTER_CALL_155| 1) 0)) (= (select (select |v_old(#memory_int)_AFTER_CALL_155| 1) 1) 0))) (= |ULTIMATE.start_l3_insert_~item~1#1.base| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) 0)))) (= (store |v_#memory_$Pointer$.base_336| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_$Pointer$.base_336| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8 (select (select |v_#memory_$Pointer$.base_337| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8))) |v_#memory_$Pointer$.base_337|) (= |#memory_$Pointer$.offset| (store (store |v_#memory_$Pointer$.offset_336| (select (select |v_#memory_$Pointer$.base_337| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8) (store (select (store |v_#memory_$Pointer$.offset_336| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_$Pointer$.offset_336| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8 0)) (select (select |v_#memory_$Pointer$.base_337| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8)) 0 0)) |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select (store (store |v_#memory_$Pointer$.offset_336| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_$Pointer$.offset_336| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8 0)) (select (select |v_#memory_$Pointer$.base_337| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8) (store (select (store |v_#memory_$Pointer$.offset_336| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_$Pointer$.offset_336| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8 0)) (select (select |v_#memory_$Pointer$.base_337| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8)) 0 0)) |ULTIMATE.start_l4_insert_~item~0#1.base|) 0 0))) (= (store (store |v_#memory_$Pointer$.base_337| (select (select |v_#memory_$Pointer$.base_337| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8) (store (select |v_#memory_$Pointer$.base_337| (select (select |v_#memory_$Pointer$.base_337| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8)) 0 |ULTIMATE.start_l4_insert_~item~0#1.base|)) |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select (store |v_#memory_$Pointer$.base_337| (select (select |v_#memory_$Pointer$.base_337| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8) (store (select |v_#memory_$Pointer$.base_337| (select (select |v_#memory_$Pointer$.base_337| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8)) 0 |ULTIMATE.start_l4_insert_~item~0#1.base|)) |ULTIMATE.start_l4_insert_~item~0#1.base|) 0 (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) 0))) |#memory_$Pointer$.base|) (<= 4 (select |#length| (select (select |v_#memory_$Pointer$.base_337| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8))) (= |#memory_int| (store |v_#memory_int_300| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_int_300| |ULTIMATE.start_l4_insert_~item~0#1.base|) 0 (select (select |#memory_int| |ULTIMATE.start_l4_insert_~item~0#1.base|) 0)))) (= (store |v_#memory_int_299| (select (select |v_#memory_$Pointer$.base_337| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8) (store (select |v_#memory_int_299| (select (select |v_#memory_$Pointer$.base_337| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8)) 0 (select (select |v_#memory_int_300| (select (select |v_#memory_$Pointer$.base_337| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8)) 0))) |v_#memory_int_300|) (= (store |v_#memory_int_298| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_int_298| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8 (select (select |v_#memory_int_299| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8))) |v_#memory_int_299|))) (= |ULTIMATE.start_l0_insert_~item~4#1.offset| 0) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| 0) (= |ULTIMATE.start_l2_insert_~item~2#1.offset| 0) (<= (select |#length| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) 0)) 3) (= |ULTIMATE.start_l2_insert_~list#1.offset| 0) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| 0))' at error location [2024-11-09 06:26:29,536 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2024-11-09 06:26:29,536 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-11-09 06:26:29,536 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 24] total 37 [2024-11-09 06:26:29,537 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1780728327] [2024-11-09 06:26:29,537 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-11-09 06:26:29,538 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 37 states [2024-11-09 06:26:29,538 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-09 06:26:29,539 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 37 interpolants. [2024-11-09 06:26:29,540 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=300, Invalid=3728, Unknown=8, NotChecked=124, Total=4160 [2024-11-09 06:26:29,540 INFO L87 Difference]: Start difference. First operand 240 states and 302 transitions. Second operand has 37 states, 32 states have (on average 1.84375) internal successors, (59), 32 states have internal predecessors, (59), 3 states have call successors, (7), 2 states have call predecessors, (7), 5 states have return successors, (8), 5 states have call predecessors, (8), 3 states have call successors, (8) [2024-11-09 06:26:31,582 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2024-11-09 06:26:35,812 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 06:26:35,812 INFO L93 Difference]: Finished difference Result 260 states and 347 transitions. [2024-11-09 06:26:35,813 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2024-11-09 06:26:35,813 INFO L78 Accepts]: Start accepts. Automaton has has 37 states, 32 states have (on average 1.84375) internal successors, (59), 32 states have internal predecessors, (59), 3 states have call successors, (7), 2 states have call predecessors, (7), 5 states have return successors, (8), 5 states have call predecessors, (8), 3 states have call successors, (8) Word has length 69 [2024-11-09 06:26:35,814 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 06:26:35,815 INFO L225 Difference]: With dead ends: 260 [2024-11-09 06:26:35,815 INFO L226 Difference]: Without dead ends: 256 [2024-11-09 06:26:35,817 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 172 GetRequests, 91 SyntacticMatches, 8 SemanticMatches, 73 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 1798 ImplicationChecksByTransitivity, 54.9s TimeCoverageRelationStatistics Valid=395, Invalid=5003, Unknown=8, NotChecked=144, Total=5550 [2024-11-09 06:26:35,818 INFO L432 NwaCegarLoop]: 157 mSDtfsCounter, 15 mSDsluCounter, 1244 mSDsCounter, 0 mSdLazyCounter, 1448 mSolverCounterSat, 14 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 1401 SdHoareTripleChecker+Invalid, 1673 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 1448 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 210 IncrementalHoareTripleChecker+Unchecked, 4.0s IncrementalHoareTripleChecker+Time [2024-11-09 06:26:35,818 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 1401 Invalid, 1673 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 1448 Invalid, 1 Unknown, 210 Unchecked, 4.0s Time] [2024-11-09 06:26:35,819 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 256 states. [2024-11-09 06:26:35,832 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 256 to 242. [2024-11-09 06:26:35,833 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 242 states, 149 states have (on average 1.825503355704698) internal successors, (272), 224 states have internal predecessors, (272), 13 states have call successors, (13), 4 states have call predecessors, (13), 6 states have return successors, (21), 13 states have call predecessors, (21), 12 states have call successors, (21) [2024-11-09 06:26:35,835 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 242 states to 242 states and 306 transitions. [2024-11-09 06:26:35,835 INFO L78 Accepts]: Start accepts. Automaton has 242 states and 306 transitions. Word has length 69 [2024-11-09 06:26:35,835 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 06:26:35,836 INFO L471 AbstractCegarLoop]: Abstraction has 242 states and 306 transitions. [2024-11-09 06:26:35,836 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 37 states, 32 states have (on average 1.84375) internal successors, (59), 32 states have internal predecessors, (59), 3 states have call successors, (7), 2 states have call predecessors, (7), 5 states have return successors, (8), 5 states have call predecessors, (8), 3 states have call successors, (8) [2024-11-09 06:26:35,836 INFO L276 IsEmpty]: Start isEmpty. Operand 242 states and 306 transitions. [2024-11-09 06:26:35,837 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2024-11-09 06:26:35,837 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 06:26:35,837 INFO L215 NwaCegarLoop]: trace histogram [18, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 06:26:35,862 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Forceful destruction successful, exit code 0 [2024-11-09 06:26:36,038 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2024-11-09 06:26:36,038 INFO L396 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 86 more)] === [2024-11-09 06:26:36,039 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 06:26:36,039 INFO L85 PathProgramCache]: Analyzing trace with hash -1417716525, now seen corresponding path program 2 times [2024-11-09 06:26:36,039 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 06:26:36,039 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1172527599] [2024-11-09 06:26:36,039 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 06:26:36,039 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 06:26:36,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 06:26:37,897 INFO L134 CoverageAnalysis]: Checked inductivity of 336 backedges. 173 proven. 59 refuted. 0 times theorem prover too weak. 104 trivial. 0 not checked. [2024-11-09 06:26:37,897 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-09 06:26:37,897 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1172527599] [2024-11-09 06:26:37,897 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1172527599] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-09 06:26:37,897 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [578901477] [2024-11-09 06:26:37,897 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-11-09 06:26:37,898 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-09 06:26:37,898 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 [2024-11-09 06:26:37,899 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-09 06:26:37,900 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2024-11-09 06:26:38,365 INFO L227 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2024-11-09 06:26:38,365 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-09 06:26:38,368 INFO L255 TraceCheckSpWp]: Trace formula consists of 393 conjuncts, 67 conjuncts are in the unsatisfiable core [2024-11-09 06:26:38,373 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-09 06:26:38,385 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2024-11-09 06:26:39,328 WARN L873 $PredicateComparison]: unable to prove that (exists ((|v_zalloc_or_die_calloc_model_~size#1_261| Int) (|v_zalloc_or_die_calloc_model_~nmemb#1_261| Int)) (let ((.cse1 (* |v_zalloc_or_die_calloc_model_~size#1_261| |v_zalloc_or_die_calloc_model_~nmemb#1_261|))) (let ((.cse0 (mod .cse1 4294967296))) (and (= (store |c_old(#length)| |c_zalloc_or_die_#res#1.base| .cse0) |c_#length|) (<= |c_zalloc_or_die_#in~size#1| |v_zalloc_or_die_calloc_model_~size#1_261|) (<= .cse0 4) (<= .cse1 (select |c_#length| |c_zalloc_or_die_#res#1.base|)) (<= 1 |v_zalloc_or_die_calloc_model_~nmemb#1_261|))))) is different from true [2024-11-09 06:26:39,346 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-11-09 06:26:39,349 INFO L349 Elim1Store]: treesize reduction 23, result has 4.2 percent of original size [2024-11-09 06:26:39,349 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 16 treesize of output 1 [2024-11-09 06:26:39,350 INFO L134 CoverageAnalysis]: Checked inductivity of 336 backedges. 173 proven. 47 refuted. 0 times theorem prover too weak. 115 trivial. 1 not checked. [2024-11-09 06:26:39,351 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-11-09 06:26:40,525 INFO L134 CoverageAnalysis]: Checked inductivity of 336 backedges. 110 proven. 10 refuted. 0 times theorem prover too weak. 216 trivial. 0 not checked. [2024-11-09 06:26:40,525 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [578901477] provided 0 perfect and 2 imperfect interpolant sequences [2024-11-09 06:26:40,525 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1955453054] [2024-11-09 06:26:40,527 INFO L159 IcfgInterpreter]: Started Sifa with 28 locations of interest [2024-11-09 06:26:40,528 INFO L166 IcfgInterpreter]: Building call graph [2024-11-09 06:26:40,528 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2024-11-09 06:26:40,528 INFO L176 IcfgInterpreter]: Starting interpretation [2024-11-09 06:26:40,529 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2024-11-09 06:26:41,417 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 64 for LOIs [2024-11-09 06:26:41,554 INFO L180 IcfgInterpreter]: Interpretation finished [2024-11-09 06:26:51,047 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9980#(and (<= 1 |#StackHeapBarrier|) (= |~#list~0.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= (select |#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1) (= 3 |~#list~0.base|) (<= (+ 12 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (or (< (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) |ULTIMATE.start_l4_insert_~item~0#1.offset|) 0) (< (select |#length| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) |ULTIMATE.start_l4_insert_~item~0#1.offset|)) (+ (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) |ULTIMATE.start_l4_insert_~item~0#1.offset|) 4))) (exists ((|v_#memory_$Pointer$.base_383| (Array Int (Array Int Int))) (|v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_369| Int) (|v_#memory_$Pointer$.base_382| (Array Int (Array Int Int))) (|v_#memory_int_346| (Array Int (Array Int Int))) (|v_#memory_int_345| (Array Int (Array Int Int))) (|v_#memory_$Pointer$.offset_382| (Array Int (Array Int Int))) (|v_#memory_$Pointer$.offset_383| (Array Int (Array Int Int))) (|v_#memory_int_344| (Array Int (Array Int Int))) (|v_zalloc_or_die_#Ultimate.C_memset_#res#1.offset_173| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#value#1_209| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#amount#1_196| Int)) (and (= (select |#valid| (select (select |v_#memory_$Pointer$.base_383| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|))) 1) (not (= (select (select |v_#memory_$Pointer$.base_383| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0)) (<= (mod |v_zalloc_or_die_#Ultimate.C_memset_#amount#1_196| 4294967296) (mod |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_369| 4294967296)) (= |#memory_$Pointer$.offset| (store (store |v_#memory_$Pointer$.offset_383| (select (select |v_#memory_$Pointer$.base_383| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) (store (select |v_#memory_$Pointer$.offset_383| (select (select |v_#memory_$Pointer$.base_383| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|))) 0 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select (store |v_#memory_$Pointer$.offset_383| (select (select |v_#memory_$Pointer$.base_383| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) (store (select |v_#memory_$Pointer$.offset_383| (select (select |v_#memory_$Pointer$.base_383| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|))) 0 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) |ULTIMATE.start_l4_insert_~item~0#1.base|) |ULTIMATE.start_l4_insert_~item~0#1.offset| (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) |ULTIMATE.start_l4_insert_~item~0#1.offset|)))) (= |v_zalloc_or_die_#Ultimate.C_memset_#res#1.offset_173| 0) (<= 4 (select |#length| (select (select |v_#memory_$Pointer$.base_383| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)))) (= (store |v_#memory_$Pointer$.offset_382| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_$Pointer$.offset_382| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) 0)) |v_#memory_$Pointer$.offset_383|) (= (store |v_#memory_$Pointer$.base_382| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_$Pointer$.base_382| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select (select |v_#memory_$Pointer$.base_383| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)))) |v_#memory_$Pointer$.base_383|) (= (store |v_#memory_int_344| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_int_344| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select (select |v_#memory_int_345| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)))) |v_#memory_int_345|) (= (store |v_#memory_int_345| (select (select |v_#memory_$Pointer$.base_383| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) (store (select |v_#memory_int_345| (select (select |v_#memory_$Pointer$.base_383| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|))) 0 (select (select |v_#memory_int_346| (select (select |v_#memory_$Pointer$.base_383| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|))) 0))) |v_#memory_int_346|) (<= 0 |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_369|) (= |#memory_int| (store |v_#memory_int_346| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_int_346| |ULTIMATE.start_l4_insert_~item~0#1.base|) |ULTIMATE.start_l4_insert_~item~0#1.offset| (select (select |#memory_int| |ULTIMATE.start_l4_insert_~item~0#1.base|) |ULTIMATE.start_l4_insert_~item~0#1.offset|)))) (= (store (store |v_#memory_$Pointer$.base_383| (select (select |v_#memory_$Pointer$.base_383| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) (store (select |v_#memory_$Pointer$.base_383| (select (select |v_#memory_$Pointer$.base_383| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|))) 0 |ULTIMATE.start_l4_insert_~item~0#1.base|)) |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select (store |v_#memory_$Pointer$.base_383| (select (select |v_#memory_$Pointer$.base_383| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) (store (select |v_#memory_$Pointer$.base_383| (select (select |v_#memory_$Pointer$.base_383| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|))) 0 |ULTIMATE.start_l4_insert_~item~0#1.base|)) |ULTIMATE.start_l4_insert_~item~0#1.base|) |ULTIMATE.start_l4_insert_~item~0#1.offset| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) |ULTIMATE.start_l4_insert_~item~0#1.offset|))) |#memory_$Pointer$.base|) (= |v_zalloc_or_die_#Ultimate.C_memset_#value#1_209| 0))) (<= 0 |ULTIMATE.start_l4_insert_~item~0#1.offset|))' at error location [2024-11-09 06:26:51,048 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2024-11-09 06:26:51,048 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-11-09 06:26:51,048 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 14, 10] total 37 [2024-11-09 06:26:51,048 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [865838907] [2024-11-09 06:26:51,048 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-11-09 06:26:51,049 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 37 states [2024-11-09 06:26:51,049 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-09 06:26:51,050 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 37 interpolants. [2024-11-09 06:26:51,051 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=204, Invalid=2989, Unknown=3, NotChecked=110, Total=3306 [2024-11-09 06:26:51,052 INFO L87 Difference]: Start difference. First operand 242 states and 306 transitions. Second operand has 37 states, 30 states have (on average 2.033333333333333) internal successors, (61), 31 states have internal predecessors, (61), 3 states have call successors, (8), 3 states have call predecessors, (8), 6 states have return successors, (10), 6 states have call predecessors, (10), 3 states have call successors, (10) [2024-11-09 06:27:01,983 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 06:27:01,983 INFO L93 Difference]: Finished difference Result 272 states and 350 transitions. [2024-11-09 06:27:01,983 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2024-11-09 06:27:01,984 INFO L78 Accepts]: Start accepts. Automaton has has 37 states, 30 states have (on average 2.033333333333333) internal successors, (61), 31 states have internal predecessors, (61), 3 states have call successors, (8), 3 states have call predecessors, (8), 6 states have return successors, (10), 6 states have call predecessors, (10), 3 states have call successors, (10) Word has length 70 [2024-11-09 06:27:01,984 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 06:27:01,985 INFO L225 Difference]: With dead ends: 272 [2024-11-09 06:27:01,986 INFO L226 Difference]: Without dead ends: 260 [2024-11-09 06:27:01,990 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 251 GetRequests, 164 SyntacticMatches, 6 SemanticMatches, 81 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 1662 ImplicationChecksByTransitivity, 18.7s TimeCoverageRelationStatistics Valid=659, Invalid=5984, Unknown=3, NotChecked=160, Total=6806 [2024-11-09 06:27:01,991 INFO L432 NwaCegarLoop]: 143 mSDtfsCounter, 57 mSDsluCounter, 2163 mSDsCounter, 0 mSdLazyCounter, 2145 mSolverCounterSat, 39 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 2306 SdHoareTripleChecker+Invalid, 2402 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 39 IncrementalHoareTripleChecker+Valid, 2145 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 218 IncrementalHoareTripleChecker+Unchecked, 3.4s IncrementalHoareTripleChecker+Time [2024-11-09 06:27:01,991 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [57 Valid, 2306 Invalid, 2402 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [39 Valid, 2145 Invalid, 0 Unknown, 218 Unchecked, 3.4s Time] [2024-11-09 06:27:01,992 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 260 states. [2024-11-09 06:27:02,000 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 260 to 256. [2024-11-09 06:27:02,001 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 256 states, 163 states have (on average 1.7546012269938651) internal successors, (286), 238 states have internal predecessors, (286), 13 states have call successors, (13), 4 states have call predecessors, (13), 6 states have return successors, (21), 13 states have call predecessors, (21), 12 states have call successors, (21) [2024-11-09 06:27:02,002 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 320 transitions. [2024-11-09 06:27:02,003 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 320 transitions. Word has length 70 [2024-11-09 06:27:02,003 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 06:27:02,003 INFO L471 AbstractCegarLoop]: Abstraction has 256 states and 320 transitions. [2024-11-09 06:27:02,003 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 37 states, 30 states have (on average 2.033333333333333) internal successors, (61), 31 states have internal predecessors, (61), 3 states have call successors, (8), 3 states have call predecessors, (8), 6 states have return successors, (10), 6 states have call predecessors, (10), 3 states have call successors, (10) [2024-11-09 06:27:02,004 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 320 transitions. [2024-11-09 06:27:02,004 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 78 [2024-11-09 06:27:02,004 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 06:27:02,005 INFO L215 NwaCegarLoop]: trace histogram [25, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 06:27:02,029 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Forceful destruction successful, exit code 0 [2024-11-09 06:27:02,205 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2024-11-09 06:27:02,206 INFO L396 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 86 more)] === [2024-11-09 06:27:02,206 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 06:27:02,206 INFO L85 PathProgramCache]: Analyzing trace with hash 2013538588, now seen corresponding path program 3 times [2024-11-09 06:27:02,206 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 06:27:02,206 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1064083364] [2024-11-09 06:27:02,206 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 06:27:02,206 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 06:27:02,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 06:27:04,430 INFO L134 CoverageAnalysis]: Checked inductivity of 525 backedges. 257 proven. 119 refuted. 0 times theorem prover too weak. 149 trivial. 0 not checked. [2024-11-09 06:27:04,430 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-09 06:27:04,430 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1064083364] [2024-11-09 06:27:04,431 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1064083364] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-09 06:27:04,431 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1496485366] [2024-11-09 06:27:04,431 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2024-11-09 06:27:04,431 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-09 06:27:04,431 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 [2024-11-09 06:27:04,432 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-09 06:27:04,433 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2024-11-09 06:27:05,781 INFO L227 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2024-11-09 06:27:05,781 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-09 06:27:05,789 INFO L255 TraceCheckSpWp]: Trace formula consists of 906 conjuncts, 75 conjuncts are in the unsatisfiable core [2024-11-09 06:27:05,796 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-09 06:27:05,939 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2024-11-09 06:27:05,959 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2024-11-09 06:27:21,864 WARN L873 $PredicateComparison]: unable to prove that (exists ((|zalloc_or_die_calloc_model_~ptr~0#1.base| Int)) (and (= (store |c_old(#length)| |zalloc_or_die_calloc_model_~ptr~0#1.base| (select |c_#length| |zalloc_or_die_calloc_model_~ptr~0#1.base|)) |c_#length|) (= (select |c_old(#valid)| |zalloc_or_die_calloc_model_~ptr~0#1.base|) 0))) is different from true [2024-11-09 06:27:22,627 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-11-09 06:27:22,629 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2024-11-09 06:27:22,704 INFO L349 Elim1Store]: treesize reduction 4, result has 50.0 percent of original size [2024-11-09 06:27:22,704 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 11 [2024-11-09 06:27:22,875 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-11-09 06:27:22,876 INFO L134 CoverageAnalysis]: Checked inductivity of 525 backedges. 230 proven. 171 refuted. 0 times theorem prover too weak. 61 trivial. 63 not checked. [2024-11-09 06:27:22,876 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-11-09 06:27:23,091 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1496485366] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-09 06:27:23,091 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1899282930] [2024-11-09 06:27:23,093 INFO L159 IcfgInterpreter]: Started Sifa with 28 locations of interest [2024-11-09 06:27:23,094 INFO L166 IcfgInterpreter]: Building call graph [2024-11-09 06:27:23,094 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2024-11-09 06:27:23,094 INFO L176 IcfgInterpreter]: Starting interpretation [2024-11-09 06:27:23,094 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2024-11-09 06:27:23,922 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 64 for LOIs [2024-11-09 06:27:24,082 INFO L180 IcfgInterpreter]: Interpretation finished [2024-11-09 06:27:48,905 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10871#(and (<= 1 |#StackHeapBarrier|) (= |~#list~0.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.base| 3) (= (select |#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1) (= 3 |~#list~0.base|) (exists ((|v_#memory_$Pointer$.base_407| (Array Int (Array Int Int))) (|v_#memory_int_368| (Array Int (Array Int Int))) (|v_#memory_$Pointer$.base_406| (Array Int (Array Int Int))) (|v_#memory_$Pointer$.offset_406| (Array Int (Array Int Int))) (|v_zalloc_or_die_#Ultimate.C_memset_#res#1.offset_182| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#amount#1_206| Int) (|v_#memory_$Pointer$.offset_407| (Array Int (Array Int Int))) (|v_#memory_int_369| (Array Int (Array Int Int))) (|v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_408| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#value#1_219| Int) (|v_#memory_int_370| (Array Int (Array Int Int)))) (and (= |v_zalloc_or_die_#Ultimate.C_memset_#value#1_219| 0) (<= 0 |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_408|) (= (store |v_#memory_int_370| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_int_370| |ULTIMATE.start_l4_insert_~item~0#1.base|) |ULTIMATE.start_l4_insert_~item~0#1.offset| (select (select |#memory_int| |ULTIMATE.start_l4_insert_~item~0#1.base|) |ULTIMATE.start_l4_insert_~item~0#1.offset|))) |#memory_int|) (not (= (select (select |v_#memory_$Pointer$.base_407| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0)) (<= (mod |v_zalloc_or_die_#Ultimate.C_memset_#amount#1_206| 4294967296) (mod |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_408| 4294967296)) (= |#memory_$Pointer$.offset| (store (store |v_#memory_$Pointer$.offset_407| (select (select |v_#memory_$Pointer$.base_407| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) (store (select |v_#memory_$Pointer$.offset_407| (select (select |v_#memory_$Pointer$.base_407| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|))) 0 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select (store |v_#memory_$Pointer$.offset_407| (select (select |v_#memory_$Pointer$.base_407| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) (store (select |v_#memory_$Pointer$.offset_407| (select (select |v_#memory_$Pointer$.base_407| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|))) 0 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) |ULTIMATE.start_l4_insert_~item~0#1.base|) |ULTIMATE.start_l4_insert_~item~0#1.offset| (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) |ULTIMATE.start_l4_insert_~item~0#1.offset|)))) (<= 4 (select |#length| (select (select |v_#memory_$Pointer$.base_407| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)))) (= |v_#memory_$Pointer$.offset_407| (store |v_#memory_$Pointer$.offset_406| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_$Pointer$.offset_406| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) 0))) (= |v_#memory_int_369| (store |v_#memory_int_368| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_int_368| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select (select |v_#memory_int_369| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|))))) (= (store |v_#memory_$Pointer$.base_406| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_$Pointer$.base_406| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select (select |v_#memory_$Pointer$.base_407| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)))) |v_#memory_$Pointer$.base_407|) (= |#memory_$Pointer$.base| (store (store |v_#memory_$Pointer$.base_407| (select (select |v_#memory_$Pointer$.base_407| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) (store (select |v_#memory_$Pointer$.base_407| (select (select |v_#memory_$Pointer$.base_407| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|))) 0 |ULTIMATE.start_l4_insert_~item~0#1.base|)) |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select (store |v_#memory_$Pointer$.base_407| (select (select |v_#memory_$Pointer$.base_407| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) (store (select |v_#memory_$Pointer$.base_407| (select (select |v_#memory_$Pointer$.base_407| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|))) 0 |ULTIMATE.start_l4_insert_~item~0#1.base|)) |ULTIMATE.start_l4_insert_~item~0#1.base|) |ULTIMATE.start_l4_insert_~item~0#1.offset| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) |ULTIMATE.start_l4_insert_~item~0#1.offset|)))) (= (store |v_#memory_int_369| (select (select |v_#memory_$Pointer$.base_407| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) (store (select |v_#memory_int_369| (select (select |v_#memory_$Pointer$.base_407| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|))) 0 (select (select |v_#memory_int_370| (select (select |v_#memory_$Pointer$.base_407| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|))) 0))) |v_#memory_int_370|) (= |v_zalloc_or_die_#Ultimate.C_memset_#res#1.offset_182| 0) (= (select |#valid| (select (select |v_#memory_$Pointer$.base_407| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|))) 1))) (<= (+ 12 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (or (< (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) |ULTIMATE.start_l4_insert_~item~0#1.offset|) 0) (< (select |#length| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) |ULTIMATE.start_l4_insert_~item~0#1.offset|)) (+ (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) |ULTIMATE.start_l4_insert_~item~0#1.offset|) 4))) (<= 0 |ULTIMATE.start_l4_insert_~item~0#1.offset|))' at error location [2024-11-09 06:27:48,905 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2024-11-09 06:27:48,905 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-11-09 06:27:48,906 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 29] total 44 [2024-11-09 06:27:48,906 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [316532584] [2024-11-09 06:27:48,906 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-11-09 06:27:48,906 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 44 states [2024-11-09 06:27:48,907 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-09 06:27:48,907 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 44 interpolants. [2024-11-09 06:27:48,909 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=224, Invalid=4061, Unknown=9, NotChecked=128, Total=4422 [2024-11-09 06:27:48,909 INFO L87 Difference]: Start difference. First operand 256 states and 320 transitions. Second operand has 44 states, 38 states have (on average 1.8421052631578947) internal successors, (70), 38 states have internal predecessors, (70), 3 states have call successors, (7), 2 states have call predecessors, (7), 6 states have return successors, (9), 6 states have call predecessors, (9), 3 states have call successors, (9) [2024-11-09 06:27:55,120 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 06:27:55,120 INFO L93 Difference]: Finished difference Result 266 states and 340 transitions. [2024-11-09 06:27:55,120 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2024-11-09 06:27:55,120 INFO L78 Accepts]: Start accepts. Automaton has has 44 states, 38 states have (on average 1.8421052631578947) internal successors, (70), 38 states have internal predecessors, (70), 3 states have call successors, (7), 2 states have call predecessors, (7), 6 states have return successors, (9), 6 states have call predecessors, (9), 3 states have call successors, (9) Word has length 77 [2024-11-09 06:27:55,121 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 06:27:55,123 INFO L225 Difference]: With dead ends: 266 [2024-11-09 06:27:55,124 INFO L226 Difference]: Without dead ends: 262 [2024-11-09 06:27:55,126 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 193 GetRequests, 107 SyntacticMatches, 6 SemanticMatches, 80 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 1994 ImplicationChecksByTransitivity, 43.6s TimeCoverageRelationStatistics Valid=371, Invalid=6104, Unknown=9, NotChecked=158, Total=6642 [2024-11-09 06:27:55,127 INFO L432 NwaCegarLoop]: 148 mSDtfsCounter, 30 mSDsluCounter, 1870 mSDsCounter, 0 mSdLazyCounter, 2783 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 2018 SdHoareTripleChecker+Invalid, 2992 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 2783 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 195 IncrementalHoareTripleChecker+Unchecked, 4.4s IncrementalHoareTripleChecker+Time [2024-11-09 06:27:55,127 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 2018 Invalid, 2992 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 2783 Invalid, 0 Unknown, 195 Unchecked, 4.4s Time] [2024-11-09 06:27:55,128 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 262 states. [2024-11-09 06:27:55,137 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 262 to 258. [2024-11-09 06:27:55,138 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 258 states, 165 states have (on average 1.7575757575757576) internal successors, (290), 240 states have internal predecessors, (290), 13 states have call successors, (13), 4 states have call predecessors, (13), 6 states have return successors, (21), 13 states have call predecessors, (21), 12 states have call successors, (21) [2024-11-09 06:27:55,140 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 258 states to 258 states and 324 transitions. [2024-11-09 06:27:55,140 INFO L78 Accepts]: Start accepts. Automaton has 258 states and 324 transitions. Word has length 77 [2024-11-09 06:27:55,140 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 06:27:55,140 INFO L471 AbstractCegarLoop]: Abstraction has 258 states and 324 transitions. [2024-11-09 06:27:55,141 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 44 states, 38 states have (on average 1.8421052631578947) internal successors, (70), 38 states have internal predecessors, (70), 3 states have call successors, (7), 2 states have call predecessors, (7), 6 states have return successors, (9), 6 states have call predecessors, (9), 3 states have call successors, (9) [2024-11-09 06:27:55,141 INFO L276 IsEmpty]: Start isEmpty. Operand 258 states and 324 transitions. [2024-11-09 06:27:55,142 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 79 [2024-11-09 06:27:55,142 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 06:27:55,142 INFO L215 NwaCegarLoop]: trace histogram [26, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 06:27:55,179 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Ended with exit code 0 [2024-11-09 06:27:55,343 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2024-11-09 06:27:55,343 INFO L396 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 86 more)] === [2024-11-09 06:27:55,344 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 06:27:55,344 INFO L85 PathProgramCache]: Analyzing trace with hash -408790445, now seen corresponding path program 4 times [2024-11-09 06:27:55,344 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 06:27:55,344 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [569520951] [2024-11-09 06:27:55,344 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 06:27:55,344 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 06:27:55,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 06:27:57,758 INFO L134 CoverageAnalysis]: Checked inductivity of 556 backedges. 269 proven. 138 refuted. 0 times theorem prover too weak. 149 trivial. 0 not checked. [2024-11-09 06:27:57,758 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-09 06:27:57,758 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [569520951] [2024-11-09 06:27:57,759 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [569520951] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-09 06:27:57,759 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [12303553] [2024-11-09 06:27:57,759 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2024-11-09 06:27:57,759 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-09 06:27:57,759 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 [2024-11-09 06:27:57,760 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-09 06:27:57,761 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2024-11-09 06:27:58,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 06:27:58,863 INFO L255 TraceCheckSpWp]: Trace formula consists of 921 conjuncts, 73 conjuncts are in the unsatisfiable core [2024-11-09 06:27:58,867 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-09 06:27:58,891 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2024-11-09 06:28:17,742 WARN L873 $PredicateComparison]: unable to prove that (exists ((|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (and (= (store |c_old(#length)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| (select |c_#length| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|)) |c_#length|) (= (select |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 0))) is different from true [2024-11-09 06:28:18,804 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-11-09 06:28:18,805 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2024-11-09 06:28:18,816 INFO L349 Elim1Store]: treesize reduction 4, result has 50.0 percent of original size [2024-11-09 06:28:18,816 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 11 [2024-11-09 06:28:19,029 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-11-09 06:28:19,031 INFO L134 CoverageAnalysis]: Checked inductivity of 556 backedges. 269 proven. 190 refuted. 0 times theorem prover too weak. 94 trivial. 3 not checked. [2024-11-09 06:28:19,031 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-11-09 06:28:19,343 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [12303553] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-09 06:28:19,343 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [716356645] [2024-11-09 06:28:19,345 INFO L159 IcfgInterpreter]: Started Sifa with 28 locations of interest [2024-11-09 06:28:19,345 INFO L166 IcfgInterpreter]: Building call graph [2024-11-09 06:28:19,346 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2024-11-09 06:28:19,346 INFO L176 IcfgInterpreter]: Starting interpretation [2024-11-09 06:28:19,346 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2024-11-09 06:28:20,089 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 64 for LOIs [2024-11-09 06:28:20,226 INFO L180 IcfgInterpreter]: Interpretation finished [2024-11-09 06:28:52,941 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11743#(and (<= 1 |#StackHeapBarrier|) (= |~#list~0.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.base| 3) (exists ((|v_zalloc_or_die_#Ultimate.C_memset_#res#1.offset_191| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#value#1_229| Int) (|v_#memory_$Pointer$.base_431| (Array Int (Array Int Int))) (|v_#memory_int_393| (Array Int (Array Int Int))) (|v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_453| Int) (|v_#memory_$Pointer$.offset_430| (Array Int (Array Int Int))) (|v_#memory_$Pointer$.offset_431| (Array Int (Array Int Int))) (|v_zalloc_or_die_#Ultimate.C_memset_#amount#1_220| Int) (|v_#memory_$Pointer$.base_430| (Array Int (Array Int Int))) (|v_#memory_int_392| (Array Int (Array Int Int))) (|v_#memory_int_394| (Array Int (Array Int Int)))) (and (= (select |#valid| (select (select |v_#memory_$Pointer$.base_431| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|))) 1) (not (= (select (select |v_#memory_$Pointer$.base_431| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) 0)) (<= 0 |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_453|) (= (store |v_#memory_$Pointer$.base_430| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_$Pointer$.base_430| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select (select |v_#memory_$Pointer$.base_431| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)))) |v_#memory_$Pointer$.base_431|) (= |#memory_int| (store |v_#memory_int_394| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_int_394| |ULTIMATE.start_l4_insert_~item~0#1.base|) |ULTIMATE.start_l4_insert_~item~0#1.offset| (select (select |#memory_int| |ULTIMATE.start_l4_insert_~item~0#1.base|) |ULTIMATE.start_l4_insert_~item~0#1.offset|)))) (= (store |v_#memory_int_393| (select (select |v_#memory_$Pointer$.base_431| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) (store (select |v_#memory_int_393| (select (select |v_#memory_$Pointer$.base_431| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|))) 0 (select (select |v_#memory_int_394| (select (select |v_#memory_$Pointer$.base_431| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|))) 0))) |v_#memory_int_394|) (= |#memory_$Pointer$.offset| (store (store |v_#memory_$Pointer$.offset_431| (select (select |v_#memory_$Pointer$.base_431| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) (store (select |v_#memory_$Pointer$.offset_431| (select (select |v_#memory_$Pointer$.base_431| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|))) 0 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select (store |v_#memory_$Pointer$.offset_431| (select (select |v_#memory_$Pointer$.base_431| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) (store (select |v_#memory_$Pointer$.offset_431| (select (select |v_#memory_$Pointer$.base_431| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|))) 0 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) |ULTIMATE.start_l4_insert_~item~0#1.base|) |ULTIMATE.start_l4_insert_~item~0#1.offset| (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) |ULTIMATE.start_l4_insert_~item~0#1.offset|)))) (<= 4 (select |#length| (select (select |v_#memory_$Pointer$.base_431| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)))) (= (store |v_#memory_$Pointer$.offset_430| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_$Pointer$.offset_430| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) 0)) |v_#memory_$Pointer$.offset_431|) (= |v_zalloc_or_die_#Ultimate.C_memset_#res#1.offset_191| 0) (= (store (store |v_#memory_$Pointer$.base_431| (select (select |v_#memory_$Pointer$.base_431| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) (store (select |v_#memory_$Pointer$.base_431| (select (select |v_#memory_$Pointer$.base_431| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|))) 0 |ULTIMATE.start_l4_insert_~item~0#1.base|)) |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select (store |v_#memory_$Pointer$.base_431| (select (select |v_#memory_$Pointer$.base_431| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)) (store (select |v_#memory_$Pointer$.base_431| (select (select |v_#memory_$Pointer$.base_431| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|))) 0 |ULTIMATE.start_l4_insert_~item~0#1.base|)) |ULTIMATE.start_l4_insert_~item~0#1.base|) |ULTIMATE.start_l4_insert_~item~0#1.offset| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) |ULTIMATE.start_l4_insert_~item~0#1.offset|))) |#memory_$Pointer$.base|) (= |v_zalloc_or_die_#Ultimate.C_memset_#value#1_229| 0) (<= (mod |v_zalloc_or_die_#Ultimate.C_memset_#amount#1_220| 4294967296) (mod |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_453| 4294967296)) (= (store |v_#memory_int_392| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_int_392| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select (select |v_#memory_int_393| |ULTIMATE.start_l4_insert_~item~0#1.base|) (+ 8 |ULTIMATE.start_l4_insert_~item~0#1.offset|)))) |v_#memory_int_393|))) (= (select |#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1) (= 3 |~#list~0.base|) (<= (+ 12 |ULTIMATE.start_l4_insert_~item~0#1.offset|) (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (or (< (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) |ULTIMATE.start_l4_insert_~item~0#1.offset|) 0) (< (select |#length| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) |ULTIMATE.start_l4_insert_~item~0#1.offset|)) (+ (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l4_insert_~item~0#1.base|) |ULTIMATE.start_l4_insert_~item~0#1.offset|) 4))) (<= 0 |ULTIMATE.start_l4_insert_~item~0#1.offset|))' at error location [2024-11-09 06:28:52,941 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2024-11-09 06:28:52,942 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-11-09 06:28:52,942 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 30] total 46 [2024-11-09 06:28:52,942 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [855639706] [2024-11-09 06:28:52,942 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-11-09 06:28:52,943 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 46 states [2024-11-09 06:28:52,943 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-09 06:28:52,945 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 46 interpolants. [2024-11-09 06:28:52,947 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=216, Invalid=4332, Unknown=12, NotChecked=132, Total=4692 [2024-11-09 06:28:52,948 INFO L87 Difference]: Start difference. First operand 258 states and 324 transitions. Second operand has 46 states, 41 states have (on average 1.6097560975609757) internal successors, (66), 41 states have internal predecessors, (66), 3 states have call successors, (7), 2 states have call predecessors, (7), 5 states have return successors, (8), 5 states have call predecessors, (8), 3 states have call successors, (8) [2024-11-09 06:28:55,051 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2024-11-09 06:29:05,549 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.18s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2024-11-09 06:29:05,596 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 06:29:05,596 INFO L93 Difference]: Finished difference Result 278 states and 370 transitions. [2024-11-09 06:29:05,597 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2024-11-09 06:29:05,597 INFO L78 Accepts]: Start accepts. Automaton has has 46 states, 41 states have (on average 1.6097560975609757) internal successors, (66), 41 states have internal predecessors, (66), 3 states have call successors, (7), 2 states have call predecessors, (7), 5 states have return successors, (8), 5 states have call predecessors, (8), 3 states have call successors, (8) Word has length 78 [2024-11-09 06:29:05,597 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 06:29:05,599 INFO L225 Difference]: With dead ends: 278 [2024-11-09 06:29:05,599 INFO L226 Difference]: Without dead ends: 274 [2024-11-09 06:29:05,600 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 197 GetRequests, 109 SyntacticMatches, 7 SemanticMatches, 81 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 2024 ImplicationChecksByTransitivity, 56.2s TimeCoverageRelationStatistics Valid=380, Invalid=6253, Unknown=13, NotChecked=160, Total=6806 [2024-11-09 06:29:05,601 INFO L432 NwaCegarLoop]: 153 mSDtfsCounter, 25 mSDsluCounter, 1782 mSDsCounter, 0 mSdLazyCounter, 3037 mSolverCounterSat, 7 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 25 SdHoareTripleChecker+Valid, 1935 SdHoareTripleChecker+Invalid, 3256 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 3037 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 210 IncrementalHoareTripleChecker+Unchecked, 9.3s IncrementalHoareTripleChecker+Time [2024-11-09 06:29:05,601 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [25 Valid, 1935 Invalid, 3256 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 3037 Invalid, 2 Unknown, 210 Unchecked, 9.3s Time] [2024-11-09 06:29:05,602 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 274 states. [2024-11-09 06:29:05,610 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 274 to 260. [2024-11-09 06:29:05,611 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 260 states, 167 states have (on average 1.7604790419161678) internal successors, (294), 242 states have internal predecessors, (294), 13 states have call successors, (13), 4 states have call predecessors, (13), 6 states have return successors, (21), 13 states have call predecessors, (21), 12 states have call successors, (21) [2024-11-09 06:29:05,612 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 328 transitions. [2024-11-09 06:29:05,613 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 328 transitions. Word has length 78 [2024-11-09 06:29:05,613 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 06:29:05,613 INFO L471 AbstractCegarLoop]: Abstraction has 260 states and 328 transitions. [2024-11-09 06:29:05,614 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 46 states, 41 states have (on average 1.6097560975609757) internal successors, (66), 41 states have internal predecessors, (66), 3 states have call successors, (7), 2 states have call predecessors, (7), 5 states have return successors, (8), 5 states have call predecessors, (8), 3 states have call successors, (8) [2024-11-09 06:29:05,614 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 328 transitions. [2024-11-09 06:29:05,614 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2024-11-09 06:29:05,615 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 06:29:05,615 INFO L215 NwaCegarLoop]: trace histogram [27, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 06:29:05,639 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Forceful destruction successful, exit code 0 [2024-11-09 06:29:05,815 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2024-11-09 06:29:05,816 INFO L396 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 86 more)] === [2024-11-09 06:29:05,816 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 06:29:05,816 INFO L85 PathProgramCache]: Analyzing trace with hash 1808420860, now seen corresponding path program 5 times [2024-11-09 06:29:05,816 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 06:29:05,816 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1917331019] [2024-11-09 06:29:05,816 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 06:29:05,816 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 06:29:05,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 06:29:08,020 INFO L134 CoverageAnalysis]: Checked inductivity of 588 backedges. 281 proven. 158 refuted. 0 times theorem prover too weak. 149 trivial. 0 not checked. [2024-11-09 06:29:08,020 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-09 06:29:08,020 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1917331019] [2024-11-09 06:29:08,020 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1917331019] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-09 06:29:08,021 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1061410736] [2024-11-09 06:29:08,021 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-11-09 06:29:08,021 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-09 06:29:08,021 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 [2024-11-09 06:29:08,022 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-09 06:29:08,023 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2024-11-09 06:29:09,020 INFO L227 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2024-11-09 06:29:09,020 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-09 06:29:09,025 INFO L255 TraceCheckSpWp]: Trace formula consists of 559 conjuncts, 73 conjuncts are in the unsatisfiable core [2024-11-09 06:29:09,030 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-09 06:29:09,043 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2024-11-09 06:29:09,649 INFO L349 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2024-11-09 06:29:09,649 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 14 treesize of output 13 [2024-11-09 06:29:09,672 INFO L349 Elim1Store]: treesize reduction 15, result has 25.0 percent of original size [2024-11-09 06:29:09,672 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 14 [2024-11-09 06:29:09,842 WARN L873 $PredicateComparison]: unable to prove that (exists ((|zalloc_or_die_calloc_model_~ptr~0#1.base| Int)) (and (= (store |c_old(#length)| |zalloc_or_die_calloc_model_~ptr~0#1.base| (select |c_#length| |zalloc_or_die_calloc_model_~ptr~0#1.base|)) |c_#length|) (= (select |c_old(#valid)| |zalloc_or_die_calloc_model_~ptr~0#1.base|) 0))) is different from true [2024-11-09 06:29:09,940 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-11-09 06:29:09,941 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2024-11-09 06:29:09,972 INFO L349 Elim1Store]: treesize reduction 16, result has 36.0 percent of original size [2024-11-09 06:29:09,972 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 16 treesize of output 18 [2024-11-09 06:29:10,105 INFO L134 CoverageAnalysis]: Checked inductivity of 588 backedges. 251 proven. 33 refuted. 0 times theorem prover too weak. 155 trivial. 149 not checked. [2024-11-09 06:29:10,105 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-11-09 06:29:10,451 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1061410736] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-09 06:29:10,451 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1094823808] [2024-11-09 06:29:10,453 INFO L159 IcfgInterpreter]: Started Sifa with 28 locations of interest [2024-11-09 06:29:10,453 INFO L166 IcfgInterpreter]: Building call graph [2024-11-09 06:29:10,453 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2024-11-09 06:29:10,454 INFO L176 IcfgInterpreter]: Starting interpretation [2024-11-09 06:29:10,454 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2024-11-09 06:29:12,334 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 64 for LOIs [2024-11-09 06:29:12,440 INFO L180 IcfgInterpreter]: Interpretation finished [2024-11-09 06:29:30,394 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '12620#(and (= 8 |ULTIMATE.start_l3_insert_~list#1.offset|) (<= 1 |#StackHeapBarrier|) (= |~#list~0.offset| 0) (= |ULTIMATE.start_l4_insert_~item~0#1.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.base| 3) (<= 12 (select |#length| |ULTIMATE.start_l4_insert_~item~0#1.base|)) (= (select |#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1) (= 3 |~#list~0.base|) (= |ULTIMATE.start_l1_insert_~list#1.offset| 8) (= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (= |ULTIMATE.start_l0_insert_~item~4#1.offset| 0) (= |ULTIMATE.start_l1_insert_~item~3#1.offset| 0) (exists ((|v_#memory_int_416| (Array Int (Array Int Int))) (|v_#memory_int_418| (Array Int (Array Int Int))) (|v_#memory_int_417| (Array Int (Array Int Int))) (|v_#memory_$Pointer$.base_455| (Array Int (Array Int Int))) (|v_#memory_$Pointer$.base_454| (Array Int (Array Int Int))) (|v_#memory_$Pointer$.offset_454| (Array Int (Array Int Int)))) (and (= (store |v_#memory_int_416| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_int_416| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8 (select (select |v_#memory_int_417| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8))) |v_#memory_int_417|) (<= 4 (select |#length| (select (select |v_#memory_$Pointer$.base_455| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8))) (= (store |v_#memory_int_417| (select (select |v_#memory_$Pointer$.base_455| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8) (store (select |v_#memory_int_417| (select (select |v_#memory_$Pointer$.base_455| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8)) 0 (select (select |v_#memory_int_418| (select (select |v_#memory_$Pointer$.base_455| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8)) 0))) |v_#memory_int_418|) (= |#memory_int| (store |v_#memory_int_418| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_int_418| |ULTIMATE.start_l4_insert_~item~0#1.base|) 0 (select (select |#memory_int| |ULTIMATE.start_l4_insert_~item~0#1.base|) 0)))) (= |#memory_$Pointer$.base| (store (store |v_#memory_$Pointer$.base_455| (select (select |v_#memory_$Pointer$.base_455| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8) (store (select |v_#memory_$Pointer$.base_455| (select (select |v_#memory_$Pointer$.base_455| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8)) 0 |ULTIMATE.start_l4_insert_~item~0#1.base|)) |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select (store |v_#memory_$Pointer$.base_455| (select (select |v_#memory_$Pointer$.base_455| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8) (store (select |v_#memory_$Pointer$.base_455| (select (select |v_#memory_$Pointer$.base_455| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8)) 0 |ULTIMATE.start_l4_insert_~item~0#1.base|)) |ULTIMATE.start_l4_insert_~item~0#1.base|) 0 (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) 0)))) (= |#memory_$Pointer$.offset| (store (store |v_#memory_$Pointer$.offset_454| (select (select |v_#memory_$Pointer$.base_455| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8) (store (select (store |v_#memory_$Pointer$.offset_454| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_$Pointer$.offset_454| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8 0)) (select (select |v_#memory_$Pointer$.base_455| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8)) 0 0)) |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select (store (store |v_#memory_$Pointer$.offset_454| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_$Pointer$.offset_454| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8 0)) (select (select |v_#memory_$Pointer$.base_455| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8) (store (select (store |v_#memory_$Pointer$.offset_454| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_$Pointer$.offset_454| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8 0)) (select (select |v_#memory_$Pointer$.base_455| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8)) 0 0)) |ULTIMATE.start_l4_insert_~item~0#1.base|) 0 0))) (= (select |#valid| (select (select |v_#memory_$Pointer$.base_455| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8)) 1) (= (store |v_#memory_$Pointer$.base_454| |ULTIMATE.start_l4_insert_~item~0#1.base| (store (select |v_#memory_$Pointer$.base_454| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8 (select (select |v_#memory_$Pointer$.base_455| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8))) |v_#memory_$Pointer$.base_455|) (or (and (exists ((|v_#length_BEFORE_CALL_377| (Array Int Int))) (and (= (select |v_#length_BEFORE_CALL_377| 2) 12) (= (select |v_#length_BEFORE_CALL_377| 3) 4) (= 2 (select |v_#length_BEFORE_CALL_377| 1)))) (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (exists ((|v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_477| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#amount#1_229| Int)) (and (<= (mod |v_zalloc_or_die_#Ultimate.C_memset_#amount#1_229| 4294967296) (mod |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_477| 4294967296)) (or (< 0 |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_477|) (= |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_477| 0)))) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l2_insert_~item~2#1.base|) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (exists ((|v_#memory_$Pointer$.base_BEFORE_CALL_358| (Array Int (Array Int Int)))) (= (select (select |v_#memory_$Pointer$.base_BEFORE_CALL_358| 3) 0) 0)) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l1_insert_~item~3#1.base|) (not (= (select (select |v_#memory_$Pointer$.base_455| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8) 0)) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l0_insert_~item~4#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (exists ((|v_#memory_$Pointer$.offset_BEFORE_CALL_358| (Array Int (Array Int Int)))) (= (select (select |v_#memory_$Pointer$.offset_BEFORE_CALL_358| 3) 0) 0)) (= |ULTIMATE.start_l3_insert_~item~1#1.base| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) 0)) (exists ((|v_old(#memory_int)_AFTER_CALL_226| (Array Int (Array Int Int)))) (and (= (select (select |v_old(#memory_int)_AFTER_CALL_226| 1) 1) 0) (= (select (select |v_old(#memory_int)_AFTER_CALL_226| 1) 0) 48)))) (and (not (= |ULTIMATE.start_l1_insert_~item~3#1.base| 0)) (not (= |ULTIMATE.start_l4_insert_~item~0#1.base| 0)) (exists ((|v_#length_BEFORE_CALL_379| (Array Int Int))) (and (= 4 (select |v_#length_BEFORE_CALL_379| 3)) (= 2 (select |v_#length_BEFORE_CALL_379| 1)) (= 12 (select |v_#length_BEFORE_CALL_379| 2)))) (not (= |ULTIMATE.start_l2_insert_~item~2#1.base| 0)) (exists ((|v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_477| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#amount#1_229| Int)) (and (<= (mod |v_zalloc_or_die_#Ultimate.C_memset_#amount#1_229| 4294967296) (mod |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_477| 4294967296)) (or (< 0 |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_477|) (= |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_477| 0)))) (not (= |ULTIMATE.start_l0_insert_~item~4#1.base| 0)) (= (select |ULTIMATE.start_main_old_#valid#1| 1) 1) (exists ((|v_#memory_$Pointer$.base_BEFORE_CALL_360| (Array Int (Array Int Int)))) (= (select (select |v_#memory_$Pointer$.base_BEFORE_CALL_360| 3) 0) 0)) (= (select |ULTIMATE.start_main_old_#valid#1| 2) 1) (= (select |ULTIMATE.start_main_old_#valid#1| 3) 1) (= |ULTIMATE.start_l3_insert_~list#1.base| |ULTIMATE.start_l2_insert_~item~2#1.base|) (not (= |ULTIMATE.start_l3_insert_~item~1#1.base| 0)) (exists ((|v_old(#memory_int)_AFTER_CALL_227| (Array Int (Array Int Int)))) (and (= 48 (select (select |v_old(#memory_int)_AFTER_CALL_227| 1) 0)) (= (select (select |v_old(#memory_int)_AFTER_CALL_227| 1) 1) 0))) (= |ULTIMATE.start_l2_insert_~list#1.base| |ULTIMATE.start_l1_insert_~item~3#1.base|) (not (= (select (select |v_#memory_$Pointer$.base_455| |ULTIMATE.start_l4_insert_~item~0#1.base|) 8) 0)) (exists ((|v_#memory_$Pointer$.offset_BEFORE_CALL_360| (Array Int (Array Int Int)))) (= (select (select |v_#memory_$Pointer$.offset_BEFORE_CALL_360| 3) 0) 0)) (= |ULTIMATE.start_l1_insert_~list#1.base| |ULTIMATE.start_l0_insert_~item~4#1.base|) (= (select |ULTIMATE.start_main_old_#valid#1| 0) 0) (= |ULTIMATE.start_l3_insert_~item~1#1.base| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) 0)))))) (= |ULTIMATE.start_l2_insert_~item~2#1.offset| 0) (<= (select |#length| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l4_insert_~item~0#1.base|) 0)) 3) (= |ULTIMATE.start_l2_insert_~list#1.offset| 0) (= |ULTIMATE.start_l3_insert_~item~1#1.offset| 0))' at error location [2024-11-09 06:29:30,394 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2024-11-09 06:29:30,394 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-11-09 06:29:30,394 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 15] total 33 [2024-11-09 06:29:30,394 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1154392986] [2024-11-09 06:29:30,395 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-11-09 06:29:30,395 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 33 states [2024-11-09 06:29:30,395 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-09 06:29:30,396 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 33 interpolants. [2024-11-09 06:29:30,396 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=272, Invalid=3389, Unknown=3, NotChecked=118, Total=3782 [2024-11-09 06:29:30,397 INFO L87 Difference]: Start difference. First operand 260 states and 328 transitions. Second operand has 33 states, 26 states have (on average 2.3846153846153846) internal successors, (62), 27 states have internal predecessors, (62), 4 states have call successors, (8), 2 states have call predecessors, (8), 6 states have return successors, (9), 6 states have call predecessors, (9), 4 states have call successors, (9) [2024-11-09 06:29:35,804 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 06:29:35,804 INFO L93 Difference]: Finished difference Result 258 states and 313 transitions. [2024-11-09 06:29:35,804 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2024-11-09 06:29:35,805 INFO L78 Accepts]: Start accepts. Automaton has has 33 states, 26 states have (on average 2.3846153846153846) internal successors, (62), 27 states have internal predecessors, (62), 4 states have call successors, (8), 2 states have call predecessors, (8), 6 states have return successors, (9), 6 states have call predecessors, (9), 4 states have call successors, (9) Word has length 79 [2024-11-09 06:29:35,805 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 06:29:35,806 INFO L225 Difference]: With dead ends: 258 [2024-11-09 06:29:35,806 INFO L226 Difference]: Without dead ends: 254 [2024-11-09 06:29:35,807 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 202 GetRequests, 118 SyntacticMatches, 6 SemanticMatches, 78 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 1462 ImplicationChecksByTransitivity, 22.0s TimeCoverageRelationStatistics Valid=474, Invalid=5689, Unknown=3, NotChecked=154, Total=6320 [2024-11-09 06:29:35,808 INFO L432 NwaCegarLoop]: 128 mSDtfsCounter, 55 mSDsluCounter, 1500 mSDsCounter, 0 mSdLazyCounter, 2581 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 55 SdHoareTripleChecker+Valid, 1628 SdHoareTripleChecker+Invalid, 2769 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 2581 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 170 IncrementalHoareTripleChecker+Unchecked, 2.7s IncrementalHoareTripleChecker+Time [2024-11-09 06:29:35,808 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [55 Valid, 1628 Invalid, 2769 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 2581 Invalid, 0 Unknown, 170 Unchecked, 2.7s Time] [2024-11-09 06:29:35,809 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 254 states. [2024-11-09 06:29:35,814 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 254 to 254. [2024-11-09 06:29:35,815 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 254 states, 168 states have (on average 1.6369047619047619) internal successors, (275), 237 states have internal predecessors, (275), 12 states have call successors, (12), 4 states have call predecessors, (12), 4 states have return successors, (12), 12 states have call predecessors, (12), 12 states have call successors, (12) [2024-11-09 06:29:35,816 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 254 states to 254 states and 299 transitions. [2024-11-09 06:29:35,817 INFO L78 Accepts]: Start accepts. Automaton has 254 states and 299 transitions. Word has length 79 [2024-11-09 06:29:35,817 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 06:29:35,817 INFO L471 AbstractCegarLoop]: Abstraction has 254 states and 299 transitions. [2024-11-09 06:29:35,817 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 33 states, 26 states have (on average 2.3846153846153846) internal successors, (62), 27 states have internal predecessors, (62), 4 states have call successors, (8), 2 states have call predecessors, (8), 6 states have return successors, (9), 6 states have call predecessors, (9), 4 states have call successors, (9) [2024-11-09 06:29:35,817 INFO L276 IsEmpty]: Start isEmpty. Operand 254 states and 299 transitions. [2024-11-09 06:29:35,819 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2024-11-09 06:29:35,819 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 06:29:35,819 INFO L215 NwaCegarLoop]: trace histogram [60, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 06:29:35,830 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Ended with exit code 0 [2024-11-09 06:29:36,019 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable17 [2024-11-09 06:29:36,020 INFO L396 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr16REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 86 more)] === [2024-11-09 06:29:36,020 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 06:29:36,020 INFO L85 PathProgramCache]: Analyzing trace with hash 1097063023, now seen corresponding path program 1 times [2024-11-09 06:29:36,020 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 06:29:36,020 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [843170982] [2024-11-09 06:29:36,020 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 06:29:36,021 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 06:29:36,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 06:29:38,172 INFO L134 CoverageAnalysis]: Checked inductivity of 2205 backedges. 1370 proven. 251 refuted. 0 times theorem prover too weak. 584 trivial. 0 not checked. [2024-11-09 06:29:38,173 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-09 06:29:38,173 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [843170982] [2024-11-09 06:29:38,173 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [843170982] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-09 06:29:38,173 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [992154393] [2024-11-09 06:29:38,174 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 06:29:38,174 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-09 06:29:38,174 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 [2024-11-09 06:29:38,176 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-09 06:29:38,179 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2024-11-09 06:29:38,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 06:29:38,966 INFO L255 TraceCheckSpWp]: Trace formula consists of 1491 conjuncts, 40 conjuncts are in the unsatisfiable core [2024-11-09 06:29:38,971 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-09 06:29:39,052 WARN L873 $PredicateComparison]: unable to prove that (exists ((|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (and (= |c_#valid| (store |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| (select |c_#valid| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|))) (= (select |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 0))) is different from true [2024-11-09 06:29:39,158 INFO L349 Elim1Store]: treesize reduction 20, result has 33.3 percent of original size [2024-11-09 06:29:39,158 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 19 treesize of output 16 [2024-11-09 06:29:39,236 WARN L851 $PredicateComparison]: unable to prove that (or (exists ((|v_#valid_BEFORE_CALL_414| (Array Int Int))) (let ((.cse0 (@diff |v_#valid_BEFORE_CALL_414| |c_#valid|))) (and (= (select |v_#valid_BEFORE_CALL_414| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1) (= .cse0 |c_ULTIMATE.start_l4_insert_#t~ret6#1.base|) (= |c_#valid| (store |v_#valid_BEFORE_CALL_414| .cse0 (select |c_#valid| .cse0)))))) (= (select |c_#valid| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1)) is different from false [2024-11-09 06:29:39,239 WARN L873 $PredicateComparison]: unable to prove that (or (exists ((|v_#valid_BEFORE_CALL_414| (Array Int Int))) (let ((.cse0 (@diff |v_#valid_BEFORE_CALL_414| |c_#valid|))) (and (= (select |v_#valid_BEFORE_CALL_414| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1) (= .cse0 |c_ULTIMATE.start_l4_insert_#t~ret6#1.base|) (= |c_#valid| (store |v_#valid_BEFORE_CALL_414| .cse0 (select |c_#valid| .cse0)))))) (= (select |c_#valid| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1)) is different from true [2024-11-09 06:29:39,255 WARN L851 $PredicateComparison]: unable to prove that (or (exists ((|v_#valid_BEFORE_CALL_414| (Array Int Int))) (let ((.cse0 (@diff |v_#valid_BEFORE_CALL_414| |c_#valid|))) (and (= (select |v_#valid_BEFORE_CALL_414| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1) (= |c_ULTIMATE.start_l4_insert_~item~0#1.base| .cse0) (= |c_#valid| (store |v_#valid_BEFORE_CALL_414| .cse0 (select |c_#valid| .cse0)))))) (= (select |c_#valid| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1)) is different from false [2024-11-09 06:29:39,258 WARN L873 $PredicateComparison]: unable to prove that (or (exists ((|v_#valid_BEFORE_CALL_414| (Array Int Int))) (let ((.cse0 (@diff |v_#valid_BEFORE_CALL_414| |c_#valid|))) (and (= (select |v_#valid_BEFORE_CALL_414| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1) (= |c_ULTIMATE.start_l4_insert_~item~0#1.base| .cse0) (= |c_#valid| (store |v_#valid_BEFORE_CALL_414| .cse0 (select |c_#valid| .cse0)))))) (= (select |c_#valid| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1)) is different from true [2024-11-09 06:29:39,300 WARN L873 $PredicateComparison]: unable to prove that (exists ((|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (= (store |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| 1) |c_#valid|)) is different from true [2024-11-09 06:29:39,367 INFO L349 Elim1Store]: treesize reduction 15, result has 25.0 percent of original size [2024-11-09 06:29:39,367 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 12 treesize of output 14 [2024-11-09 06:29:39,386 WARN L851 $PredicateComparison]: unable to prove that (or (exists ((|v_old(#valid)_AFTER_CALL_243| (Array Int Int)) (|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (and (exists ((|v_#valid_BEFORE_CALL_414| (Array Int Int))) (let ((.cse0 (@diff |v_#valid_BEFORE_CALL_414| |v_old(#valid)_AFTER_CALL_243|))) (and (= |c_ULTIMATE.start_l4_insert_~item~0#1.base| .cse0) (= (select |v_#valid_BEFORE_CALL_414| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1) (= |v_old(#valid)_AFTER_CALL_243| (store |v_#valid_BEFORE_CALL_414| .cse0 (select |v_old(#valid)_AFTER_CALL_243| .cse0)))))) (= |c_#valid| (store |v_old(#valid)_AFTER_CALL_243| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| 1)))) (and (exists ((|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (= (select |c_#valid| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 1)) (= (select |c_#valid| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1))) is different from false [2024-11-09 06:29:39,389 WARN L873 $PredicateComparison]: unable to prove that (or (exists ((|v_old(#valid)_AFTER_CALL_243| (Array Int Int)) (|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (and (exists ((|v_#valid_BEFORE_CALL_414| (Array Int Int))) (let ((.cse0 (@diff |v_#valid_BEFORE_CALL_414| |v_old(#valid)_AFTER_CALL_243|))) (and (= |c_ULTIMATE.start_l4_insert_~item~0#1.base| .cse0) (= (select |v_#valid_BEFORE_CALL_414| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1) (= |v_old(#valid)_AFTER_CALL_243| (store |v_#valid_BEFORE_CALL_414| .cse0 (select |v_old(#valid)_AFTER_CALL_243| .cse0)))))) (= |c_#valid| (store |v_old(#valid)_AFTER_CALL_243| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| 1)))) (and (exists ((|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (= (select |c_#valid| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 1)) (= (select |c_#valid| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1))) is different from true [2024-11-09 06:29:39,417 WARN L851 $PredicateComparison]: unable to prove that (or (exists ((|v_old(#valid)_AFTER_CALL_243| (Array Int Int)) (|v_#valid_BEFORE_CALL_414| (Array Int Int)) (|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (let ((.cse0 (@diff |v_#valid_BEFORE_CALL_414| |v_old(#valid)_AFTER_CALL_243|))) (and (= (select |v_#valid_BEFORE_CALL_414| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1) (= |c_#valid| (store |v_old(#valid)_AFTER_CALL_243| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| 1)) (= (select |c_#valid| .cse0) 1) (= |v_old(#valid)_AFTER_CALL_243| (store |v_#valid_BEFORE_CALL_414| .cse0 (select |v_old(#valid)_AFTER_CALL_243| .cse0)))))) (and (exists ((|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (= (select |c_#valid| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 1)) (exists ((|ULTIMATE.start_l4_insert_~item~0#1.base| Int)) (= (select |c_#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1)) (= (select |c_#valid| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1))) is different from false [2024-11-09 06:29:39,420 WARN L873 $PredicateComparison]: unable to prove that (or (exists ((|v_old(#valid)_AFTER_CALL_243| (Array Int Int)) (|v_#valid_BEFORE_CALL_414| (Array Int Int)) (|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (let ((.cse0 (@diff |v_#valid_BEFORE_CALL_414| |v_old(#valid)_AFTER_CALL_243|))) (and (= (select |v_#valid_BEFORE_CALL_414| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1) (= |c_#valid| (store |v_old(#valid)_AFTER_CALL_243| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| 1)) (= (select |c_#valid| .cse0) 1) (= |v_old(#valid)_AFTER_CALL_243| (store |v_#valid_BEFORE_CALL_414| .cse0 (select |v_old(#valid)_AFTER_CALL_243| .cse0)))))) (and (exists ((|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (= (select |c_#valid| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 1)) (exists ((|ULTIMATE.start_l4_insert_~item~0#1.base| Int)) (= (select |c_#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1)) (= (select |c_#valid| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1))) is different from true [2024-11-09 06:29:39,595 INFO L134 CoverageAnalysis]: Checked inductivity of 2205 backedges. 1001 proven. 126 refuted. 0 times theorem prover too weak. 460 trivial. 618 not checked. [2024-11-09 06:29:39,595 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-11-09 06:29:39,717 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [992154393] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-09 06:29:39,717 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [954529137] [2024-11-09 06:29:39,719 INFO L159 IcfgInterpreter]: Started Sifa with 33 locations of interest [2024-11-09 06:29:39,720 INFO L166 IcfgInterpreter]: Building call graph [2024-11-09 06:29:39,720 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2024-11-09 06:29:39,720 INFO L176 IcfgInterpreter]: Starting interpretation [2024-11-09 06:29:39,720 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2024-11-09 06:29:40,743 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 64 for LOIs [2024-11-09 06:29:40,947 INFO L180 IcfgInterpreter]: Interpretation finished [2024-11-09 06:29:49,598 WARN L286 SmtUtils]: Spent 7.81s on a formula simplification. DAG size of input: 182 DAG size of output: 169 (called from [L 388] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-11-09 06:30:28,104 WARN L286 SmtUtils]: Spent 8.16s on a formula simplification. DAG size of input: 178 DAG size of output: 165 (called from [L 388] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-11-09 06:30:28,105 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '13601#(and (<= 1 |#StackHeapBarrier|) (= |~#list~0.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.base| 3) (not (= (select |#valid| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8))) 1)) (<= 0 (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8)) (= 3 |~#list~0.base|) (exists ((|v_#memory_int_448| (Array Int (Array Int Int))) (|v_#memory_int_445| (Array Int (Array Int Int))) (|v_#memory_int_444| (Array Int (Array Int Int))) (|v_#memory_int_447| (Array Int (Array Int Int))) (|v_#memory_int_446| (Array Int (Array Int Int))) (|v_ULTIMATE.start_l4_insert_~list#1.offset_18| Int) (|v_ULTIMATE.start_l4_insert_~list#1.base_21| Int) (|v_#memory_$Pointer$.base_482| (Array Int (Array Int Int))) (|v_zalloc_or_die_#Ultimate.C_memset_#res#1.offset_205| Int) (|v_#memory_$Pointer$.base_481| (Array Int (Array Int Int))) (|v_zalloc_or_die_#Ultimate.C_memset_#amount#1_234| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#value#1_245| Int) (|v_#memory_$Pointer$.offset_481| (Array Int (Array Int Int))) (|v_#memory_$Pointer$.offset_482| (Array Int (Array Int Int))) (|v_#memory_int_443| (Array Int (Array Int Int))) (|v_#memory_$Pointer$.base_486| (Array Int (Array Int Int))) (|v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_497| Int) (|v_#memory_$Pointer$.offset_486| (Array Int (Array Int Int)))) (and (= (store |v_#memory_int_445| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) (store (select |v_#memory_int_445| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) (select (select |v_#memory_int_446| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)))) |v_#memory_int_446|) (= (store |v_#memory_$Pointer$.offset_481| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) (store (select |v_#memory_$Pointer$.offset_481| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8) 0)) |v_#memory_$Pointer$.offset_482|) (<= 0 |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_497|) (= (store (store (store |v_#memory_$Pointer$.offset_482| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8)) (store (select |v_#memory_$Pointer$.offset_482| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|))) (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) (store (store (select (store |v_#memory_$Pointer$.offset_482| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8)) (store (select |v_#memory_$Pointer$.offset_482| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|))) (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 4) (select (select (store (store |v_#memory_$Pointer$.offset_482| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8)) (store (select |v_#memory_$Pointer$.offset_482| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|))) (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) (store (select (store |v_#memory_$Pointer$.offset_482| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8)) (store (select |v_#memory_$Pointer$.offset_482| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|))) (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|))) |v_ULTIMATE.start_l4_insert_~list#1.base_21| (store (select (store (store |v_#memory_$Pointer$.offset_482| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8)) (store (select |v_#memory_$Pointer$.offset_482| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|))) (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) (store (store (select (store |v_#memory_$Pointer$.offset_482| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8)) (store (select |v_#memory_$Pointer$.offset_482| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|))) (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 4) (select (select (store (store |v_#memory_$Pointer$.offset_482| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8)) (store (select |v_#memory_$Pointer$.offset_482| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|))) (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) (store (select (store |v_#memory_$Pointer$.offset_482| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8)) (store (select |v_#memory_$Pointer$.offset_482| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|))) (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|))) |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18| (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|))) |v_#memory_$Pointer$.offset_486|) (= (select |#valid| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) 1) (= |v_zalloc_or_die_#Ultimate.C_memset_#res#1.offset_205| 0) (<= 0 (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (= (store (store (store |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8)) (store (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8))) 0 (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|))) (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) (store (store (select (store |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8)) (store (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8))) 0 (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|))) (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) |v_ULTIMATE.start_l4_insert_~list#1.base_21|) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 4) (select (select (store (store |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8)) (store (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8))) 0 (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|))) (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) (store (select (store |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8)) (store (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8))) 0 (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|))) (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) |v_ULTIMATE.start_l4_insert_~list#1.base_21|)) |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|))) |v_ULTIMATE.start_l4_insert_~list#1.base_21| (store (select (store (store |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8)) (store (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8))) 0 (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|))) (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) (store (store (select (store |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8)) (store (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8))) 0 (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|))) (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) |v_ULTIMATE.start_l4_insert_~list#1.base_21|) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 4) (select (select (store (store |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8)) (store (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8))) 0 (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|))) (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) (store (select (store |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8)) (store (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8))) 0 (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|))) (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) |v_ULTIMATE.start_l4_insert_~list#1.base_21|)) |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|))) |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|))) |v_#memory_$Pointer$.base_486|) (<= (+ 4 |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) (select |#length| |v_ULTIMATE.start_l4_insert_~list#1.base_21|)) (not (= (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8)) 0)) (= (store |v_#memory_int_444| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8)) (store (select |v_#memory_int_444| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8))) 0 (select (select |v_#memory_int_445| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8))) 0))) |v_#memory_int_445|) (= (store |v_#memory_int_443| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) (store (select |v_#memory_int_443| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8) (select (select |v_#memory_int_444| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8)))) |v_#memory_int_444|) (= (store |v_#memory_int_448| |ULTIMATE.start_l3_insert_~item~1#1.base| (store (select |v_#memory_int_448| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8) (select (select |#memory_int| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8)))) |#memory_int|) (= |v_zalloc_or_die_#Ultimate.C_memset_#value#1_245| 0) (= (store |v_#memory_$Pointer$.base_481| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) (store (select |v_#memory_$Pointer$.base_481| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8) (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8)))) |v_#memory_$Pointer$.base_482|) (<= 0 |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) (<= 4 (select |#length| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8)))) (<= (mod |v_zalloc_or_die_#Ultimate.C_memset_#amount#1_234| 4294967296) (mod |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_497| 4294967296)) (= (select |#valid| (select (select |v_#memory_$Pointer$.base_482| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 8))) 1) (= (store |v_#memory_int_447| |v_ULTIMATE.start_l4_insert_~list#1.base_21| (store (select |v_#memory_int_447| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18| (select (select |v_#memory_int_448| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|))) |v_#memory_int_448|) (= (store |v_#memory_int_446| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) (store (select |v_#memory_int_446| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 4) (select (select |v_#memory_int_447| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|)) (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 4)))) |v_#memory_int_447|) (= |#memory_$Pointer$.offset| (store |v_#memory_$Pointer$.offset_486| |ULTIMATE.start_l3_insert_~item~1#1.base| (store (select |v_#memory_$Pointer$.offset_486| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8) |ULTIMATE.start_l3_insert_~list#1.offset|))) (<= (+ (select (select |v_#memory_$Pointer$.offset_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|) 12) (select |#length| (select (select |v_#memory_$Pointer$.base_486| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_18|))) (= (select |#valid| |v_ULTIMATE.start_l4_insert_~list#1.base_21|) 1) (= (store |v_#memory_$Pointer$.base_486| |ULTIMATE.start_l3_insert_~item~1#1.base| (store (select |v_#memory_$Pointer$.base_486| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8) (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8)))) |#memory_$Pointer$.base|))) (= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (= (select |#valid| |ULTIMATE.start_l3_insert_~item~1#1.base|) 1) (<= (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 12) (select |#length| |ULTIMATE.start_l3_insert_~item~1#1.base|)))' at error location [2024-11-09 06:30:28,105 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2024-11-09 06:30:28,106 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-11-09 06:30:28,106 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 17] total 23 [2024-11-09 06:30:28,106 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1165737254] [2024-11-09 06:30:28,106 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-11-09 06:30:28,106 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2024-11-09 06:30:28,107 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-09 06:30:28,107 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2024-11-09 06:30:28,107 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=157, Invalid=1921, Unknown=16, NotChecked=558, Total=2652 [2024-11-09 06:30:28,107 INFO L87 Difference]: Start difference. First operand 254 states and 299 transitions. Second operand has 24 states, 19 states have (on average 3.473684210526316) internal successors, (66), 18 states have internal predecessors, (66), 5 states have call successors, (8), 2 states have call predecessors, (8), 6 states have return successors, (9), 8 states have call predecessors, (9), 5 states have call successors, (9) [2024-11-09 06:30:28,491 WARN L851 $PredicateComparison]: unable to prove that (let ((.cse1 (= (select |c_#valid| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1))) (and (= (select |c_#valid| |c_ULTIMATE.start_l2_insert_~item~2#1.base|) 1) (or (exists ((|v_#valid_BEFORE_CALL_414| (Array Int Int))) (let ((.cse0 (@diff |v_#valid_BEFORE_CALL_414| |c_#valid|))) (and (= (select |v_#valid_BEFORE_CALL_414| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1) (= .cse0 |c_ULTIMATE.start_l4_insert_#t~ret6#1.base|) (= |c_#valid| (store |v_#valid_BEFORE_CALL_414| .cse0 (select |c_#valid| .cse0)))))) .cse1) .cse1)) is different from false [2024-11-09 06:30:28,495 WARN L873 $PredicateComparison]: unable to prove that (let ((.cse1 (= (select |c_#valid| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1))) (and (= (select |c_#valid| |c_ULTIMATE.start_l2_insert_~item~2#1.base|) 1) (or (exists ((|v_#valid_BEFORE_CALL_414| (Array Int Int))) (let ((.cse0 (@diff |v_#valid_BEFORE_CALL_414| |c_#valid|))) (and (= (select |v_#valid_BEFORE_CALL_414| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1) (= .cse0 |c_ULTIMATE.start_l4_insert_#t~ret6#1.base|) (= |c_#valid| (store |v_#valid_BEFORE_CALL_414| .cse0 (select |c_#valid| .cse0)))))) .cse1) .cse1)) is different from true [2024-11-09 06:30:28,501 WARN L851 $PredicateComparison]: unable to prove that (let ((.cse1 (= (select |c_#valid| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1))) (and (or (exists ((|v_#valid_BEFORE_CALL_414| (Array Int Int))) (let ((.cse0 (@diff |v_#valid_BEFORE_CALL_414| |c_#valid|))) (and (= (select |v_#valid_BEFORE_CALL_414| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1) (= |c_ULTIMATE.start_l4_insert_~item~0#1.base| .cse0) (= |c_#valid| (store |v_#valid_BEFORE_CALL_414| .cse0 (select |c_#valid| .cse0)))))) .cse1) (or (= |c_ULTIMATE.start_l3_insert_~list#1.base| |c_ULTIMATE.start_l3_insert_~item~1#1.base|) (= |c_ULTIMATE.start_l4_insert_~item~0#1.base| |c_ULTIMATE.start_l3_insert_~list#1.base|) .cse1))) is different from false [2024-11-09 06:30:28,505 WARN L873 $PredicateComparison]: unable to prove that (let ((.cse1 (= (select |c_#valid| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1))) (and (or (exists ((|v_#valid_BEFORE_CALL_414| (Array Int Int))) (let ((.cse0 (@diff |v_#valid_BEFORE_CALL_414| |c_#valid|))) (and (= (select |v_#valid_BEFORE_CALL_414| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1) (= |c_ULTIMATE.start_l4_insert_~item~0#1.base| .cse0) (= |c_#valid| (store |v_#valid_BEFORE_CALL_414| .cse0 (select |c_#valid| .cse0)))))) .cse1) (or (= |c_ULTIMATE.start_l3_insert_~list#1.base| |c_ULTIMATE.start_l3_insert_~item~1#1.base|) (= |c_ULTIMATE.start_l4_insert_~item~0#1.base| |c_ULTIMATE.start_l3_insert_~list#1.base|) .cse1))) is different from true [2024-11-09 06:30:28,511 WARN L851 $PredicateComparison]: unable to prove that (let ((.cse1 (= (select |c_#valid| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1))) (and (or (exists ((|v_old(#valid)_AFTER_CALL_243| (Array Int Int)) (|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (and (exists ((|v_#valid_BEFORE_CALL_414| (Array Int Int))) (let ((.cse0 (@diff |v_#valid_BEFORE_CALL_414| |v_old(#valid)_AFTER_CALL_243|))) (and (= |c_ULTIMATE.start_l4_insert_~item~0#1.base| .cse0) (= (select |v_#valid_BEFORE_CALL_414| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1) (= |v_old(#valid)_AFTER_CALL_243| (store |v_#valid_BEFORE_CALL_414| .cse0 (select |v_old(#valid)_AFTER_CALL_243| .cse0)))))) (= |c_#valid| (store |v_old(#valid)_AFTER_CALL_243| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| 1)))) (and (exists ((|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (= (select |c_#valid| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 1)) .cse1)) (or (= |c_ULTIMATE.start_l3_insert_~list#1.base| |c_ULTIMATE.start_l3_insert_~item~1#1.base|) (= |c_ULTIMATE.start_l4_insert_~item~0#1.base| |c_ULTIMATE.start_l3_insert_~list#1.base|) .cse1))) is different from false [2024-11-09 06:30:28,516 WARN L873 $PredicateComparison]: unable to prove that (let ((.cse1 (= (select |c_#valid| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1))) (and (or (exists ((|v_old(#valid)_AFTER_CALL_243| (Array Int Int)) (|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (and (exists ((|v_#valid_BEFORE_CALL_414| (Array Int Int))) (let ((.cse0 (@diff |v_#valid_BEFORE_CALL_414| |v_old(#valid)_AFTER_CALL_243|))) (and (= |c_ULTIMATE.start_l4_insert_~item~0#1.base| .cse0) (= (select |v_#valid_BEFORE_CALL_414| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1) (= |v_old(#valid)_AFTER_CALL_243| (store |v_#valid_BEFORE_CALL_414| .cse0 (select |v_old(#valid)_AFTER_CALL_243| .cse0)))))) (= |c_#valid| (store |v_old(#valid)_AFTER_CALL_243| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| 1)))) (and (exists ((|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (= (select |c_#valid| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 1)) .cse1)) (or (= |c_ULTIMATE.start_l3_insert_~list#1.base| |c_ULTIMATE.start_l3_insert_~item~1#1.base|) (= |c_ULTIMATE.start_l4_insert_~item~0#1.base| |c_ULTIMATE.start_l3_insert_~list#1.base|) .cse1))) is different from true [2024-11-09 06:30:28,522 WARN L851 $PredicateComparison]: unable to prove that (let ((.cse1 (= (select |c_#valid| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1))) (and (or (exists ((|v_old(#valid)_AFTER_CALL_243| (Array Int Int)) (|v_#valid_BEFORE_CALL_414| (Array Int Int)) (|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (let ((.cse0 (@diff |v_#valid_BEFORE_CALL_414| |v_old(#valid)_AFTER_CALL_243|))) (and (= (select |v_#valid_BEFORE_CALL_414| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1) (= |c_#valid| (store |v_old(#valid)_AFTER_CALL_243| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| 1)) (= (select |c_#valid| .cse0) 1) (= |v_old(#valid)_AFTER_CALL_243| (store |v_#valid_BEFORE_CALL_414| .cse0 (select |v_old(#valid)_AFTER_CALL_243| .cse0)))))) (and (exists ((|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (= (select |c_#valid| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 1)) (exists ((|ULTIMATE.start_l4_insert_~item~0#1.base| Int)) (= (select |c_#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1)) .cse1)) (or (= |c_ULTIMATE.start_l3_insert_~list#1.base| |c_ULTIMATE.start_l3_insert_~item~1#1.base|) .cse1))) is different from false [2024-11-09 06:30:28,527 WARN L873 $PredicateComparison]: unable to prove that (let ((.cse1 (= (select |c_#valid| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1))) (and (or (exists ((|v_old(#valid)_AFTER_CALL_243| (Array Int Int)) (|v_#valid_BEFORE_CALL_414| (Array Int Int)) (|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (let ((.cse0 (@diff |v_#valid_BEFORE_CALL_414| |v_old(#valid)_AFTER_CALL_243|))) (and (= (select |v_#valid_BEFORE_CALL_414| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1) (= |c_#valid| (store |v_old(#valid)_AFTER_CALL_243| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| 1)) (= (select |c_#valid| .cse0) 1) (= |v_old(#valid)_AFTER_CALL_243| (store |v_#valid_BEFORE_CALL_414| .cse0 (select |v_old(#valid)_AFTER_CALL_243| .cse0)))))) (and (exists ((|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (= (select |c_#valid| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 1)) (exists ((|ULTIMATE.start_l4_insert_~item~0#1.base| Int)) (= (select |c_#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1)) .cse1)) (or (= |c_ULTIMATE.start_l3_insert_~list#1.base| |c_ULTIMATE.start_l3_insert_~item~1#1.base|) .cse1))) is different from true [2024-11-09 06:30:28,538 WARN L851 $PredicateComparison]: unable to prove that (let ((.cse1 (= (select |c_#valid| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1))) (and (or (exists ((|v_old(#valid)_AFTER_CALL_243| (Array Int Int)) (|v_#valid_BEFORE_CALL_414| (Array Int Int)) (|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (let ((.cse0 (@diff |v_#valid_BEFORE_CALL_414| |v_old(#valid)_AFTER_CALL_243|))) (and (= (select |v_#valid_BEFORE_CALL_414| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1) (= |c_#valid| (store |v_old(#valid)_AFTER_CALL_243| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| 1)) (= (select |c_#valid| .cse0) 1) (= |v_old(#valid)_AFTER_CALL_243| (store |v_#valid_BEFORE_CALL_414| .cse0 (select |v_old(#valid)_AFTER_CALL_243| .cse0)))))) (and (exists ((|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (= (select |c_#valid| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 1)) (exists ((|ULTIMATE.start_l4_insert_~item~0#1.base| Int)) (= (select |c_#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1)) .cse1)) .cse1)) is different from false [2024-11-09 06:30:28,543 WARN L873 $PredicateComparison]: unable to prove that (let ((.cse1 (= (select |c_#valid| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1))) (and (or (exists ((|v_old(#valid)_AFTER_CALL_243| (Array Int Int)) (|v_#valid_BEFORE_CALL_414| (Array Int Int)) (|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (let ((.cse0 (@diff |v_#valid_BEFORE_CALL_414| |v_old(#valid)_AFTER_CALL_243|))) (and (= (select |v_#valid_BEFORE_CALL_414| |c_ULTIMATE.start_l3_insert_~list#1.base|) 1) (= |c_#valid| (store |v_old(#valid)_AFTER_CALL_243| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| 1)) (= (select |c_#valid| .cse0) 1) (= |v_old(#valid)_AFTER_CALL_243| (store |v_#valid_BEFORE_CALL_414| .cse0 (select |v_old(#valid)_AFTER_CALL_243| .cse0)))))) (and (exists ((|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (= (select |c_#valid| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 1)) (exists ((|ULTIMATE.start_l4_insert_~item~0#1.base| Int)) (= (select |c_#valid| |ULTIMATE.start_l4_insert_~item~0#1.base|) 1)) .cse1)) .cse1)) is different from true [2024-11-09 06:30:29,608 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 06:30:29,608 INFO L93 Difference]: Finished difference Result 291 states and 347 transitions. [2024-11-09 06:30:29,608 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2024-11-09 06:30:29,609 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 19 states have (on average 3.473684210526316) internal successors, (66), 18 states have internal predecessors, (66), 5 states have call successors, (8), 2 states have call predecessors, (8), 6 states have return successors, (9), 8 states have call predecessors, (9), 5 states have call successors, (9) Word has length 117 [2024-11-09 06:30:29,609 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 06:30:29,611 INFO L225 Difference]: With dead ends: 291 [2024-11-09 06:30:29,611 INFO L226 Difference]: Without dead ends: 291 [2024-11-09 06:30:29,611 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 276 GetRequests, 210 SyntacticMatches, 8 SemanticMatches, 58 ConstructedPredicates, 11 IntricatePredicates, 0 DeprecatedPredicates, 728 ImplicationChecksByTransitivity, 47.8s TimeCoverageRelationStatistics Valid=190, Invalid=2180, Unknown=26, NotChecked=1144, Total=3540 [2024-11-09 06:30:29,612 INFO L432 NwaCegarLoop]: 137 mSDtfsCounter, 20 mSDsluCounter, 1119 mSDsCounter, 0 mSdLazyCounter, 1165 mSolverCounterSat, 28 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 1256 SdHoareTripleChecker+Invalid, 2609 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Valid, 1165 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 1416 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2024-11-09 06:30:29,612 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 1256 Invalid, 2609 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [28 Valid, 1165 Invalid, 0 Unknown, 1416 Unchecked, 1.2s Time] [2024-11-09 06:30:29,613 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 291 states. [2024-11-09 06:30:29,619 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 291 to 291. [2024-11-09 06:30:29,620 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 291 states, 200 states have (on average 1.555) internal successors, (311), 268 states have internal predecessors, (311), 18 states have call successors, (18), 4 states have call predecessors, (18), 4 states have return successors, (18), 18 states have call predecessors, (18), 18 states have call successors, (18) [2024-11-09 06:30:29,622 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 291 states to 291 states and 347 transitions. [2024-11-09 06:30:29,622 INFO L78 Accepts]: Start accepts. Automaton has 291 states and 347 transitions. Word has length 117 [2024-11-09 06:30:29,622 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 06:30:29,622 INFO L471 AbstractCegarLoop]: Abstraction has 291 states and 347 transitions. [2024-11-09 06:30:29,623 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 19 states have (on average 3.473684210526316) internal successors, (66), 18 states have internal predecessors, (66), 5 states have call successors, (8), 2 states have call predecessors, (8), 6 states have return successors, (9), 8 states have call predecessors, (9), 5 states have call successors, (9) [2024-11-09 06:30:29,623 INFO L276 IsEmpty]: Start isEmpty. Operand 291 states and 347 transitions. [2024-11-09 06:30:29,624 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2024-11-09 06:30:29,624 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 06:30:29,625 INFO L215 NwaCegarLoop]: trace histogram [60, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 06:30:29,652 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Ended with exit code 0 [2024-11-09 06:30:29,828 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-09 06:30:29,829 INFO L396 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr17REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 86 more)] === [2024-11-09 06:30:29,829 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 06:30:29,829 INFO L85 PathProgramCache]: Analyzing trace with hash 1097063024, now seen corresponding path program 1 times [2024-11-09 06:30:29,829 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 06:30:29,829 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [50722723] [2024-11-09 06:30:29,829 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 06:30:29,829 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 06:30:30,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 06:30:33,723 INFO L134 CoverageAnalysis]: Checked inductivity of 2205 backedges. 1119 proven. 423 refuted. 0 times theorem prover too weak. 663 trivial. 0 not checked. [2024-11-09 06:30:33,724 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-09 06:30:33,724 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [50722723] [2024-11-09 06:30:33,724 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [50722723] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-09 06:30:33,724 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [861527449] [2024-11-09 06:30:33,724 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 06:30:33,724 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-09 06:30:33,724 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 [2024-11-09 06:30:33,726 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-09 06:30:33,728 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2024-11-09 06:30:37,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 06:30:37,905 INFO L255 TraceCheckSpWp]: Trace formula consists of 1491 conjuncts, 157 conjuncts are in the unsatisfiable core [2024-11-09 06:30:37,912 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-09 06:30:38,318 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2024-11-09 06:30:49,510 WARN L873 $PredicateComparison]: unable to prove that (exists ((|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (and (= (store |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| 1) |c_#valid|) (= (store |c_old(#length)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| (select |c_#length| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|)) |c_#length|) (= (select |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 0))) is different from true [2024-11-09 06:30:50,604 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-11-09 06:30:50,605 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 9 [2024-11-09 06:30:50,630 INFO L349 Elim1Store]: treesize reduction 18, result has 35.7 percent of original size [2024-11-09 06:30:50,631 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 17 treesize of output 21 [2024-11-09 06:30:50,901 WARN L873 $PredicateComparison]: unable to prove that (exists ((|zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| Int)) (and (= (store |c_old(#length)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base| (select |c_#length| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|)) |c_#length|) (= (select |c_old(#valid)| |zalloc_or_die_#Ultimate.C_memset_#ptr#1.base|) 0))) is different from true [2024-11-09 06:30:51,862 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-11-09 06:30:51,863 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 2 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 9 [2024-11-09 06:30:51,885 INFO L349 Elim1Store]: treesize reduction 8, result has 52.9 percent of original size [2024-11-09 06:30:51,885 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 16 treesize of output 18 [2024-11-09 06:30:51,982 INFO L134 CoverageAnalysis]: Checked inductivity of 2205 backedges. 562 proven. 1369 refuted. 0 times theorem prover too weak. 117 trivial. 157 not checked. [2024-11-09 06:30:51,982 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-11-09 06:30:52,241 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [861527449] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-09 06:30:52,241 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1593604337] [2024-11-09 06:30:52,243 INFO L159 IcfgInterpreter]: Started Sifa with 33 locations of interest [2024-11-09 06:30:52,243 INFO L166 IcfgInterpreter]: Building call graph [2024-11-09 06:30:52,243 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2024-11-09 06:30:52,244 INFO L176 IcfgInterpreter]: Starting interpretation [2024-11-09 06:30:52,244 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2024-11-09 06:30:53,389 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 64 for LOIs [2024-11-09 06:30:53,542 INFO L180 IcfgInterpreter]: Interpretation finished [2024-11-09 06:31:03,356 WARN L286 SmtUtils]: Spent 8.18s on a formula simplification. DAG size of input: 185 DAG size of output: 172 (called from [L 388] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-11-09 06:32:12,219 WARN L286 SmtUtils]: Spent 8.64s on a formula simplification. DAG size of input: 178 DAG size of output: 165 (called from [L 388] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-11-09 06:32:12,220 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '14681#(and (<= 1 |#StackHeapBarrier|) (= |~#list~0.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.base| 3) (exists ((|v_#memory_$Pointer$.offset_511| (Array Int (Array Int Int))) (|v_#memory_$Pointer$.offset_512| (Array Int (Array Int Int))) (|v_#memory_$Pointer$.base_516| (Array Int (Array Int Int))) (|v_#memory_int_478| (Array Int (Array Int Int))) (|v_#memory_$Pointer$.offset_516| (Array Int (Array Int Int))) (|v_#memory_int_477| (Array Int (Array Int Int))) (|v_ULTIMATE.start_l4_insert_~list#1.base_22| Int) (|v_ULTIMATE.start_l4_insert_~list#1.offset_19| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#res#1.offset_214| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#value#1_255| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#amount#1_244| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_570| Int) (|v_#memory_$Pointer$.base_512| (Array Int (Array Int Int))) (|v_#memory_int_474| (Array Int (Array Int Int))) (|v_#memory_$Pointer$.base_511| (Array Int (Array Int Int))) (|v_#memory_int_473| (Array Int (Array Int Int))) (|v_#memory_int_476| (Array Int (Array Int Int))) (|v_#memory_int_475| (Array Int (Array Int Int)))) (and (= |v_zalloc_or_die_#Ultimate.C_memset_#res#1.offset_214| 0) (= (store |v_#memory_$Pointer$.offset_516| |ULTIMATE.start_l3_insert_~item~1#1.base| (store (select |v_#memory_$Pointer$.offset_516| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8) (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8)))) |#memory_$Pointer$.offset|) (= (store |v_#memory_int_474| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8)) (store (select |v_#memory_int_474| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8))) 0 (select (select |v_#memory_int_475| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8))) 0))) |v_#memory_int_475|) (= (store |v_#memory_$Pointer$.base_511| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) (store (select |v_#memory_$Pointer$.base_511| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8) (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8)))) |v_#memory_$Pointer$.base_512|) (= |v_#memory_$Pointer$.offset_512| (store |v_#memory_$Pointer$.offset_511| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) (store (select |v_#memory_$Pointer$.offset_511| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8) 0))) (= (store |v_#memory_int_473| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) (store (select |v_#memory_int_473| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8) (select (select |v_#memory_int_474| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8)))) |v_#memory_int_474|) (<= (mod |v_zalloc_or_die_#Ultimate.C_memset_#amount#1_244| 4294967296) (mod |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_570| 4294967296)) (<= (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 12) (select |#length| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|))) (= (store (store (store |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8)) (store (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8))) 0 (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|))) (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) (store (store (select (store |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8)) (store (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8))) 0 (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|))) (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) |v_ULTIMATE.start_l4_insert_~list#1.base_22|) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 4) (select (select (store (store |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8)) (store (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8))) 0 (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|))) (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) (store (select (store |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8)) (store (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8))) 0 (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|))) (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) |v_ULTIMATE.start_l4_insert_~list#1.base_22|)) |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|))) |v_ULTIMATE.start_l4_insert_~list#1.base_22| (store (select (store (store |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8)) (store (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8))) 0 (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|))) (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) (store (store (select (store |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8)) (store (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8))) 0 (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|))) (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) |v_ULTIMATE.start_l4_insert_~list#1.base_22|) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 4) (select (select (store (store |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8)) (store (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8))) 0 (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|))) (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) (store (select (store |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8)) (store (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8))) 0 (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|))) (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) |v_ULTIMATE.start_l4_insert_~list#1.base_22|)) |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|))) |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|))) |v_#memory_$Pointer$.base_516|) (not (= (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8)) 0)) (<= 0 |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) (= (select |#valid| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) 1) (= |v_zalloc_or_die_#Ultimate.C_memset_#value#1_255| 0) (<= (+ 4 |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) (select |#length| |v_ULTIMATE.start_l4_insert_~list#1.base_22|)) (<= 4 (select |#length| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8)))) (= (store |v_#memory_int_476| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) (store (select |v_#memory_int_476| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 4) (select (select |v_#memory_int_477| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 4)))) |v_#memory_int_477|) (= (store |v_#memory_int_475| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) (store (select |v_#memory_int_475| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) (select (select |v_#memory_int_476| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)))) |v_#memory_int_476|) (= (select |#valid| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8))) 1) (= (select |#valid| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) 1) (<= 0 (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (= (store |v_#memory_$Pointer$.base_516| |ULTIMATE.start_l3_insert_~item~1#1.base| (store (select |v_#memory_$Pointer$.base_516| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8) (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8)))) |#memory_$Pointer$.base|) (= (store (store (store |v_#memory_$Pointer$.offset_512| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8)) (store (select |v_#memory_$Pointer$.offset_512| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|))) (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) (store (store (select (store |v_#memory_$Pointer$.offset_512| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8)) (store (select |v_#memory_$Pointer$.offset_512| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|))) (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 4) (select (select (store (store |v_#memory_$Pointer$.offset_512| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8)) (store (select |v_#memory_$Pointer$.offset_512| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|))) (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) (store (select (store |v_#memory_$Pointer$.offset_512| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8)) (store (select |v_#memory_$Pointer$.offset_512| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|))) (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|))) |v_ULTIMATE.start_l4_insert_~list#1.base_22| (store (select (store (store |v_#memory_$Pointer$.offset_512| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8)) (store (select |v_#memory_$Pointer$.offset_512| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|))) (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) (store (store (select (store |v_#memory_$Pointer$.offset_512| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8)) (store (select |v_#memory_$Pointer$.offset_512| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|))) (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 4) (select (select (store (store |v_#memory_$Pointer$.offset_512| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8)) (store (select |v_#memory_$Pointer$.offset_512| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|))) (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) (store (select (store |v_#memory_$Pointer$.offset_512| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8)) (store (select |v_#memory_$Pointer$.offset_512| (select (select |v_#memory_$Pointer$.base_512| (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (+ (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|))) (select (select |v_#memory_$Pointer$.base_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|)) |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|))) |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19| (select (select |v_#memory_$Pointer$.offset_516| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|))) |v_#memory_$Pointer$.offset_516|) (= (store |v_#memory_int_477| |v_ULTIMATE.start_l4_insert_~list#1.base_22| (store (select |v_#memory_int_477| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19| (select (select |v_#memory_int_478| |v_ULTIMATE.start_l4_insert_~list#1.base_22|) |v_ULTIMATE.start_l4_insert_~list#1.offset_19|))) |v_#memory_int_478|) (= |#memory_int| (store |v_#memory_int_478| |ULTIMATE.start_l3_insert_~item~1#1.base| (store (select |v_#memory_int_478| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8) (select (select |#memory_int| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8))))) (<= 0 |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_570|))) (<= 0 (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8)) (= 3 |~#list~0.base|) (= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (= (select |#valid| |ULTIMATE.start_l3_insert_~item~1#1.base|) 1) (or (< (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8)) 0) (< (select |#length| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8))) (+ 4 (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8))))) (<= (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 12) (select |#length| |ULTIMATE.start_l3_insert_~item~1#1.base|)))' at error location [2024-11-09 06:32:12,220 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2024-11-09 06:32:12,220 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-11-09 06:32:12,220 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 53] total 72 [2024-11-09 06:32:12,221 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [259803857] [2024-11-09 06:32:12,221 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-11-09 06:32:12,221 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 72 states [2024-11-09 06:32:12,221 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-09 06:32:12,222 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 72 interpolants. [2024-11-09 06:32:12,223 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=369, Invalid=9130, Unknown=15, NotChecked=386, Total=9900 [2024-11-09 06:32:12,223 INFO L87 Difference]: Start difference. First operand 291 states and 347 transitions. Second operand has 72 states, 68 states have (on average 1.6911764705882353) internal successors, (115), 68 states have internal predecessors, (115), 4 states have call successors, (8), 2 states have call predecessors, (8), 6 states have return successors, (9), 6 states have call predecessors, (9), 4 states have call successors, (9) [2024-11-09 06:32:14,320 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2024-11-09 06:32:22,723 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 06:32:22,723 INFO L93 Difference]: Finished difference Result 383 states and 485 transitions. [2024-11-09 06:32:22,724 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2024-11-09 06:32:22,724 INFO L78 Accepts]: Start accepts. Automaton has has 72 states, 68 states have (on average 1.6911764705882353) internal successors, (115), 68 states have internal predecessors, (115), 4 states have call successors, (8), 2 states have call predecessors, (8), 6 states have return successors, (9), 6 states have call predecessors, (9), 4 states have call successors, (9) Word has length 117 [2024-11-09 06:32:22,725 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 06:32:22,726 INFO L225 Difference]: With dead ends: 383 [2024-11-09 06:32:22,726 INFO L226 Difference]: Without dead ends: 335 [2024-11-09 06:32:22,728 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 286 GetRequests, 164 SyntacticMatches, 8 SemanticMatches, 114 ConstructedPredicates, 2 IntricatePredicates, 0 DeprecatedPredicates, 4491 ImplicationChecksByTransitivity, 97.1s TimeCoverageRelationStatistics Valid=597, Invalid=12278, Unknown=15, NotChecked=450, Total=13340 [2024-11-09 06:32:22,729 INFO L432 NwaCegarLoop]: 138 mSDtfsCounter, 44 mSDsluCounter, 2962 mSDsCounter, 0 mSdLazyCounter, 3206 mSolverCounterSat, 25 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 44 SdHoareTripleChecker+Valid, 3100 SdHoareTripleChecker+Invalid, 3664 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 3206 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 432 IncrementalHoareTripleChecker+Unchecked, 6.3s IncrementalHoareTripleChecker+Time [2024-11-09 06:32:22,729 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [44 Valid, 3100 Invalid, 3664 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 3206 Invalid, 1 Unknown, 432 Unchecked, 6.3s Time] [2024-11-09 06:32:22,730 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 335 states. [2024-11-09 06:32:22,738 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 335 to 310. [2024-11-09 06:32:22,738 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 310 states, 214 states have (on average 1.52803738317757) internal successors, (327), 283 states have internal predecessors, (327), 21 states have call successors, (21), 4 states have call predecessors, (21), 6 states have return successors, (31), 22 states have call predecessors, (31), 20 states have call successors, (31) [2024-11-09 06:32:22,740 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 310 states to 310 states and 379 transitions. [2024-11-09 06:32:22,740 INFO L78 Accepts]: Start accepts. Automaton has 310 states and 379 transitions. Word has length 117 [2024-11-09 06:32:22,740 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 06:32:22,741 INFO L471 AbstractCegarLoop]: Abstraction has 310 states and 379 transitions. [2024-11-09 06:32:22,741 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 72 states, 68 states have (on average 1.6911764705882353) internal successors, (115), 68 states have internal predecessors, (115), 4 states have call successors, (8), 2 states have call predecessors, (8), 6 states have return successors, (9), 6 states have call predecessors, (9), 4 states have call successors, (9) [2024-11-09 06:32:22,741 INFO L276 IsEmpty]: Start isEmpty. Operand 310 states and 379 transitions. [2024-11-09 06:32:22,742 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 120 [2024-11-09 06:32:22,742 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 06:32:22,742 INFO L215 NwaCegarLoop]: trace histogram [62, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 06:32:22,803 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Ended with exit code 0 [2024-11-09 06:32:22,943 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19,18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-09 06:32:22,944 INFO L396 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr17REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 86 more)] === [2024-11-09 06:32:22,944 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 06:32:22,944 INFO L85 PathProgramCache]: Analyzing trace with hash 837537410, now seen corresponding path program 2 times [2024-11-09 06:32:22,944 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 06:32:22,944 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1595403204] [2024-11-09 06:32:22,945 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 06:32:22,945 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 06:32:23,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 06:32:26,804 INFO L134 CoverageAnalysis]: Checked inductivity of 2338 backedges. 1190 proven. 483 refuted. 0 times theorem prover too weak. 665 trivial. 0 not checked. [2024-11-09 06:32:26,804 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-09 06:32:26,804 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1595403204] [2024-11-09 06:32:26,805 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1595403204] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-09 06:32:26,805 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [807426716] [2024-11-09 06:32:26,805 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-11-09 06:32:26,805 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-09 06:32:26,805 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 [2024-11-09 06:32:26,806 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-09 06:32:26,807 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2024-11-09 06:33:01,110 INFO L227 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2024-11-09 06:33:01,110 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-09 06:33:01,120 INFO L255 TraceCheckSpWp]: Trace formula consists of 859 conjuncts, 47 conjuncts are in the unsatisfiable core [2024-11-09 06:33:01,124 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-09 06:33:01,136 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2024-11-09 06:33:01,217 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2024-11-09 06:33:01,925 INFO L134 CoverageAnalysis]: Checked inductivity of 2338 backedges. 642 proven. 55 refuted. 0 times theorem prover too weak. 1641 trivial. 0 not checked. [2024-11-09 06:33:01,925 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-11-09 06:33:03,241 INFO L134 CoverageAnalysis]: Checked inductivity of 2338 backedges. 642 proven. 55 refuted. 0 times theorem prover too weak. 1641 trivial. 0 not checked. [2024-11-09 06:33:03,242 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [807426716] provided 0 perfect and 2 imperfect interpolant sequences [2024-11-09 06:33:03,242 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1653630384] [2024-11-09 06:33:03,243 INFO L159 IcfgInterpreter]: Started Sifa with 33 locations of interest [2024-11-09 06:33:03,243 INFO L166 IcfgInterpreter]: Building call graph [2024-11-09 06:33:03,244 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2024-11-09 06:33:03,244 INFO L176 IcfgInterpreter]: Starting interpretation [2024-11-09 06:33:03,244 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2024-11-09 06:33:04,105 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 64 for LOIs [2024-11-09 06:33:04,238 INFO L180 IcfgInterpreter]: Interpretation finished [2024-11-09 06:33:12,353 WARN L286 SmtUtils]: Spent 6.63s on a formula simplification. DAG size of input: 185 DAG size of output: 172 (called from [L 388] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-11-09 06:33:50,658 WARN L286 SmtUtils]: Spent 6.50s on a formula simplification. DAG size of input: 178 DAG size of output: 165 (called from [L 388] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-11-09 06:33:50,659 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '16193#(and (exists ((|v_#memory_$Pointer$.base_618| (Array Int (Array Int Int))) (|v_#memory_$Pointer$.offset_613| (Array Int (Array Int Int))) (|v_#memory_int_577| (Array Int (Array Int Int))) (|v_#memory_$Pointer$.offset_614| (Array Int (Array Int Int))) (|v_#memory_$Pointer$.base_614| (Array Int (Array Int Int))) (|v_#memory_int_576| (Array Int (Array Int Int))) (|v_#memory_int_579| (Array Int (Array Int Int))) (|v_#memory_$Pointer$.base_613| (Array Int (Array Int Int))) (|v_ULTIMATE.start_l4_insert_~list#1.offset_20| Int) (|v_#memory_int_578| (Array Int (Array Int Int))) (|v_#memory_$Pointer$.offset_618| (Array Int (Array Int Int))) (|v_zalloc_or_die_#Ultimate.C_memset_#amount#1_271| Int) (|v_ULTIMATE.start_l4_insert_~list#1.base_23| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#res#1.offset_239| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#value#1_287| Int) (|v_#memory_int_575| (Array Int (Array Int Int))) (|v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_684| Int) (|v_#memory_int_580| (Array Int (Array Int Int)))) (and (= |v_zalloc_or_die_#Ultimate.C_memset_#value#1_287| 0) (= |#memory_$Pointer$.offset| (store |v_#memory_$Pointer$.offset_618| |ULTIMATE.start_l3_insert_~item~1#1.base| (store (select |v_#memory_$Pointer$.offset_618| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8) (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8))))) (not (= (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8)) 0)) (<= 4 (select |#length| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8)))) (<= (mod |v_zalloc_or_die_#Ultimate.C_memset_#amount#1_271| 4294967296) (mod |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_684| 4294967296)) (= (store |v_#memory_int_576| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8)) (store (select |v_#memory_int_576| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8))) 0 (select (select |v_#memory_int_577| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8))) 0))) |v_#memory_int_577|) (= (store |v_#memory_$Pointer$.base_613| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) (store (select |v_#memory_$Pointer$.base_613| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8) (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8)))) |v_#memory_$Pointer$.base_614|) (= (store (store (store |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8)) (store (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8))) 0 (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|))) (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) (store (store (select (store |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8)) (store (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8))) 0 (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|))) (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) |v_ULTIMATE.start_l4_insert_~list#1.base_23|) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 4) (select (select (store (store |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8)) (store (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8))) 0 (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|))) (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) (store (select (store |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8)) (store (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8))) 0 (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|))) (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) |v_ULTIMATE.start_l4_insert_~list#1.base_23|)) |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|))) |v_ULTIMATE.start_l4_insert_~list#1.base_23| (store (select (store (store |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8)) (store (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8))) 0 (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|))) (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) (store (store (select (store |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8)) (store (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8))) 0 (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|))) (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) |v_ULTIMATE.start_l4_insert_~list#1.base_23|) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 4) (select (select (store (store |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8)) (store (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8))) 0 (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|))) (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) (store (select (store |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8)) (store (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8))) 0 (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|))) (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) |v_ULTIMATE.start_l4_insert_~list#1.base_23|)) |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|))) |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|))) |v_#memory_$Pointer$.base_618|) (<= 0 |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_684|) (= (select |#valid| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8))) 1) (= (store |v_#memory_int_579| |v_ULTIMATE.start_l4_insert_~list#1.base_23| (store (select |v_#memory_int_579| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20| (select (select |v_#memory_int_580| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|))) |v_#memory_int_580|) (= (store |v_#memory_int_577| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) (store (select |v_#memory_int_577| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) (select (select |v_#memory_int_578| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)))) |v_#memory_int_578|) (= |v_zalloc_or_die_#Ultimate.C_memset_#res#1.offset_239| 0) (= (store (store (store |v_#memory_$Pointer$.offset_614| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8)) (store (select |v_#memory_$Pointer$.offset_614| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|))) (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) (store (store (select (store |v_#memory_$Pointer$.offset_614| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8)) (store (select |v_#memory_$Pointer$.offset_614| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|))) (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 4) (select (select (store (store |v_#memory_$Pointer$.offset_614| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8)) (store (select |v_#memory_$Pointer$.offset_614| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|))) (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) (store (select (store |v_#memory_$Pointer$.offset_614| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8)) (store (select |v_#memory_$Pointer$.offset_614| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|))) (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|))) |v_ULTIMATE.start_l4_insert_~list#1.base_23| (store (select (store (store |v_#memory_$Pointer$.offset_614| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8)) (store (select |v_#memory_$Pointer$.offset_614| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|))) (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) (store (store (select (store |v_#memory_$Pointer$.offset_614| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8)) (store (select |v_#memory_$Pointer$.offset_614| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|))) (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 4) (select (select (store (store |v_#memory_$Pointer$.offset_614| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8)) (store (select |v_#memory_$Pointer$.offset_614| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|))) (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) (store (select (store |v_#memory_$Pointer$.offset_614| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8)) (store (select |v_#memory_$Pointer$.offset_614| (select (select |v_#memory_$Pointer$.base_614| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|))) (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|))) |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20| (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|))) |v_#memory_$Pointer$.offset_618|) (<= 0 (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (<= (+ 4 |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) (select |#length| |v_ULTIMATE.start_l4_insert_~list#1.base_23|)) (= (store |v_#memory_$Pointer$.base_618| |ULTIMATE.start_l3_insert_~item~1#1.base| (store (select |v_#memory_$Pointer$.base_618| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8) (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8)))) |#memory_$Pointer$.base|) (<= 0 |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) (<= (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 12) (select |#length| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|))) (= |#memory_int| (store |v_#memory_int_580| |ULTIMATE.start_l3_insert_~item~1#1.base| (store (select |v_#memory_int_580| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8) (select (select |#memory_int| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8))))) (= (select |#valid| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) 1) (= (select |#valid| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) 1) (= (store |v_#memory_int_575| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) (store (select |v_#memory_int_575| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8) (select (select |v_#memory_int_576| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8)))) |v_#memory_int_576|) (= (store |v_#memory_int_578| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) (store (select |v_#memory_int_578| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 4) (select (select |v_#memory_int_579| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 4)))) |v_#memory_int_579|) (= (store |v_#memory_$Pointer$.offset_613| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) (store (select |v_#memory_$Pointer$.offset_613| (select (select |v_#memory_$Pointer$.base_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|)) (+ (select (select |v_#memory_$Pointer$.offset_618| |v_ULTIMATE.start_l4_insert_~list#1.base_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_20|) 8) 0)) |v_#memory_$Pointer$.offset_614|))) (<= 1 |#StackHeapBarrier|) (= |~#list~0.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.base| 3) (<= 0 (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8)) (= 3 |~#list~0.base|) (= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (= (select |#valid| |ULTIMATE.start_l3_insert_~item~1#1.base|) 1) (or (< (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8)) 0) (< (select |#length| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8))) (+ 4 (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8))))) (<= (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 12) (select |#length| |ULTIMATE.start_l3_insert_~item~1#1.base|)))' at error location [2024-11-09 06:33:50,659 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2024-11-09 06:33:50,659 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-11-09 06:33:50,659 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25, 15, 15] total 51 [2024-11-09 06:33:50,659 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [812577920] [2024-11-09 06:33:50,659 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-11-09 06:33:50,660 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 51 states [2024-11-09 06:33:50,660 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-09 06:33:50,661 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 51 interpolants. [2024-11-09 06:33:50,661 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=380, Invalid=5466, Unknown=6, NotChecked=0, Total=5852 [2024-11-09 06:33:50,662 INFO L87 Difference]: Start difference. First operand 310 states and 379 transitions. Second operand has 51 states, 46 states have (on average 1.9782608695652173) internal successors, (91), 49 states have internal predecessors, (91), 2 states have call successors, (8), 2 states have call predecessors, (8), 6 states have return successors, (10), 5 states have call predecessors, (10), 2 states have call successors, (10) [2024-11-09 06:34:07,344 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 06:34:07,344 INFO L93 Difference]: Finished difference Result 387 states and 489 transitions. [2024-11-09 06:34:07,344 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2024-11-09 06:34:07,345 INFO L78 Accepts]: Start accepts. Automaton has has 51 states, 46 states have (on average 1.9782608695652173) internal successors, (91), 49 states have internal predecessors, (91), 2 states have call successors, (8), 2 states have call predecessors, (8), 6 states have return successors, (10), 5 states have call predecessors, (10), 2 states have call successors, (10) Word has length 119 [2024-11-09 06:34:07,345 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 06:34:07,346 INFO L225 Difference]: With dead ends: 387 [2024-11-09 06:34:07,346 INFO L226 Difference]: Without dead ends: 349 [2024-11-09 06:34:07,349 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 425 GetRequests, 302 SyntacticMatches, 6 SemanticMatches, 117 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3628 ImplicationChecksByTransitivity, 63.4s TimeCoverageRelationStatistics Valid=1679, Invalid=12357, Unknown=6, NotChecked=0, Total=14042 [2024-11-09 06:34:07,350 INFO L432 NwaCegarLoop]: 142 mSDtfsCounter, 108 mSDsluCounter, 2326 mSDsCounter, 0 mSdLazyCounter, 2146 mSolverCounterSat, 77 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 108 SdHoareTripleChecker+Valid, 2468 SdHoareTripleChecker+Invalid, 2223 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 77 IncrementalHoareTripleChecker+Valid, 2146 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2024-11-09 06:34:07,350 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [108 Valid, 2468 Invalid, 2223 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [77 Valid, 2146 Invalid, 0 Unknown, 0 Unchecked, 2.4s Time] [2024-11-09 06:34:07,350 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 349 states. [2024-11-09 06:34:07,361 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 349 to 336. [2024-11-09 06:34:07,363 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 336 states, 241 states have (on average 1.4688796680497926) internal successors, (354), 310 states have internal predecessors, (354), 20 states have call successors, (20), 4 states have call predecessors, (20), 6 states have return successors, (33), 21 states have call predecessors, (33), 20 states have call successors, (33) [2024-11-09 06:34:07,365 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 336 states to 336 states and 407 transitions. [2024-11-09 06:34:07,366 INFO L78 Accepts]: Start accepts. Automaton has 336 states and 407 transitions. Word has length 119 [2024-11-09 06:34:07,366 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 06:34:07,366 INFO L471 AbstractCegarLoop]: Abstraction has 336 states and 407 transitions. [2024-11-09 06:34:07,366 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 51 states, 46 states have (on average 1.9782608695652173) internal successors, (91), 49 states have internal predecessors, (91), 2 states have call successors, (8), 2 states have call predecessors, (8), 6 states have return successors, (10), 5 states have call predecessors, (10), 2 states have call successors, (10) [2024-11-09 06:34:07,367 INFO L276 IsEmpty]: Start isEmpty. Operand 336 states and 407 transitions. [2024-11-09 06:34:07,368 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 137 [2024-11-09 06:34:07,368 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 06:34:07,368 INFO L215 NwaCegarLoop]: trace histogram [79, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 06:34:07,392 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Ended with exit code 0 [2024-11-09 06:34:07,568 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable20 [2024-11-09 06:34:07,569 INFO L396 AbstractCegarLoop]: === Iteration 22 === Targeting ULTIMATE.startErr17REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 86 more)] === [2024-11-09 06:34:07,569 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 06:34:07,570 INFO L85 PathProgramCache]: Analyzing trace with hash 1823719641, now seen corresponding path program 3 times [2024-11-09 06:34:07,570 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 06:34:07,570 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [715481675] [2024-11-09 06:34:07,570 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 06:34:07,570 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 06:34:07,824 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 06:34:11,473 INFO L134 CoverageAnalysis]: Checked inductivity of 3630 backedges. 1793 proven. 357 refuted. 0 times theorem prover too weak. 1480 trivial. 0 not checked. [2024-11-09 06:34:11,473 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-09 06:34:11,473 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [715481675] [2024-11-09 06:34:11,473 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [715481675] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-09 06:34:11,473 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1959546463] [2024-11-09 06:34:11,473 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2024-11-09 06:34:11,473 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-09 06:34:11,473 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 [2024-11-09 06:34:11,474 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-09 06:34:11,476 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2024-11-09 06:34:19,447 INFO L227 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2024-11-09 06:34:19,447 INFO L228 tOrderPrioritization]: Conjunction of SSA is unsat [2024-11-09 06:34:19,463 INFO L255 TraceCheckSpWp]: Trace formula consists of 1776 conjuncts, 167 conjuncts are in the unsatisfiable core [2024-11-09 06:34:19,468 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-09 06:34:20,016 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 9 [2024-11-09 06:34:20,026 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2024-11-09 06:34:27,497 WARN L873 $PredicateComparison]: unable to prove that (exists ((|zalloc_or_die_calloc_model_~ptr~0#1.base| Int)) (and (= (store |c_old(#length)| |zalloc_or_die_calloc_model_~ptr~0#1.base| (select |c_#length| |zalloc_or_die_calloc_model_~ptr~0#1.base|)) |c_#length|) (= (select |c_old(#valid)| |zalloc_or_die_calloc_model_~ptr~0#1.base|) 0))) is different from true [2024-11-09 06:34:29,139 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-11-09 06:34:29,140 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 13 [2024-11-09 06:34:29,150 INFO L349 Elim1Store]: treesize reduction 4, result has 50.0 percent of original size [2024-11-09 06:34:29,150 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 11 [2024-11-09 06:34:29,366 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-11-09 06:34:29,368 INFO L134 CoverageAnalysis]: Checked inductivity of 3630 backedges. 994 proven. 1763 refuted. 0 times theorem prover too weak. 232 trivial. 641 not checked. [2024-11-09 06:34:29,368 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-11-09 06:34:29,706 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1959546463] provided 0 perfect and 1 imperfect interpolant sequences [2024-11-09 06:34:29,706 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1002064909] [2024-11-09 06:34:29,707 INFO L159 IcfgInterpreter]: Started Sifa with 33 locations of interest [2024-11-09 06:34:29,707 INFO L166 IcfgInterpreter]: Building call graph [2024-11-09 06:34:29,708 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2024-11-09 06:34:29,708 INFO L176 IcfgInterpreter]: Starting interpretation [2024-11-09 06:34:29,708 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2024-11-09 06:34:30,643 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 64 for LOIs [2024-11-09 06:34:30,775 INFO L180 IcfgInterpreter]: Interpretation finished [2024-11-09 06:34:39,715 WARN L286 SmtUtils]: Spent 7.51s on a formula simplification. DAG size of input: 185 DAG size of output: 172 (called from [L 388] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-11-09 06:35:39,042 WARN L286 SmtUtils]: Spent 7.52s on a formula simplification. DAG size of input: 178 DAG size of output: 165 (called from [L 388] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-11-09 06:35:39,043 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '17532#(and (exists ((|v_#memory_$Pointer$.offset_656| (Array Int (Array Int Int))) (|v_#memory_$Pointer$.offset_657| (Array Int (Array Int Int))) (|v_#memory_int_621| (Array Int (Array Int Int))) (|v_#memory_int_620| (Array Int (Array Int Int))) (|v_ULTIMATE.start_l4_insert_~list#1.offset_21| Int) (|v_#memory_$Pointer$.base_657| (Array Int (Array Int Int))) (|v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_778| Int) (|v_#memory_int_623| (Array Int (Array Int Int))) (|v_#memory_int_622| (Array Int (Array Int Int))) (|v_#memory_$Pointer$.base_656| (Array Int (Array Int Int))) (|v_zalloc_or_die_#Ultimate.C_memset_#amount#1_282| Int) (|v_ULTIMATE.start_l4_insert_~list#1.base_24| Int) (|v_#memory_int_618| (Array Int (Array Int Int))) (|v_#memory_int_619| (Array Int (Array Int Int))) (|v_zalloc_or_die_#Ultimate.C_memset_#value#1_297| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#res#1.offset_248| Int) (|v_#memory_$Pointer$.offset_661| (Array Int (Array Int Int))) (|v_#memory_$Pointer$.base_661| (Array Int (Array Int Int)))) (and (= |v_#memory_$Pointer$.offset_657| (store |v_#memory_$Pointer$.offset_656| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) (store (select |v_#memory_$Pointer$.offset_656| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8) 0))) (<= 0 |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) (= (store |v_#memory_int_622| |v_ULTIMATE.start_l4_insert_~list#1.base_24| (store (select |v_#memory_int_622| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21| (select (select |v_#memory_int_623| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|))) |v_#memory_int_623|) (= (select |#valid| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) 1) (= (select |#valid| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8))) 1) (= |v_#memory_int_622| (store |v_#memory_int_621| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) (store (select |v_#memory_int_621| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 4) (select (select |v_#memory_int_622| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 4))))) (= (store |v_#memory_int_619| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8)) (store (select |v_#memory_int_619| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8))) 0 (select (select |v_#memory_int_620| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8))) 0))) |v_#memory_int_620|) (= |v_#memory_$Pointer$.offset_661| (store (store (store |v_#memory_$Pointer$.offset_657| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8)) (store (select |v_#memory_$Pointer$.offset_657| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|))) (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) (store (store (select (store |v_#memory_$Pointer$.offset_657| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8)) (store (select |v_#memory_$Pointer$.offset_657| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|))) (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 4) (select (select (store (store |v_#memory_$Pointer$.offset_657| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8)) (store (select |v_#memory_$Pointer$.offset_657| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|))) (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) (store (select (store |v_#memory_$Pointer$.offset_657| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8)) (store (select |v_#memory_$Pointer$.offset_657| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|))) (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|))) |v_ULTIMATE.start_l4_insert_~list#1.base_24| (store (select (store (store |v_#memory_$Pointer$.offset_657| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8)) (store (select |v_#memory_$Pointer$.offset_657| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|))) (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) (store (store (select (store |v_#memory_$Pointer$.offset_657| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8)) (store (select |v_#memory_$Pointer$.offset_657| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|))) (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 4) (select (select (store (store |v_#memory_$Pointer$.offset_657| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8)) (store (select |v_#memory_$Pointer$.offset_657| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|))) (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) (store (select (store |v_#memory_$Pointer$.offset_657| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8)) (store (select |v_#memory_$Pointer$.offset_657| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|))) (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|))) |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21| (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)))) (= (store (store (store |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8)) (store (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8))) 0 (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|))) (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) (store (store (select (store |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8)) (store (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8))) 0 (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|))) (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) |v_ULTIMATE.start_l4_insert_~list#1.base_24|) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 4) (select (select (store (store |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8)) (store (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8))) 0 (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|))) (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) (store (select (store |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8)) (store (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8))) 0 (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|))) (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) |v_ULTIMATE.start_l4_insert_~list#1.base_24|)) |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|))) |v_ULTIMATE.start_l4_insert_~list#1.base_24| (store (select (store (store |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8)) (store (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8))) 0 (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|))) (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) (store (store (select (store |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8)) (store (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8))) 0 (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|))) (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) |v_ULTIMATE.start_l4_insert_~list#1.base_24|) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 4) (select (select (store (store |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8)) (store (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8))) 0 (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|))) (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) (store (select (store |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8)) (store (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8))) 0 (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|))) (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) |v_ULTIMATE.start_l4_insert_~list#1.base_24|)) |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|))) |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|))) |v_#memory_$Pointer$.base_661|) (= |#memory_$Pointer$.base| (store |v_#memory_$Pointer$.base_661| |ULTIMATE.start_l3_insert_~item~1#1.base| (store (select |v_#memory_$Pointer$.base_661| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8) (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8))))) (= |v_zalloc_or_die_#Ultimate.C_memset_#value#1_297| 0) (<= (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 12) (select |#length| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|))) (= (store |v_#memory_$Pointer$.base_656| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) (store (select |v_#memory_$Pointer$.base_656| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8) (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8)))) |v_#memory_$Pointer$.base_657|) (not (= (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8)) 0)) (= |#memory_$Pointer$.offset| (store |v_#memory_$Pointer$.offset_661| |ULTIMATE.start_l3_insert_~item~1#1.base| (store (select |v_#memory_$Pointer$.offset_661| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8) (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8))))) (= (store |v_#memory_int_618| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) (store (select |v_#memory_int_618| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8) (select (select |v_#memory_int_619| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8)))) |v_#memory_int_619|) (<= (+ 4 |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) (select |#length| |v_ULTIMATE.start_l4_insert_~list#1.base_24|)) (= (store |v_#memory_int_620| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) (store (select |v_#memory_int_620| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) (select (select |v_#memory_int_621| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)))) |v_#memory_int_621|) (= |#memory_int| (store |v_#memory_int_623| |ULTIMATE.start_l3_insert_~item~1#1.base| (store (select |v_#memory_int_623| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8) (select (select |#memory_int| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8))))) (= |v_zalloc_or_die_#Ultimate.C_memset_#res#1.offset_248| 0) (<= 0 |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_778|) (<= (mod |v_zalloc_or_die_#Ultimate.C_memset_#amount#1_282| 4294967296) (mod |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_778| 4294967296)) (= (select |#valid| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) 1) (<= 0 (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (<= 4 (select |#length| (select (select |v_#memory_$Pointer$.base_657| (select (select |v_#memory_$Pointer$.base_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|)) (+ (select (select |v_#memory_$Pointer$.offset_661| |v_ULTIMATE.start_l4_insert_~list#1.base_24|) |v_ULTIMATE.start_l4_insert_~list#1.offset_21|) 8)))))) (<= 1 |#StackHeapBarrier|) (= |~#list~0.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.base| 3) (<= 0 (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8)) (= 3 |~#list~0.base|) (= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (= (select |#valid| |ULTIMATE.start_l3_insert_~item~1#1.base|) 1) (or (< (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8)) 0) (< (select |#length| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8))) (+ 4 (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8))))) (<= (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 12) (select |#length| |ULTIMATE.start_l3_insert_~item~1#1.base|)))' at error location [2024-11-09 06:35:39,044 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2024-11-09 06:35:39,044 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-11-09 06:35:39,044 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 47] total 66 [2024-11-09 06:35:39,044 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [299395123] [2024-11-09 06:35:39,044 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-11-09 06:35:39,045 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 66 states [2024-11-09 06:35:39,045 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-09 06:35:39,045 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 66 interpolants. [2024-11-09 06:35:39,046 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=330, Invalid=8219, Unknown=11, NotChecked=182, Total=8742 [2024-11-09 06:35:39,047 INFO L87 Difference]: Start difference. First operand 336 states and 407 transitions. Second operand has 66 states, 61 states have (on average 1.5901639344262295) internal successors, (97), 61 states have internal predecessors, (97), 3 states have call successors, (7), 2 states have call predecessors, (7), 5 states have return successors, (8), 5 states have call predecessors, (8), 3 states have call successors, (8) [2024-11-09 06:35:46,850 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-11-09 06:35:46,851 INFO L93 Difference]: Finished difference Result 355 states and 441 transitions. [2024-11-09 06:35:46,851 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2024-11-09 06:35:46,852 INFO L78 Accepts]: Start accepts. Automaton has has 66 states, 61 states have (on average 1.5901639344262295) internal successors, (97), 61 states have internal predecessors, (97), 3 states have call successors, (7), 2 states have call predecessors, (7), 5 states have return successors, (8), 5 states have call predecessors, (8), 3 states have call successors, (8) Word has length 136 [2024-11-09 06:35:46,852 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-11-09 06:35:46,853 INFO L225 Difference]: With dead ends: 355 [2024-11-09 06:35:46,853 INFO L226 Difference]: Without dead ends: 346 [2024-11-09 06:35:46,854 INFO L431 NwaCegarLoop]: 0 DeclaredPredicates, 322 GetRequests, 208 SyntacticMatches, 6 SemanticMatches, 108 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 3590 ImplicationChecksByTransitivity, 81.4s TimeCoverageRelationStatistics Valid=482, Invalid=11283, Unknown=11, NotChecked=214, Total=11990 [2024-11-09 06:35:46,854 INFO L432 NwaCegarLoop]: 149 mSDtfsCounter, 4 mSDsluCounter, 3734 mSDsCounter, 0 mSdLazyCounter, 3427 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4 SdHoareTripleChecker+Valid, 3883 SdHoareTripleChecker+Invalid, 3630 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 3427 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 197 IncrementalHoareTripleChecker+Unchecked, 4.7s IncrementalHoareTripleChecker+Time [2024-11-09 06:35:46,854 INFO L433 NwaCegarLoop]: SdHoareTripleChecker [4 Valid, 3883 Invalid, 3630 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 3427 Invalid, 0 Unknown, 197 Unchecked, 4.7s Time] [2024-11-09 06:35:46,855 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 346 states. [2024-11-09 06:35:46,866 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 346 to 338. [2024-11-09 06:35:46,868 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 338 states, 242 states have (on average 1.4669421487603307) internal successors, (355), 311 states have internal predecessors, (355), 21 states have call successors, (21), 4 states have call predecessors, (21), 6 states have return successors, (31), 22 states have call predecessors, (31), 20 states have call successors, (31) [2024-11-09 06:35:46,870 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 338 states to 338 states and 407 transitions. [2024-11-09 06:35:46,870 INFO L78 Accepts]: Start accepts. Automaton has 338 states and 407 transitions. Word has length 136 [2024-11-09 06:35:46,871 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-11-09 06:35:46,871 INFO L471 AbstractCegarLoop]: Abstraction has 338 states and 407 transitions. [2024-11-09 06:35:46,871 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 66 states, 61 states have (on average 1.5901639344262295) internal successors, (97), 61 states have internal predecessors, (97), 3 states have call successors, (7), 2 states have call predecessors, (7), 5 states have return successors, (8), 5 states have call predecessors, (8), 3 states have call successors, (8) [2024-11-09 06:35:46,871 INFO L276 IsEmpty]: Start isEmpty. Operand 338 states and 407 transitions. [2024-11-09 06:35:46,872 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 138 [2024-11-09 06:35:46,872 INFO L207 NwaCegarLoop]: Found error trace [2024-11-09 06:35:46,872 INFO L215 NwaCegarLoop]: trace histogram [80, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-11-09 06:35:46,951 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Ended with exit code 0 [2024-11-09 06:35:47,073 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable21 [2024-11-09 06:35:47,073 INFO L396 AbstractCegarLoop]: === Iteration 23 === Targeting ULTIMATE.startErr17REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 86 more)] === [2024-11-09 06:35:47,074 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-11-09 06:35:47,074 INFO L85 PathProgramCache]: Analyzing trace with hash -1296115410, now seen corresponding path program 4 times [2024-11-09 06:35:47,074 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2024-11-09 06:35:47,074 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [910031818] [2024-11-09 06:35:47,074 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-11-09 06:35:47,075 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-11-09 06:35:47,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-11-09 06:35:47,760 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [667893743] [2024-11-09 06:35:47,760 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2024-11-09 06:35:47,760 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-11-09 06:35:47,760 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 [2024-11-09 06:35:47,762 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-11-09 06:35:47,763 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_36170f1e-1325-4ebf-b1bf-b2f7891641a6/bin/utaipan-verify-YMUCfTKeje/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2024-11-09 06:35:52,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-11-09 06:35:53,000 INFO L255 TraceCheckSpWp]: Trace formula consists of 1791 conjuncts, 132 conjuncts are in the unsatisfiable core [2024-11-09 06:35:53,006 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2024-11-09 06:35:53,118 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2024-11-09 06:35:53,169 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2024-11-09 06:35:53,678 INFO L134 CoverageAnalysis]: Checked inductivity of 3715 backedges. 1546 proven. 253 refuted. 0 times theorem prover too weak. 1916 trivial. 0 not checked. [2024-11-09 06:35:53,679 INFO L311 TraceCheckSpWp]: Computing backward predicates... [2024-11-09 06:35:54,955 INFO L134 CoverageAnalysis]: Checked inductivity of 3715 backedges. 147 proven. 822 refuted. 0 times theorem prover too weak. 2746 trivial. 0 not checked. [2024-11-09 06:35:54,955 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2024-11-09 06:35:54,955 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [910031818] [2024-11-09 06:35:54,955 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-11-09 06:35:54,955 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [667893743] [2024-11-09 06:35:54,955 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [667893743] provided 0 perfect and 2 imperfect interpolant sequences [2024-11-09 06:35:54,955 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1090067183] [2024-11-09 06:35:54,957 INFO L159 IcfgInterpreter]: Started Sifa with 33 locations of interest [2024-11-09 06:35:54,957 INFO L166 IcfgInterpreter]: Building call graph [2024-11-09 06:35:54,957 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2024-11-09 06:35:54,957 INFO L176 IcfgInterpreter]: Starting interpretation [2024-11-09 06:35:54,957 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2024-11-09 06:35:55,780 INFO L197 IcfgInterpreter]: Interpreting procedure zalloc_or_die with input of size 64 for LOIs [2024-11-09 06:35:55,902 INFO L180 IcfgInterpreter]: Interpretation finished [2024-11-09 06:36:04,165 WARN L286 SmtUtils]: Spent 6.96s on a formula simplification. DAG size of input: 185 DAG size of output: 172 (called from [L 388] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-11-09 06:36:48,278 WARN L286 SmtUtils]: Spent 7.23s on a formula simplification. DAG size of input: 178 DAG size of output: 165 (called from [L 388] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-11-09 06:36:48,279 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '19140#(and (<= 1 |#StackHeapBarrier|) (= |~#list~0.offset| 0) (= |ULTIMATE.start_l0_insert_~list#1.base| 3) (<= 0 (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8)) (= 3 |~#list~0.base|) (exists ((|v_#memory_$Pointer$.offset_786| (Array Int (Array Int Int))) (|v_#memory_int_746| (Array Int (Array Int Int))) (|v_#memory_int_745| (Array Int (Array Int Int))) (|v_#memory_int_748| (Array Int (Array Int Int))) (|v_#memory_int_747| (Array Int (Array Int Int))) (|v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_923| Int) (|v_#memory_int_744| (Array Int (Array Int Int))) (|v_#memory_int_743| (Array Int (Array Int Int))) (|v_ULTIMATE.start_l4_insert_~list#1.base_26| Int) (|v_ULTIMATE.start_l4_insert_~list#1.offset_23| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#res#1.offset_273| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#value#1_329| Int) (|v_zalloc_or_die_#Ultimate.C_memset_#amount#1_312| Int) (|v_#memory_$Pointer$.base_786| (Array Int (Array Int Int))) (|v_#memory_$Pointer$.offset_781| (Array Int (Array Int Int))) (|v_#memory_$Pointer$.offset_782| (Array Int (Array Int Int))) (|v_#memory_$Pointer$.base_782| (Array Int (Array Int Int))) (|v_#memory_$Pointer$.base_781| (Array Int (Array Int Int)))) (and (= (store |v_#memory_$Pointer$.base_786| |ULTIMATE.start_l3_insert_~item~1#1.base| (store (select |v_#memory_$Pointer$.base_786| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8) (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8)))) |#memory_$Pointer$.base|) (= (store (store (store |v_#memory_$Pointer$.offset_782| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8)) (store (select |v_#memory_$Pointer$.offset_782| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|))) (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) (store (store (select (store |v_#memory_$Pointer$.offset_782| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8)) (store (select |v_#memory_$Pointer$.offset_782| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|))) (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 4) (select (select (store (store |v_#memory_$Pointer$.offset_782| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8)) (store (select |v_#memory_$Pointer$.offset_782| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|))) (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) (store (select (store |v_#memory_$Pointer$.offset_782| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8)) (store (select |v_#memory_$Pointer$.offset_782| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|))) (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|))) |v_ULTIMATE.start_l4_insert_~list#1.base_26| (store (select (store (store |v_#memory_$Pointer$.offset_782| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8)) (store (select |v_#memory_$Pointer$.offset_782| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|))) (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) (store (store (select (store |v_#memory_$Pointer$.offset_782| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8)) (store (select |v_#memory_$Pointer$.offset_782| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|))) (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 4) (select (select (store (store |v_#memory_$Pointer$.offset_782| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8)) (store (select |v_#memory_$Pointer$.offset_782| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|))) (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) (store (select (store |v_#memory_$Pointer$.offset_782| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8)) (store (select |v_#memory_$Pointer$.offset_782| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8))) 0 (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|))) (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|))) |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23| (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|))) |v_#memory_$Pointer$.offset_786|) (<= 0 |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) (= |#memory_int| (store |v_#memory_int_748| |ULTIMATE.start_l3_insert_~item~1#1.base| (store (select |v_#memory_int_748| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8) (select (select |#memory_int| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8))))) (= (store |v_#memory_int_747| |v_ULTIMATE.start_l4_insert_~list#1.base_26| (store (select |v_#memory_int_747| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23| (select (select |v_#memory_int_748| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|))) |v_#memory_int_748|) (= (store |v_#memory_$Pointer$.base_781| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) (store (select |v_#memory_$Pointer$.base_781| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8) (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8)))) |v_#memory_$Pointer$.base_782|) (<= (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 12) (select |#length| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|))) (= (select |#valid| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) 1) (<= 0 |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_923|) (= |v_zalloc_or_die_#Ultimate.C_memset_#res#1.offset_273| 0) (<= (+ 4 |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) (select |#length| |v_ULTIMATE.start_l4_insert_~list#1.base_26|)) (= (select |#valid| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) 1) (<= (mod |v_zalloc_or_die_#Ultimate.C_memset_#amount#1_312| 4294967296) (mod |v_zalloc_or_die_#Ultimate.C_memset_#t~loopctr35#1_923| 4294967296)) (= (store (store (store |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8)) (store (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8))) 0 (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|))) (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) (store (store (select (store |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8)) (store (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8))) 0 (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|))) (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) |v_ULTIMATE.start_l4_insert_~list#1.base_26|) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 4) (select (select (store (store |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8)) (store (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8))) 0 (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|))) (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) (store (select (store |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8)) (store (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8))) 0 (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|))) (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) |v_ULTIMATE.start_l4_insert_~list#1.base_26|)) |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|))) |v_ULTIMATE.start_l4_insert_~list#1.base_26| (store (select (store (store |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8)) (store (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8))) 0 (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|))) (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) (store (store (select (store |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8)) (store (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8))) 0 (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|))) (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) |v_ULTIMATE.start_l4_insert_~list#1.base_26|) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 4) (select (select (store (store |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8)) (store (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8))) 0 (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|))) (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) (store (select (store |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8)) (store (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8))) 0 (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|))) (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) |v_ULTIMATE.start_l4_insert_~list#1.base_26|)) |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|))) |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|))) |v_#memory_$Pointer$.base_786|) (= (store |v_#memory_int_746| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) (store (select |v_#memory_int_746| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 4) (select (select |v_#memory_int_747| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 4)))) |v_#memory_int_747|) (<= 4 (select |#length| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8)))) (not (= (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8)) 0)) (= (store |v_#memory_int_743| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) (store (select |v_#memory_int_743| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8) (select (select |v_#memory_int_744| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8)))) |v_#memory_int_744|) (<= 0 (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (= |#memory_$Pointer$.offset| (store |v_#memory_$Pointer$.offset_786| |ULTIMATE.start_l3_insert_~item~1#1.base| (store (select |v_#memory_$Pointer$.offset_786| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8) (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8))))) (= |v_#memory_$Pointer$.offset_782| (store |v_#memory_$Pointer$.offset_781| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) (store (select |v_#memory_$Pointer$.offset_781| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8) 0))) (= |v_#memory_int_746| (store |v_#memory_int_745| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) (store (select |v_#memory_int_745| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) (select (select |v_#memory_int_746| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|))))) (= (store |v_#memory_int_744| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8)) (store (select |v_#memory_int_744| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8))) 0 (select (select |v_#memory_int_745| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8))) 0))) |v_#memory_int_745|) (= (select |#valid| (select (select |v_#memory_$Pointer$.base_782| (select (select |v_#memory_$Pointer$.base_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|)) (+ (select (select |v_#memory_$Pointer$.offset_786| |v_ULTIMATE.start_l4_insert_~list#1.base_26|) |v_ULTIMATE.start_l4_insert_~list#1.offset_23|) 8))) 1) (= |v_zalloc_or_die_#Ultimate.C_memset_#value#1_329| 0))) (= |ULTIMATE.start_l0_insert_~list#1.offset| 0) (= (select |#valid| |ULTIMATE.start_l3_insert_~item~1#1.base|) 1) (or (< (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8)) 0) (< (select |#length| (select (select |#memory_$Pointer$.base| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8))) (+ 4 (select (select |#memory_$Pointer$.offset| |ULTIMATE.start_l3_insert_~item~1#1.base|) (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 8))))) (<= (+ |ULTIMATE.start_l3_insert_~item~1#1.offset| 12) (select |#length| |ULTIMATE.start_l3_insert_~item~1#1.base|)))' at error location [2024-11-09 06:36:48,279 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2024-11-09 06:36:48,280 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-11-09 06:36:48,280 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [27, 16] total 41 [2024-11-09 06:36:48,280 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1689803123] [2024-11-09 06:36:48,280 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-11-09 06:36:48,281 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 41 states [2024-11-09 06:36:48,281 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2024-11-09 06:36:48,282 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 41 interpolants. [2024-11-09 06:36:48,282 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=355, Invalid=4058, Unknown=9, NotChecked=0, Total=4422 [2024-11-09 06:36:48,282 INFO L87 Difference]: Start difference. First operand 338 states and 407 transitions. Second operand has 41 states, 39 states have (on average 1.8717948717948718) internal successors, (73), 41 states have internal predecessors, (73), 2 states have call successors, (10), 2 states have call predecessors, (10), 4 states have return successors, (11), 2 states have call predecessors, (11), 2 states have call successors, (11)